Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/r_DBy6crqhZV3E-t_JBcSU0M1aQ.roa
File: r_DBy6crqhZV3E-t_JBcSU0M1aQ.roa (raw, json)
Hash identifier: x0KRqoMjmgWvFfwQSKfZBbO2VD1mpoCn3DkZilOBe/8=
Subject key identifier: AF:F0:C1:CB:A7:2B:AA:16:55:DC:4F:AD:FC:90:5C:49:4D:0C:D5:A4
Certificate issuer: /CN=c15c57c496c4378e804c2613398075d54ef8a962
Certificate serial: 0196B5AFE6C480DDD0ED87804DDD207B5266
Authority key identifier: C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/r_DBy6crqhZV3E-t_JBcSU0M1aQ.roa
Signing time: Fri 09 May 2025 15:35:26 +0000
ROA not before: Fri 09 May 2025 15:35:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57979
IP address blocks: 185.84.128.0/22 maxlen: 22
185.251.92.0/22 maxlen: 22
188.119.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:af:e6:c4:80:dd:d0:ed:87:80:4d:dd:20:7b:52:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15c57c496c4378e804c2613398075d54ef8a962
Validity
Not Before: May 9 15:35:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aff0c1cba72baa1655dc4fadfc905c494d0cd5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:85:a8:6b:20:fb:d8:1b:b6:63:f3:fc:3a:
fd:08:00:75:90:30:34:ec:c0:a2:70:9b:db:1f:87:
88:00:d7:88:1e:a0:ef:f5:ad:1e:12:dd:34:0a:8c:
8b:32:0f:ea:53:ef:0b:90:24:95:6c:2b:ef:2c:e1:
46:0e:d0:f7:50:6c:cb:9e:f4:1a:2f:c9:9b:1d:53:
f5:0b:a8:9a:65:fb:98:58:da:f4:25:92:ce:96:e7:
de:fc:67:4d:3f:ed:94:5b:f2:c3:17:4d:66:36:cf:
1c:63:80:ee:bb:2c:13:bd:79:9f:40:db:ae:01:47:
4e:78:34:6d:2f:97:bf:51:df:83:24:f7:53:dc:40:
b4:f7:36:73:3e:aa:cc:23:6c:99:b2:1b:09:4a:d2:
67:f4:67:31:b5:fc:1f:b3:19:1b:2d:48:81:7f:87:
88:48:0b:ec:f2:51:e0:16:60:45:89:62:2f:7a:06:
81:1f:bf:d5:2a:3a:7d:c5:0f:29:d4:6d:74:af:b4:
9e:50:1f:44:ec:85:be:48:ea:b5:b0:eb:f5:09:9f:
e1:bc:b3:be:ac:f9:c3:72:b2:fa:12:94:05:66:2f:
29:88:c8:24:5c:02:67:94:d9:ef:9f:6c:d8:ee:08:
2e:af:6d:93:eb:a5:e8:07:a5:49:6c:10:32:aa:5a:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F0:C1:CB:A7:2B:AA:16:55:DC:4F:AD:FC:90:5C:49:4D:0C:D5:A4
X509v3 Authority Key Identifier:
keyid:C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/r_DBy6crqhZV3E-t_JBcSU0M1aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.128.0/22
185.251.92.0/22
188.119.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:af:8d:a2:ec:7d:4d:1f:89:9d:a4:8e:02:62:2d:2b:78:ba:
a3:af:3f:5d:0d:5c:2e:d7:89:96:0f:03:ea:fd:49:7a:80:49:
11:f5:65:e3:2b:20:7e:10:42:d8:b9:47:ff:6b:72:a7:1a:d1:
60:4f:b5:e0:fe:69:cc:69:3a:77:a6:bb:eb:9d:62:aa:c4:34:
45:ca:c2:27:be:77:8b:23:0d:72:c4:17:6b:a4:e3:e2:b5:56:
82:f8:76:5c:21:ae:8b:d1:e5:e8:ea:3a:15:b1:80:be:27:db:
5a:91:91:e8:07:9a:99:83:31:a8:5f:08:56:87:f3:db:46:f8:
4b:ba:f0:4a:6b:3b:b9:ca:2a:5d:f7:78:08:f5:94:21:7c:fd:
ef:dd:c9:05:d3:c0:de:3f:6a:a5:41:89:57:51:ea:0d:06:73:
9d:bf:4f:c8:1e:4d:68:26:0b:82:13:58:4a:ef:90:45:04:2d:
4e:28:71:14:8e:09:ae:dc:d7:cc:29:72:ee:aa:df:f5:76:ee:
7e:51:cf:7f:18:8c:63:86:b9:a0:0a:21:95:d7:d7:e4:f6:98:
56:1c:8f:ce:73:c9:f7:47:15:99:45:df:39:41:4d:ee:96:83:
a5:9c:e7:e1:b1:66:18:62:88:49:36:eb:1f:fd:0f:d4:fd:13:
c3:a1:7d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:23:40 2025 by rpki-client