Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/c5sucgcQquIpGWGiQSZMt4GnWOs.roa
File: c5sucgcQquIpGWGiQSZMt4GnWOs.roa (raw, json)
Hash identifier: 9es2orL5F+D6U+9tt9UKG+ntn0HPD0je5/rgMX4Np+Y=
Subject key identifier: 73:9B:2E:72:07:10:AA:E2:29:19:61:A2:41:26:4C:B7:81:A7:58:EB
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 019928604ED3F158C293D37FEB7A73FDD74D
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/c5sucgcQquIpGWGiQSZMt4GnWOs.roa
Signing time: Mon 08 Sep 2025 08:10:23 +0000
ROA not before: Mon 08 Sep 2025 08:10:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47526
IP address blocks: 185.55.80.0/24 maxlen: 24
2a13:ccc0::/29 maxlen: 29
2a13:ccc0::/32 maxlen: 48
2a13:ccc1::/32 maxlen: 48
2a13:ccc2::/32 maxlen: 48
2a13:ccc3::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:60:4e:d3:f1:58:c2:93:d3:7f:eb:7a:73:fd:d7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Sep 8 08:10:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=739b2e720710aae2291961a241264cb781a758eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:0b:83:cc:bd:13:38:24:c9:69:42:99:ca:
9f:51:98:a9:f0:f5:47:e8:f1:43:7d:3d:64:aa:72:
f1:05:ec:1e:92:52:15:8f:bb:a1:1a:64:fc:c1:14:
d4:93:f5:12:2e:dc:6c:aa:47:86:d2:d2:f4:35:99:
6d:97:32:24:05:a2:91:c4:69:93:51:43:fa:34:71:
05:23:f1:0a:d0:c1:34:1f:f2:49:ff:bf:d4:34:02:
89:79:ff:39:cc:d6:84:8c:e7:c1:fc:25:53:a8:14:
24:b1:3f:52:29:a7:3b:21:29:d1:8f:27:56:e4:45:
cc:ba:ce:96:b7:e2:74:ba:2c:fb:d9:b5:38:a9:96:
b6:ce:68:a6:43:f4:75:07:73:d3:13:ae:47:42:1b:
f4:fc:9c:a2:9c:c6:18:80:51:fd:c5:e5:65:33:82:
75:fd:5a:51:94:09:1c:81:84:eb:2a:e7:b2:4f:33:
e2:cf:a0:e9:a0:54:5c:cd:02:91:05:db:b5:3b:1e:
22:ea:55:9d:2a:76:26:4b:f4:ce:37:15:cd:08:af:
8e:19:1e:7b:23:a9:24:21:6d:2e:90:ad:76:7d:65:
87:6e:31:e8:d1:dd:4f:e7:73:e3:41:0f:ae:8a:90:
80:f5:09:8a:c1:cb:79:87:f6:d1:de:28:9b:7a:cb:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:2E:72:07:10:AA:E2:29:19:61:A2:41:26:4C:B7:81:A7:58:EB
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/c5sucgcQquIpGWGiQSZMt4GnWOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.80.0/24
IPv6:
2a13:ccc0::/29
Signature Algorithm: sha256WithRSAEncryption
55:09:09:13:0d:4a:2d:5d:68:c3:99:2c:0e:b5:03:0e:8b:f5:
a4:12:8f:8c:c6:ec:0f:6c:02:3a:e2:32:a0:f6:e2:51:e0:e0:
dc:52:c0:af:d9:90:05:48:86:c5:f7:69:cf:74:a6:ce:10:fa:
2e:3f:2f:68:63:d8:a2:07:29:f8:05:40:ad:38:18:27:21:50:
72:56:3e:13:8f:36:8b:57:99:ee:5c:f9:f7:7d:d6:85:ed:37:
29:12:6a:08:6c:0f:10:ad:92:95:ef:0e:2c:c7:a1:e1:2f:15:
c9:61:6f:13:fc:4f:ed:c9:90:67:54:4c:99:44:37:1b:8f:be:
39:15:e4:14:7c:0f:cf:f6:69:b1:1d:d7:7a:66:a1:35:a3:38:
62:59:7e:66:2c:db:fa:6e:6f:9c:30:d1:b4:a7:10:3c:1e:84:
12:b9:ee:ff:ee:34:57:f3:22:e4:98:50:9e:54:6a:6d:62:60:
e4:d4:b7:d0:b2:a3:67:04:1c:b2:1e:b7:56:80:b4:a5:4e:aa:
b0:be:52:b0:01:ef:47:29:65:8c:28:18:7e:8e:ba:ee:12:d1:
30:6d:96:71:18:5f:46:ed:db:42:9a:c3:7e:34:95:a2:44:c3:
85:89:be:fc:23:72:1e:a3:f1:26:7e:95:86:5f:c9:69:74:3f:
cb:de:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:39:26 2025 by rpki-client