Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/6rStul-KJYhq6MLDsqFqp0QCJ-w.roa
File: 6rStul-KJYhq6MLDsqFqp0QCJ-w.roa (raw, json)
Hash identifier: UgkfY0GpWezlJwqyNlWzjCQU4cnRnYzqK30vIO1treQ=
Subject key identifier: EA:B4:AD:BA:5F:8A:25:88:6A:E8:C2:C3:B2:A1:6A:A7:44:02:27:EC
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 0197C0C93BB9664DD4FF5CBEEA2F63AD3CBC
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/6rStul-KJYhq6MLDsqFqp0QCJ-w.roa
Signing time: Mon 30 Jun 2025 12:21:42 +0000
ROA not before: Mon 30 Jun 2025 12:21:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 141.226.110.0/24 maxlen: 24
141.226.252.0/22 maxlen: 24
167.17.128.0/19 maxlen: 24
185.139.240.0/22 maxlen: 24
2a07:1980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:c9:3b:b9:66:4d:d4:ff:5c:be:ea:2f:63:ad:3c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Jun 30 12:21:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab4adba5f8a25886ae8c2c3b2a16aa7440227ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:57:2f:d4:84:be:18:59:55:93:08:cc:9d:
3b:0a:68:2f:36:1d:9c:d7:fa:9d:25:e0:d2:84:fb:
7f:d9:06:48:62:a8:f1:f8:b2:8f:b1:1c:af:13:bc:
60:d2:17:5b:26:8d:eb:69:56:1e:5b:0a:b7:fa:8c:
9e:7d:a5:96:1b:3d:2e:71:ad:e9:98:0a:2e:6e:7d:
52:5d:7a:ed:8a:ad:a6:47:e3:41:ac:a6:1c:57:ba:
8d:e2:5a:93:3b:a6:d4:e5:c5:a8:04:60:34:96:5e:
c0:e5:ac:a0:fc:1d:5f:26:e5:dd:5d:3d:9d:86:18:
50:49:14:4d:cd:60:ad:51:3e:48:f5:f6:fd:23:29:
6f:c2:ac:35:ca:39:d2:bb:8a:3b:82:39:60:5a:cb:
81:42:12:07:17:13:e1:8e:fb:e6:b8:bb:4e:6a:e3:
a2:97:69:43:45:b6:3a:b7:b5:79:c9:12:43:33:93:
04:ef:16:83:86:ab:b7:56:c5:65:e3:82:56:b4:82:
bd:a7:20:60:f2:75:1a:11:6e:9c:2a:b0:f4:52:70:
2e:28:6d:d2:52:9c:7e:55:48:fd:48:12:6e:b5:56:
5c:1a:71:3f:8c:97:37:eb:f0:d9:b1:c7:78:69:e7:
7d:a9:89:62:73:8f:65:96:10:e9:68:2f:7d:a2:f6:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B4:AD:BA:5F:8A:25:88:6A:E8:C2:C3:B2:A1:6A:A7:44:02:27:EC
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/6rStul-KJYhq6MLDsqFqp0QCJ-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.110.0/24
141.226.252.0/22
167.17.128.0/19
185.139.240.0/22
IPv6:
2a07:1980::/29
Signature Algorithm: sha256WithRSAEncryption
2d:01:70:25:d0:3f:f5:6c:e3:d5:c3:72:70:ea:22:8b:66:e1:
ac:a7:4d:16:b8:7f:b8:48:71:60:0c:0a:60:2e:12:b7:24:04:
aa:d9:a5:8d:94:57:8e:69:76:46:8b:28:10:63:dd:b2:4a:fd:
69:43:38:36:23:15:88:cc:cc:e2:d9:9b:67:b5:4d:4c:54:f3:
82:15:3d:37:fe:61:1b:39:eb:73:64:88:c6:f0:2a:1d:b2:13:
91:53:ce:b4:9c:fe:7d:51:01:76:db:03:05:82:20:68:34:42:
59:ae:4d:bc:77:27:78:6a:fb:d1:01:8d:b8:9d:d8:2e:d6:a5:
c6:73:6d:8a:a6:68:13:68:1a:3b:78:8d:e4:80:ac:fe:3c:b6:
ce:d6:69:6e:19:2d:07:f5:9c:e5:31:98:9f:90:3c:c4:6d:f7:
1c:28:bf:24:43:ca:27:d6:ec:fe:0a:a1:0c:4d:12:b4:62:8b:
2d:2d:14:85:70:35:7f:3d:57:21:a5:16:d4:38:b0:0d:13:96:
33:44:27:eb:3e:cc:64:ab:78:41:15:e2:8d:fc:86:c4:6c:15:
31:f1:74:c3:8c:3b:be:2f:c5:2e:d7:8c:f1:70:16:27:7d:b7:
65:66:07:d8:ee:9f:f7:54:29:54:da:f1:f0:08:07:86:ff:7d:
ad:8c:67:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:26:11 2025 by rpki-client