Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/B61tQVa6NJ0bpDCTZZdDA-JxPNs.roa
File: B61tQVa6NJ0bpDCTZZdDA-JxPNs.roa (raw, json)
Hash identifier: ZKlioiMsbmVox1tDp8lKCvDKm6sseRUmvR0/0NjHIaA=
Subject key identifier: 07:AD:6D:41:56:BA:34:9D:1B:A4:30:93:65:97:43:03:E2:71:3C:DB
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 01990C8E9A80A99477F3B51BC64BF559D7E4
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/B61tQVa6NJ0bpDCTZZdDA-JxPNs.roa
Signing time: Tue 02 Sep 2025 22:31:36 +0000
ROA not before: Tue 02 Sep 2025 22:31:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 185.239.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0c:8e:9a:80:a9:94:77:f3:b5:1b:c6:4b:f5:59:d7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Sep 2 22:31:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ad6d4156ba349d1ba4309365974303e2713cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:65:4a:03:53:a0:7d:eb:75:aa:2d:20:44:
87:55:40:d8:09:6e:81:00:72:47:59:4d:51:be:4b:
36:b6:a4:7c:bf:cb:e3:54:a7:a9:18:2b:d8:87:60:
4c:19:e2:4d:62:0b:e3:03:17:c7:4d:7d:9b:51:f0:
48:df:56:68:88:de:aa:c0:c7:1e:bd:bc:a7:27:1b:
27:ba:df:d5:f2:ad:7c:6b:95:29:9d:95:c1:f6:ba:
d3:45:b7:6f:ff:7d:d5:fa:28:e9:6e:45:90:d6:fd:
cc:2a:d4:36:ed:29:44:03:bc:7f:c0:04:dc:2b:ad:
bf:dd:aa:41:0f:27:52:bb:67:f5:bd:4b:f0:65:d1:
b3:df:5e:25:dc:de:11:5d:fa:86:5b:8f:49:42:4a:
eb:a9:f4:5c:36:08:3e:3a:b2:b2:93:c9:e2:37:e7:
ea:dc:2a:d4:05:6e:2e:df:c7:1a:42:e4:d4:9a:82:
09:17:01:9f:ea:87:bd:a7:da:3b:5f:37:ce:59:47:
76:9d:aa:72:55:63:e6:54:74:8c:55:c5:49:4c:bf:
9b:69:53:54:7e:98:58:aa:e7:cd:bd:b9:d4:ec:60:
c9:7d:20:97:c9:64:c7:70:fa:9f:5a:02:5a:7e:69:
09:5e:22:c5:77:ae:f9:0d:59:30:38:46:2c:18:58:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AD:6D:41:56:BA:34:9D:1B:A4:30:93:65:97:43:03:E2:71:3C:DB
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/B61tQVa6NJ0bpDCTZZdDA-JxPNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.136.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:18:60:8c:82:ba:bd:61:f1:18:00:ce:00:97:13:76:f0:0d:
e6:50:36:fc:73:62:67:5d:bc:a3:69:50:95:db:0f:27:8a:a8:
1c:cf:bb:c2:d7:49:47:bc:d6:62:b9:07:98:37:47:09:00:6b:
d5:4f:1c:1c:12:b9:89:bd:d7:08:e6:d8:03:ab:dc:d9:c3:e3:
e7:e3:a5:37:ca:ba:92:94:6f:99:39:d0:dc:84:c4:3b:46:43:
7e:57:ab:9f:62:ef:31:9c:cf:6d:41:40:9e:6e:91:2d:24:26:
d8:e2:05:f3:08:06:eb:eb:b4:d3:27:fc:5d:e4:79:39:57:52:
7e:02:3a:54:6f:f5:0c:8a:51:71:a4:02:56:b8:72:21:b3:c1:
10:dc:34:5e:5d:55:c8:21:fd:8c:a8:6b:16:bf:ba:89:da:7c:
16:c9:b6:f0:42:69:69:11:d2:4b:ca:a2:2c:23:13:dd:39:56:
fb:fa:1a:9c:e9:22:b3:75:5b:d6:49:bc:ba:ec:ae:9b:ef:c6:
54:b6:ca:97:18:28:96:e6:dd:6e:07:a4:fb:1d:d8:b8:ef:48:
31:7f:15:d7:aa:7c:59:60:8e:86:ef:46:5e:af:68:ff:19:5d:
3a:c8:66:d8:db:7e:e8:b4:8f:5c:78:28:21:0b:c2:20:e0:3b:
6f:5c:94:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:31:35 2025 by rpki-client