Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dCm7K74a7YmsVpx07P9g_1PJiKo.roa
File: dCm7K74a7YmsVpx07P9g_1PJiKo.roa (raw, json)
Hash identifier: Wl/QAZ5xKS+K/FOOlsOMB/UB1vexDBVpfrbzQydmZkg=
Subject key identifier: 74:29:BB:2B:BE:1A:ED:89:AC:56:9C:74:EC:FF:60:FF:53:C9:88:AA
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019A112FE65E08E66017AF15B840277007C1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dCm7K74a7YmsVpx07P9g_1PJiKo.roa
Signing time: Thu 23 Oct 2025 13:09:03 +0000
ROA not before: Thu 23 Oct 2025 13:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 135.196.155.0/24 maxlen: 24
135.196.166.0/24 maxlen: 24
135.196.236.0/24 maxlen: 24
135.196.244.0/24 maxlen: 24
135.196.248.0/24 maxlen: 24
135.196.252.0/24 maxlen: 24
135.196.254.0/24 maxlen: 24
194.231.144.0/22 maxlen: 24
195.86.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:2f:e6:5e:08:e6:60:17:af:15:b8:40:27:70:07:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 23 13:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7429bb2bbe1aed89ac569c74ecff60ff53c988aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:96:db:03:f9:d5:8a:de:01:f3:50:b6:f2:
e8:92:0a:1d:08:e4:1a:5b:e4:42:be:8b:00:cf:45:
7c:0a:41:4f:02:f4:ec:48:d9:0b:1f:59:85:62:f9:
9b:9b:8b:f5:0c:23:1b:7a:d7:50:01:b0:bc:96:53:
e2:35:71:3e:f3:b6:9b:8a:1f:a8:ea:3c:5c:04:73:
cf:d4:04:4b:4e:09:fe:0b:f8:88:fb:c1:72:5f:45:
52:10:34:99:5d:ce:30:de:d4:e0:33:51:76:25:96:
90:e9:11:f1:6c:b9:30:24:7a:7a:ad:a3:87:03:d9:
7f:63:04:c9:56:51:68:58:83:59:cc:2a:e3:8f:df:
83:cf:f6:43:c6:0a:89:57:96:be:cd:23:40:4a:ca:
d7:ad:74:1b:d4:a6:56:23:55:10:00:ae:e7:0e:fc:
cb:36:e0:a2:a9:6a:82:7d:9f:7a:30:75:14:a7:7e:
a9:a9:3c:e3:30:3d:9f:f8:55:07:d1:69:b1:68:04:
b1:4a:2a:40:9b:8f:d9:bc:f3:59:0e:3b:e5:52:0c:
0a:8b:93:36:b1:30:7c:ca:88:22:12:5f:fa:ce:5b:
01:51:1f:7c:9a:dd:33:5d:83:0a:73:3b:0b:58:66:
ff:5b:f8:08:09:95:26:9c:51:58:c0:4d:3f:ad:e3:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:29:BB:2B:BE:1A:ED:89:AC:56:9C:74:EC:FF:60:FF:53:C9:88:AA
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/dCm7K74a7YmsVpx07P9g_1PJiKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.196.155.0/24
135.196.166.0/24
135.196.236.0/24
135.196.244.0/24
135.196.248.0/24
135.196.252.0/24
135.196.254.0/24
194.231.144.0/22
195.86.238.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e5:c9:9c:e0:72:5a:9b:0a:af:de:e3:c3:1f:88:48:de:f5:
47:c6:8a:39:e0:6a:17:2d:2b:d6:ad:c5:18:90:59:f9:b5:47:
9e:2e:89:3c:1f:57:5b:71:4a:fa:6e:fb:ec:55:99:df:1f:95:
2e:65:dd:80:a1:15:67:be:29:63:fa:28:7e:de:0b:03:dc:f8:
2d:e0:69:04:90:5e:c0:ed:2d:88:33:a7:32:81:37:55:1a:0b:
cc:aa:f0:b8:7b:2b:a0:ea:f7:3e:da:d2:c6:37:ef:0b:f1:97:
88:18:eb:b6:9d:37:87:da:55:4c:11:93:48:52:81:be:1f:87:
94:1f:4a:92:8d:fb:ed:6f:33:5b:d1:2a:24:ee:08:b1:48:b9:
96:d4:29:1c:7a:35:07:28:26:4a:5d:dc:93:5b:5c:5d:e1:17:
aa:34:00:93:54:4a:92:84:a4:91:6b:fe:3b:68:3c:c9:8a:22:
e2:94:54:23:0f:6e:15:4e:22:27:37:c2:b4:b2:96:26:f2:2c:
a9:3d:10:41:2e:af:50:b9:a9:9e:cd:fb:21:34:42:ef:9c:b4:
9c:fb:b2:0b:3e:31:fe:1a:f1:b9:45:79:1b:5b:0e:b4:38:59:
8a:51:7b:51:58:01:5e:26:91:60:99:36:9d:c0:72:24:6e:88:
d4:af:6e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 15:17:02 2025 by rpki-client