Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1x1LdBJHgR3nZ-BgjfUwB7fuBOg.roa
File: 1x1LdBJHgR3nZ-BgjfUwB7fuBOg.roa (raw, json)
Hash identifier: javRYznih2o3aqrBSrIj+d4qz5z2JMqx0uFRrEUJa1s=
Subject key identifier: D7:1D:4B:74:12:47:81:1D:E7:67:E0:60:8D:F5:30:07:B7:EE:04:E8
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0196F879D0AE270108A2C6414B206E679BF0
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1x1LdBJHgR3nZ-BgjfUwB7fuBOg.roa
Signing time: Thu 22 May 2025 14:50:54 +0000
ROA not before: Thu 22 May 2025 14:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 185.98.43.0/24 maxlen: 24
185.104.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f8:79:d0:ae:27:01:08:a2:c6:41:4b:20:6e:67:9b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: May 22 14:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d71d4b741247811de767e0608df53007b7ee04e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:43:dd:45:51:ba:17:5f:3a:fe:58:50:88:
f7:03:1e:d8:3f:e7:45:1b:01:1e:77:27:f3:60:d8:
39:63:93:4a:0f:55:04:f6:89:63:cf:bc:ff:71:36:
0d:dd:60:7e:5a:8d:9f:a4:aa:6f:df:13:d3:7b:7f:
ba:ec:d3:20:5b:8f:a4:ab:fe:13:7f:b3:d0:dc:0c:
16:1c:e4:57:e9:c7:c9:df:3b:82:b6:e6:07:0b:c4:
44:32:f0:b5:6c:0b:04:6f:eb:2d:28:84:8b:3d:32:
e4:3c:16:ca:37:02:3a:e5:22:be:78:a3:75:2a:29:
c5:18:28:f0:a9:7d:5c:5c:51:4d:80:6e:a1:82:d0:
0e:26:2e:0d:d3:1c:ec:f6:d2:e6:c5:3b:b8:2e:6b:
5f:7e:8d:85:88:d3:d4:36:f3:bd:08:e6:9a:59:a1:
7d:31:81:61:e4:d0:81:d2:14:76:86:ac:93:8d:17:
4e:40:2a:1e:6d:23:b3:47:54:15:67:d6:4e:8b:e3:
d7:61:6e:f4:a5:fa:d3:7a:3a:5d:25:c1:b9:e6:f7:
07:cf:79:d8:ab:d9:4c:d2:ba:a9:c7:c1:08:b0:b2:
c2:90:5f:0b:b9:dc:1c:86:08:28:48:39:09:b4:cb:
e1:be:39:fe:a8:f9:dc:87:bc:b0:a4:a6:bc:80:cd:
b6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1D:4B:74:12:47:81:1D:E7:67:E0:60:8D:F5:30:07:B7:EE:04:E8
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1x1LdBJHgR3nZ-BgjfUwB7fuBOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.43.0/24
185.104.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5b:c9:6b:41:a6:2e:00:c9:b0:48:27:c0:65:04:14:71:2c:
56:3f:fb:05:fa:f2:34:dc:9e:f9:31:e3:db:3f:3f:de:ad:3a:
3f:f0:ec:dd:08:70:04:eb:98:6b:f6:3d:b1:7c:da:1e:6d:1f:
90:e5:8d:03:e2:86:7a:52:82:e5:31:8a:fd:5a:28:67:c8:ba:
51:6b:b3:9c:be:1c:0a:b3:57:74:3a:84:a0:dd:b7:6e:2b:27:
47:65:49:a7:b7:4e:d0:3d:22:03:b8:23:4c:7b:22:35:5d:d2:
c9:2a:d8:d0:4e:fb:b8:c7:c5:b7:02:eb:b3:b0:f0:a6:f2:ea:
2f:4c:e6:e2:0e:fc:34:75:a5:5b:54:3b:e4:76:96:63:6b:b9:
08:1c:36:be:a8:98:c7:58:6d:d7:47:1f:86:ee:e7:66:5b:be:
ed:cf:41:2e:8b:88:16:92:10:19:65:4f:af:4e:77:58:e7:fe:
0a:f7:c3:9b:b2:77:01:1e:75:db:8d:fe:a6:51:2e:cc:61:d4:
40:4c:71:ad:09:f7:c4:a6:2a:c8:09:c9:72:33:f4:20:67:05:
b3:27:1e:59:4c:30:c0:0d:db:30:79:6c:57:5b:0e:ef:83:ed:
44:da:59:50:b6:65:04:6b:06:5c:94:5f:fc:62:cb:ec:4b:16:
fb:c2:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:18:57 2025 by rpki-client