Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/ft2mxf9aaNoul-AnIThMbBr-lps.roa
File: ft2mxf9aaNoul-AnIThMbBr-lps.roa (raw, json)
Hash identifier: xnKzHyjITrVDUs70AuSd+gwg5cbW8huGbxIys16mcfk=
Subject key identifier: 7E:DD:A6:C5:FF:5A:68:DA:2E:97:E0:27:21:38:4C:6C:1A:FE:96:9B
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 01971792529D6CAE9845D520917D3D7A804C
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/ft2mxf9aaNoul-AnIThMbBr-lps.roa
Signing time: Wed 28 May 2025 15:45:54 +0000
ROA not before: Wed 28 May 2025 15:45:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 66.245.192.0/19 maxlen: 32
78.141.192.0/18 maxlen: 32
78.141.192.0/19 maxlen: 32
78.141.224.0/19 maxlen: 32
80.240.16.0/20 maxlen: 32
95.179.128.0/17 maxlen: 32
185.92.220.0/22 maxlen: 32
192.248.128.0/18 maxlen: 32
199.247.0.0/19 maxlen: 32
209.250.224.0/19 maxlen: 32
217.69.0.0/20 maxlen: 32
2a05:f480::/29 maxlen: 48
2a05:f480:1000::/38 maxlen: 38
2a05:f480:1400::/38 maxlen: 38
2a05:f480:1800::/38 maxlen: 38
2a05:f480:1c00::/38 maxlen: 38
2a05:f480:2000::/38 maxlen: 38
2a05:f480:2400::/38 maxlen: 38
2a05:f480:2800::/38 maxlen: 38
2a05:f480:2c00::/38 maxlen: 38
2a05:f480:3000::/38 maxlen: 38
2a05:f480:3400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:92:52:9d:6c:ae:98:45:d5:20:91:7d:3d:7a:80:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: May 28 15:45:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7edda6c5ff5a68da2e97e02721384c6c1afe969b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:40:8d:90:87:c6:22:56:5d:d6:8b:27:21:
a7:77:1a:0d:aa:7c:e6:c1:43:3e:f6:36:65:30:5a:
1e:40:d9:af:0f:92:14:5f:bb:7d:ab:d4:13:57:38:
fc:cd:e7:09:e8:3b:4e:51:61:2d:8f:8b:9d:75:e5:
ac:ff:e3:07:ff:f6:c0:81:49:07:e8:11:d8:9d:2a:
2a:ba:21:51:95:1e:04:cf:72:28:72:74:c1:96:7d:
f6:d2:5e:6c:ef:2d:8a:e4:c9:30:d8:a4:7c:85:21:
dc:2f:90:4a:1e:8f:c6:d6:3e:d7:79:1f:2b:5c:00:
97:7e:f5:2b:ae:07:31:55:ec:d7:da:f9:bf:83:b5:
1a:b2:c3:f2:79:6b:42:b5:9d:11:d7:2f:8d:52:da:
f3:00:0e:32:a6:e8:d5:2e:91:03:c1:31:2a:3c:75:
69:e9:c8:0c:9e:b1:75:7c:b2:58:b1:ce:c8:a5:8b:
5c:01:6e:ab:ee:08:c7:1e:0d:ae:bf:ee:54:2f:21:
2b:fd:f5:00:7a:50:1d:b7:86:18:63:4c:fd:bb:08:
7e:7a:ae:78:35:b2:83:3f:65:ad:c0:df:5f:f1:dc:
08:6f:7b:d1:07:cd:7d:d0:47:4b:25:c8:5f:51:46:
d8:b4:3a:ea:7a:25:02:e1:f8:08:21:7d:29:14:ef:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DD:A6:C5:FF:5A:68:DA:2E:97:E0:27:21:38:4C:6C:1A:FE:96:9B
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/ft2mxf9aaNoul-AnIThMbBr-lps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.245.192.0/19
78.141.192.0/18
80.240.16.0/20
95.179.128.0/17
185.92.220.0/22
192.248.128.0/18
199.247.0.0/19
209.250.224.0/19
217.69.0.0/20
IPv6:
2a05:f480::/29
Signature Algorithm: sha256WithRSAEncryption
90:c7:a7:13:a6:92:87:79:7c:78:db:6d:84:21:79:b0:f4:5a:
7f:0a:31:2e:1f:52:18:26:3f:f9:ae:83:4b:c7:f3:4b:9f:a7:
11:a7:17:29:0c:da:75:41:b1:14:8c:32:e0:17:60:56:08:e7:
0f:26:67:ad:86:2b:58:4c:b4:94:f3:f4:28:63:60:da:e7:4a:
80:c4:07:65:17:92:ec:2d:24:27:ea:94:99:9d:88:83:89:64:
ac:00:4c:a4:d5:08:96:48:03:13:d2:7d:7f:04:66:35:90:34:
5c:48:b3:15:31:a4:d4:b2:c4:ed:58:2f:62:9d:80:7a:f1:61:
f3:a7:ea:f1:08:42:e2:2d:87:4c:29:56:15:c6:ab:04:d4:9e:
88:87:c7:c6:00:8a:4b:40:d1:ae:aa:98:5d:36:5d:35:d2:7c:
49:d3:00:a3:78:21:fe:43:e7:57:4f:f7:86:34:8c:b3:5e:8c:
d3:b6:21:86:64:ab:e5:90:a4:29:02:37:6f:c8:72:5d:0e:ab:
f0:b0:0d:41:a6:2a:19:38:4d:76:40:9e:ce:32:7f:52:82:53:
b6:02:f6:b3:17:0b:5a:fe:6b:ab:ff:6a:13:47:3b:e8:c1:30:
bd:d8:83:7b:10:fc:91:cc:b0:2a:a6:02:c4:05:60:6b:2d:fd:
45:83:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:59:30 2025 by rpki-client