Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/OEu5ipvpOLx1mjS_wILLKGz31L8.roa
File: OEu5ipvpOLx1mjS_wILLKGz31L8.roa (raw, json)
Hash identifier: Q2sxz01wDrr3ZAHG0Y04l4+NHZqPRdGf0GS6aM12Hm0=
Subject key identifier: 38:4B:B9:8A:9B:E9:38:BC:75:9A:34:BF:C0:82:CB:28:6C:F7:D4:BF
Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial: 0196EF324246DAE7B6F74D09F259F7F5C5AC
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/OEu5ipvpOLx1mjS_wILLKGz31L8.roa
Signing time: Tue 20 May 2025 19:36:10 +0000
ROA not before: Tue 20 May 2025 19:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59836
IP address blocks: 185.69.116.0/24 maxlen: 24
185.69.118.0/24 maxlen: 24
194.35.0.0/24 maxlen: 24
194.35.1.0/24 maxlen: 24
194.35.4.0/24 maxlen: 24
194.35.5.0/24 maxlen: 24
194.35.8.0/24 maxlen: 24
194.35.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ef:32:42:46:da:e7:b6:f7:4d:09:f2:59:f7:f5:c5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Validity
Not Before: May 20 19:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=384bb98a9be938bc759a34bfc082cb286cf7d4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4d:d5:91:d3:ea:0d:90:cd:e1:9d:ec:08:f4:
cd:47:49:f9:29:af:15:7b:37:a7:8a:61:74:4f:e0:
cd:2a:86:d4:08:e0:a5:e6:83:f9:eb:c0:de:08:5f:
f2:f0:f1:05:1c:95:63:40:fc:79:76:64:3b:98:da:
5c:e2:60:a5:4c:58:d7:4f:e5:d6:7e:53:27:ed:23:
30:b1:b1:78:2a:f9:28:7e:b3:a5:93:ac:dc:3f:c1:
3a:de:eb:fe:d0:fd:60:7e:73:26:05:93:2e:e4:b8:
82:e8:a6:8c:2d:4e:69:24:3d:9c:28:84:b1:96:92:
ac:f7:7c:cb:b5:3a:aa:9c:45:e5:5f:69:6b:cc:b4:
dc:3a:da:9c:df:8e:10:6d:0b:65:bf:4d:c4:43:81:
04:cd:a1:67:a6:80:6d:06:e9:c4:50:11:01:cf:f4:
4a:84:39:2c:c3:57:bf:9e:a6:f6:eb:f9:30:ea:99:
3c:06:2c:ef:2e:d7:ad:2e:36:05:6e:b7:a6:91:ea:
22:e3:99:77:c7:7e:d6:d3:28:39:2a:0c:f4:f5:ac:
01:f0:39:f4:6b:13:ea:34:4b:24:e9:32:57:69:66:
54:0a:61:1e:8b:4f:6b:cf:71:0e:b4:2c:03:74:b0:
ad:18:13:e0:d5:b7:45:d8:6d:77:cc:89:33:18:bc:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4B:B9:8A:9B:E9:38:BC:75:9A:34:BF:C0:82:CB:28:6C:F7:D4:BF
X509v3 Authority Key Identifier:
keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/OEu5ipvpOLx1mjS_wILLKGz31L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.116.0/24
185.69.118.0/24
194.35.0.0/23
194.35.4.0/23
194.35.8.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:bc:29:d0:4e:47:1f:a5:bf:54:a8:ac:77:24:ab:0a:4f:b9:
a2:3a:12:22:c0:ef:7c:bd:1b:78:01:c1:af:5e:1f:34:b6:88:
05:7f:3e:46:b9:ed:af:d9:f6:05:a2:6b:34:d7:77:d3:0c:b0:
d2:02:21:14:7a:eb:84:7e:d8:f7:1b:90:8d:9b:96:cb:dd:82:
29:64:18:27:6a:64:7c:ec:67:e5:68:93:a3:1f:f1:cb:4e:19:
f9:46:21:d5:88:89:28:f4:40:05:5f:c3:c6:fc:ba:72:e3:78:
b3:7d:eb:21:1a:93:d3:5b:33:d4:7e:b4:c4:5d:06:97:41:ea:
e6:94:1a:d7:54:bb:66:01:f6:f6:fc:38:42:ec:52:84:21:68:
6f:8d:34:7b:2f:d5:23:38:8c:cb:93:07:11:03:b9:e0:38:94:
66:92:6f:19:30:fc:df:42:b0:12:b6:0e:be:6e:f8:50:2b:fb:
e2:9d:ed:82:22:1c:e8:41:14:50:e5:f9:09:a5:0a:a6:61:02:
e4:e8:2a:31:3e:9f:4c:77:81:4d:9c:8b:df:78:8f:6e:da:b6:
ee:37:bd:5c:fe:4d:4d:62:61:88:1b:81:7e:87:98:a8:8c:5c:
c1:c0:99:ea:c8:ab:48:a8:32:98:77:a7:2a:68:9d:5b:a1:89:
5c:4f:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:55:00 2025 by rpki-client