Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/SktS2qe7AHoOvvE3Ng2bvUc3BDE.roa
File: SktS2qe7AHoOvvE3Ng2bvUc3BDE.roa (raw, json)
Hash identifier: zYPoiFwZak224YGTkiX50WwUYh2lcuT+ZNtAKsLj3Dk=
Subject key identifier: 4A:4B:52:DA:A7:BB:00:7A:0E:BE:F1:37:36:0D:9B:BD:47:37:04:31
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 0197CF30F8FCF705A513239690A1852810EB
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/SktS2qe7AHoOvvE3Ng2bvUc3BDE.roa
Signing time: Thu 03 Jul 2025 07:29:42 +0000
ROA not before: Thu 03 Jul 2025 07:29:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 188.95.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:30:f8:fc:f7:05:a5:13:23:96:90:a1:85:28:10:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jul 3 07:29:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a4b52daa7bb007a0ebef137360d9bbd47370431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:ff:db:f0:f5:35:57:03:d5:f1:b6:bd:6e:
75:ff:81:45:67:b0:e9:5e:b2:56:ce:62:4a:77:a1:
c2:e5:67:44:4d:55:b2:e3:fc:49:c6:8f:9d:24:ce:
58:9f:b2:3d:03:6e:d9:f3:5b:8e:a4:71:52:39:0b:
bd:d0:b6:b0:31:57:50:e7:0f:9c:26:d5:86:70:4e:
4e:81:5a:06:ff:3f:7c:a3:3a:79:3c:d6:a1:49:42:
9c:68:b2:2f:dc:62:23:e0:15:39:6e:d6:cf:e3:74:
93:9e:ee:5e:8c:5a:df:0e:90:03:81:59:cf:f1:ed:
32:87:df:b6:0c:24:b2:8d:e7:88:b2:82:8b:b6:23:
25:33:e7:8a:28:9c:9c:a1:3a:90:1e:24:f5:e5:e6:
db:ba:08:ac:b8:58:13:cd:cd:56:f3:fd:a6:9c:7e:
32:cd:0b:70:ae:62:74:fc:f4:f3:44:c0:53:59:85:
0c:76:51:34:14:04:88:20:ee:83:73:c4:94:6c:a3:
17:98:8c:e8:5e:df:08:97:c2:e1:f5:7a:91:4a:ae:
1b:43:b5:d6:21:41:66:51:7e:1c:d0:02:fc:9b:2f:
52:89:3d:2c:2e:cf:ac:87:e6:43:5f:86:68:7d:3a:
54:33:16:cb:42:46:ac:45:79:c1:d9:b6:d9:32:77:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4B:52:DA:A7:BB:00:7A:0E:BE:F1:37:36:0D:9B:BD:47:37:04:31
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/SktS2qe7AHoOvvE3Ng2bvUc3BDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2b:5a:2e:a0:36:74:06:9b:90:19:af:1c:e8:cc:49:0e:29:
0d:da:62:cf:89:6d:ed:59:ab:59:9f:f8:f5:54:c3:b0:ce:2b:
3b:58:fc:74:f2:85:36:3a:f5:e9:56:33:de:3a:12:9c:e7:d7:
05:f3:33:f6:54:85:47:ec:6c:98:9b:7c:67:ed:63:1f:1e:71:
05:07:53:51:33:f0:d8:e9:9e:c9:cb:14:3f:1e:fd:b8:9e:f4:
83:b4:63:00:a6:00:76:9c:d2:0a:3c:3f:0f:98:94:02:4b:b8:
03:98:3a:36:74:b9:3f:34:f1:41:2a:48:0a:c4:38:d9:62:e9:
02:74:92:7a:28:3b:e4:67:c5:5d:b3:9d:92:d5:cf:0f:62:01:
3f:08:59:a6:01:dc:a8:cd:ec:b0:8f:ef:5d:cd:35:68:60:85:
cc:9b:9c:ba:9f:2f:91:e6:7f:9f:96:12:b4:7c:a3:96:98:28:
ab:6f:38:6b:98:d9:b1:06:c1:52:37:27:8c:b9:d7:08:35:49:
16:e5:4f:8b:0c:92:a0:98:09:64:d6:d0:22:e0:d6:63:4b:1a:
51:b5:00:4a:dd:d0:76:ac:6c:8b:c9:4c:9c:75:c9:62:cb:eb:
ea:61:68:24:38:16:e5:19:93:d1:e2:ea:d4:1d:93:3b:82:f3:
dd:cf:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:29:40 2025 by rpki-client