Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/pD83cCgQmkTqmybL4Qe3QLOSsJI.roa
File: pD83cCgQmkTqmybL4Qe3QLOSsJI.roa (raw, json)
Hash identifier: Dc3wCA5yOgFeVk3/J+FU53rFpNzosD7EmU4+ejzw5Hc=
Subject key identifier: A4:3F:37:70:28:10:9A:44:EA:9B:26:CB:E1:07:B7:40:B3:92:B0:92
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 0197E9BB8155E69631E8D919000AB97BE58B
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/pD83cCgQmkTqmybL4Qe3QLOSsJI.roa
Signing time: Tue 08 Jul 2025 11:11:08 +0000
ROA not before: Tue 08 Jul 2025 11:11:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 80.91.223.0/24 maxlen: 24
146.19.191.0/24 maxlen: 24
193.111.248.0/24 maxlen: 24
193.111.249.0/24 maxlen: 24
193.111.250.0/24 maxlen: 24
193.141.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:bb:81:55:e6:96:31:e8:d9:19:00:0a:b9:7b:e5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Jul 8 11:11:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a43f377028109a44ea9b26cbe107b740b392b092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e9:47:2d:11:59:cf:9c:fb:36:9c:1b:ee:6f:
cd:5b:74:89:ba:25:02:91:8e:66:10:1e:87:09:61:
07:25:ac:f6:c6:4b:fc:e2:11:e4:f0:7b:0f:f3:81:
1b:81:a7:6b:37:46:88:2b:37:81:0e:5d:47:06:01:
9d:12:92:98:4b:4f:52:65:88:8e:d9:f7:e2:a8:6a:
8c:25:fc:ad:95:d5:1b:b4:a1:fb:c4:23:97:cf:62:
8a:02:34:04:ef:ff:9c:66:71:51:e7:48:02:df:9d:
64:28:48:4e:ad:1b:fb:16:ec:63:60:25:10:5a:eb:
bd:11:f8:29:3e:b9:17:21:5e:68:e1:00:a1:26:d1:
2a:2b:29:ec:22:e0:80:1b:93:e8:fe:66:b9:20:53:
4f:5e:64:96:08:96:06:92:8b:73:5e:b2:d0:cd:87:
31:60:97:56:b1:09:32:aa:08:d8:2a:ed:9d:2b:ff:
f0:fd:85:68:58:f8:b4:6b:eb:e5:22:4c:43:da:11:
e4:33:94:00:85:b9:da:50:ba:dd:6c:51:b7:35:79:
9f:7b:e5:e8:4d:b6:ba:3d:61:e5:a0:27:3d:c0:9f:
fe:e4:1f:81:30:98:db:b8:c0:57:4b:99:01:f0:e9:
ee:a3:2c:1a:db:de:fa:05:b5:34:2c:24:5f:70:ad:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3F:37:70:28:10:9A:44:EA:9B:26:CB:E1:07:B7:40:B3:92:B0:92
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/pD83cCgQmkTqmybL4Qe3QLOSsJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.223.0/24
146.19.191.0/24
193.111.248.0-193.111.250.255
193.141.60.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f7:8b:d3:da:89:e7:3d:7f:21:8d:c2:70:ad:84:07:6e:35:
ed:14:78:12:ff:a8:7f:40:a7:1c:ba:03:a7:d0:ac:a6:d0:94:
0e:2d:6c:77:08:51:46:19:2e:aa:95:7c:27:bc:cd:6a:ff:54:
af:53:bb:9c:f7:17:19:df:c3:7d:c0:53:de:78:a7:a4:3b:8e:
ab:2d:f2:81:d0:00:3c:4b:7e:1b:1f:2d:3e:39:6c:0b:e3:61:
6e:85:5d:ef:05:01:65:df:ab:88:78:1a:0e:f0:dd:4b:8d:20:
53:5d:46:7f:3d:ab:bc:f0:14:f5:dd:70:7a:ad:1c:0b:cc:50:
5d:7a:2f:e1:c7:14:a0:a0:bc:98:e0:dc:55:2c:21:27:e5:ff:
5b:e4:99:c7:32:16:80:44:62:22:11:78:ca:6e:05:48:37:ff:
d5:cf:65:18:5e:c4:50:a1:ff:a0:de:bb:f1:0a:ee:aa:a0:c4:
f7:45:22:eb:51:c0:5f:9f:e0:2a:e6:d1:32:32:8d:ef:26:ab:
d9:7c:6d:6f:f3:ec:5b:69:b1:04:49:e8:6f:33:bc:57:5a:18:
af:b5:95:7c:bc:18:bb:4b:f9:88:28:19:fa:5f:e9:1d:98:49:
c4:56:eb:d7:15:99:51:a0:fd:a3:be:54:17:8c:1e:9b:1f:17:
21:7b:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:51 2025 by rpki-client