Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/y4VA_E1aQmzf5BQU4U1KYZVgIUo.roa
File: y4VA_E1aQmzf5BQU4U1KYZVgIUo.roa (raw, json)
Hash identifier: JjlgTLPcI0juwTKlOsYaySB9entKY2C1KV7iXWPrLd4=
Subject key identifier: CB:85:40:FC:4D:5A:42:6C:DF:E4:14:14:E1:4D:4A:61:95:60:21:4A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0196DA658EC62DF471279BB96EC93134CBBA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/y4VA_E1aQmzf5BQU4U1KYZVgIUo.roa
Signing time: Fri 16 May 2025 18:40:10 +0000
ROA not before: Fri 16 May 2025 18:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57013
IP address blocks: 45.155.206.0/24 maxlen: 24
77.83.204.0/24 maxlen: 24
194.26.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:65:8e:c6:2d:f4:71:27:9b:b9:6e:c9:31:34:cb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 16 18:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb8540fc4d5a426cdfe41414e14d4a619560214a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:ac:73:f2:b3:87:bb:a6:7e:9b:88:80:61:
f3:25:90:ac:ae:3d:36:25:b0:a2:65:c3:14:75:09:
d8:ed:ea:07:ea:27:80:1b:80:12:94:e1:4f:3a:98:
1b:a1:4d:16:fb:90:db:f4:f5:21:b4:98:ed:06:90:
e5:32:1c:ab:24:a7:22:1f:b7:12:d2:aa:d0:0a:87:
bc:ce:ec:80:20:77:b2:b7:d5:49:cd:a7:57:ca:d7:
d7:99:ae:d8:3b:3a:6f:34:56:ee:8f:9a:fe:79:9e:
38:d5:ac:1d:25:89:00:4c:41:1d:7a:6d:15:39:a7:
3d:95:82:48:39:17:b7:2f:d5:0b:45:1e:60:4e:21:
26:0c:59:99:0e:b3:d1:44:02:75:0d:03:7c:f1:94:
4b:25:19:ba:66:93:bc:93:2f:a9:f9:44:3e:85:84:
af:48:c9:14:a0:bd:de:57:56:0d:92:2f:b2:66:90:
12:1a:69:43:7d:a9:82:3b:31:48:46:77:22:ee:42:
51:bb:73:6a:0b:f6:da:d1:48:ef:c5:7e:4f:8d:c1:
94:ba:b5:24:7b:3f:fb:d0:4f:e7:87:8d:69:05:11:
b9:28:51:37:79:ff:42:c0:33:65:d4:86:94:f6:ff:
f6:1d:78:1d:7b:62:b5:46:c5:e1:00:44:ae:47:37:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:85:40:FC:4D:5A:42:6C:DF:E4:14:14:E1:4D:4A:61:95:60:21:4A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/y4VA_E1aQmzf5BQU4U1KYZVgIUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.206.0/24
77.83.204.0/24
194.26.205.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3c:bb:27:48:7f:d9:c2:a9:7f:24:40:25:a8:d9:db:5a:cc:
bb:8e:25:c3:c3:0a:08:25:5d:27:84:91:63:55:04:59:dc:f5:
60:19:92:cb:85:1b:fc:98:47:8a:fa:42:e2:fb:17:d8:be:42:
51:05:e7:06:c2:25:49:20:06:a5:8f:c9:1e:55:e2:3c:e2:c0:
b1:8f:73:fc:b5:67:81:d0:bc:4d:82:64:7f:dc:ab:77:20:cb:
0a:13:10:db:f1:7e:5a:33:ce:0b:17:e8:76:f7:02:45:47:df:
06:18:3e:27:0a:67:40:dd:f3:48:84:52:5a:5a:6f:2f:9a:dd:
23:02:32:14:95:c9:0f:1f:fb:34:db:3e:1c:ac:56:57:68:c6:
34:c2:c2:2a:57:77:3c:09:30:63:37:0a:7c:54:4e:16:a9:3a:
b4:3c:6a:c0:c4:60:71:04:81:57:11:b4:53:6f:17:85:65:b9:
51:0d:00:c7:95:8b:13:56:61:31:87:3c:93:0a:64:6e:26:54:
45:39:8b:81:66:23:62:8f:a0:d5:7d:87:d2:0b:04:a5:7a:83:
59:76:ba:21:c1:0d:56:16:cb:2e:04:97:a5:b4:6d:b6:c4:c9:
c4:21:2b:ae:62:c4:0c:cf:e0:39:b1:aa:d6:6f:29:95:cf:28:
64:e5:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:20:13 2025 by rpki-client