Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/AUtppI0j1FopaSTIynlTu1x48Hs.roa
File: AUtppI0j1FopaSTIynlTu1x48Hs.roa (raw, json)
Hash identifier: xwOerUMdEOl/B4s2OXmXn36a7UpMXsKUDbtHzpzg6QQ=
Subject key identifier: 01:4B:69:A4:8D:23:D4:5A:29:69:24:C8:CA:79:53:BB:5C:78:F0:7B
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 01992D6A4885E09725FF20F89B1A783B9B47
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/AUtppI0j1FopaSTIynlTu1x48Hs.roa
Signing time: Tue 09 Sep 2025 07:39:24 +0000
ROA not before: Tue 09 Sep 2025 07:39:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 212.11.0.0/24 maxlen: 24
212.11.6.0/24 maxlen: 24
212.11.9.0/24 maxlen: 24
212.11.10.0/24 maxlen: 24
212.11.13.0/24 maxlen: 24
212.11.48.0/24 maxlen: 24
212.11.49.0/24 maxlen: 24
212.11.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:6a:48:85:e0:97:25:ff:20:f8:9b:1a:78:3b:9b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Sep 9 07:39:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=014b69a48d23d45a296924c8ca7953bb5c78f07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:9d:fa:37:04:bd:f7:84:df:f5:3a:0d:0c:
82:d7:01:70:0c:a1:5d:6e:a6:26:8e:73:9f:5c:7c:
90:a2:24:ec:cb:d2:58:e3:a2:d4:76:0e:11:b6:37:
d8:d4:f7:87:96:68:65:b7:66:86:2a:6a:50:5d:6a:
c5:37:38:b1:e4:80:de:92:19:50:a3:ec:51:24:c3:
0a:a5:04:5f:06:4d:5f:dc:94:f6:9d:d0:cb:3c:c2:
2f:40:40:1f:38:e9:30:96:c3:47:5f:58:0c:aa:c2:
df:3e:e4:29:e2:0b:46:0e:44:63:bc:c9:e8:95:92:
19:82:89:3d:a7:81:05:37:85:54:b8:9d:a8:4d:60:
34:19:f9:fb:da:6e:0b:c7:fe:f0:f4:31:0e:09:cd:
fa:5d:b0:84:e2:b0:11:1f:5a:82:3d:51:ff:4c:9c:
25:c3:ab:27:fd:30:e9:d3:dd:15:b1:c7:4f:9a:02:
23:3b:4e:1d:12:1e:db:79:8d:b9:7e:2e:e8:8d:95:
7c:33:1e:b4:6c:d3:a4:42:e1:7c:fa:dd:4b:41:85:
f1:6c:ad:32:d7:e4:f8:d3:17:d1:d0:43:50:89:43:
ba:d0:92:1e:1e:2e:ad:83:95:4c:e6:46:5c:aa:38:
c5:67:74:a1:a7:29:73:87:1e:a3:9e:f7:64:9b:4c:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4B:69:A4:8D:23:D4:5A:29:69:24:C8:CA:79:53:BB:5C:78:F0:7B
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/AUtppI0j1FopaSTIynlTu1x48Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.0.0/24
212.11.6.0/24
212.11.9.0-212.11.10.255
212.11.13.0/24
212.11.48.0/23
212.11.52.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5e:00:41:87:36:98:8d:c3:bf:76:de:dd:54:38:9e:2b:d4:
f1:2f:ea:20:1c:f7:40:9b:aa:0e:d9:13:47:3c:41:c1:20:85:
b7:66:82:99:9b:8e:79:5b:7b:b1:48:bc:8a:37:c1:38:a8:71:
71:37:2f:72:c5:97:2d:70:09:c1:fa:2b:f2:93:46:3f:7a:f6:
ae:d8:67:dd:ae:e5:9e:cc:7f:dc:c3:55:ba:ae:44:6f:63:51:
2a:05:4e:ae:a7:1a:9e:41:71:68:2f:3c:ca:32:e1:7a:65:5a:
6f:9e:25:7d:89:1b:0b:3f:78:dd:92:14:da:b5:f3:10:ec:3b:
f3:ce:5d:2a:5e:46:26:52:8b:fc:fe:85:ba:9b:07:aa:37:c4:
34:a0:8a:01:3a:b1:63:1e:7e:d7:09:c4:b7:73:bf:7a:b1:79:
63:b9:15:be:f1:59:e4:0d:44:3f:43:38:d2:e1:34:0f:d0:10:
74:50:bc:c0:37:24:87:c6:72:70:98:40:ab:97:18:2c:0d:ba:
03:b4:78:6e:3d:87:ee:a2:75:4d:3f:12:c0:a8:57:cf:3b:78:
d1:64:63:e5:50:5b:72:b3:7b:33:d3:ba:52:02:30:48:6b:47:
d6:e0:7a:d8:fa:a4:58:7f:b1:c0:5e:9e:2a:b3:8f:09:6c:de:
f5:8a:1a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:33 2025 by rpki-client