Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/JoOoe9F8Z063iNBEpC6jMcj6cvw.roa
File: JoOoe9F8Z063iNBEpC6jMcj6cvw.roa (raw, json)
Hash identifier: gvXwU4aSDxLfKA86My3w9LYcQE9/lTQ4D4PHnAZ09Hc=
Subject key identifier: 26:83:A8:7B:D1:7C:67:4E:B7:88:D0:44:A4:2E:A3:31:C8:FA:72:FC
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0196E7E77F589C0A372B1AD05C1D1CAD7DB5
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/JoOoe9F8Z063iNBEpC6jMcj6cvw.roa
Signing time: Mon 19 May 2025 09:37:10 +0000
ROA not before: Mon 19 May 2025 09:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.14.37.0/24 maxlen: 24
31.14.38.0/23 maxlen: 23
45.132.27.0/24 maxlen: 24
185.155.53.0/24 maxlen: 24
185.155.54.0/23 maxlen: 24
185.155.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:e7:7f:58:9c:0a:37:2b:1a:d0:5c:1d:1c:ad:7d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: May 19 09:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2683a87bd17c674eb788d044a42ea331c8fa72fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:a7:34:47:09:b6:b2:ca:72:d9:a6:cd:2b:
41:94:80:3b:05:c1:2c:17:e7:8b:95:e9:62:ab:06:
ec:c2:ef:6d:3a:8b:cc:5a:b5:09:b4:6f:a6:0a:33:
01:66:da:00:3c:4a:07:61:60:4a:41:d0:41:8a:a5:
68:ad:4f:74:eb:58:da:ad:39:b4:59:c3:c3:a8:4f:
f7:98:1a:1a:bd:e5:be:0c:4f:60:6c:c7:82:46:af:
b1:a7:3d:c9:32:63:3c:21:9f:24:1f:b1:59:0c:97:
65:e3:2a:1a:67:69:93:99:3e:54:87:54:00:d8:4b:
4a:8f:b2:4c:e4:0c:c7:89:d1:d9:51:86:40:48:1a:
9b:0c:19:c7:9c:96:df:63:0d:1b:9f:69:e8:04:55:
d1:f2:f5:84:25:87:4a:00:16:db:dc:7b:b9:67:5b:
72:c7:0c:1f:67:44:34:ea:ed:d2:9d:65:9b:b9:c8:
0c:08:5a:1d:e1:e0:38:6d:34:19:46:66:0e:b5:42:
14:44:b4:72:de:32:65:e7:c3:08:f3:7f:df:7f:0b:
7b:5d:38:d7:5b:90:2e:b8:12:6d:36:e0:0c:6f:02:
74:40:5f:36:04:c1:8d:01:e8:1f:08:1d:a0:9a:6f:
56:27:71:4c:71:06:ce:65:e2:0f:09:cf:a8:1c:42:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:83:A8:7B:D1:7C:67:4E:B7:88:D0:44:A4:2E:A3:31:C8:FA:72:FC
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/JoOoe9F8Z063iNBEpC6jMcj6cvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0-31.14.39.255
45.132.27.0/24
185.155.53.0-185.155.55.255
Signature Algorithm: sha256WithRSAEncryption
8a:76:03:e3:53:96:17:c1:97:5f:51:20:be:d5:83:7e:e9:86:
dd:e2:c5:c2:55:fe:1e:7b:b0:f8:d9:83:af:02:64:43:a1:f0:
54:96:b8:7c:32:74:de:f3:17:2a:fc:79:e3:6c:d8:1a:da:5a:
e1:0f:fd:f5:47:d2:32:cb:a4:9f:f6:6a:6c:ab:f6:19:ba:f8:
9f:86:6f:c9:26:a3:c4:a5:db:40:d1:1a:fe:45:b4:f0:22:2c:
f5:e2:ab:c5:0f:ac:7c:42:83:e4:ed:0a:03:fc:49:3f:0f:e9:
89:d2:dc:00:29:59:a2:f9:bd:75:8d:48:ee:f1:91:3f:1a:7b:
70:fb:80:3b:9c:d0:9a:a5:85:12:2d:22:9d:08:73:8e:e7:59:
9e:47:62:ab:64:7d:27:db:65:54:83:43:f8:0a:d6:7c:03:44:
2f:11:72:5d:a6:8c:6f:8a:48:4b:66:8a:08:50:52:40:9f:74:
13:04:73:cd:37:b5:19:3c:4a:da:fb:82:6a:c3:dc:4b:a2:a1:
c1:44:65:d3:19:b7:f1:68:87:44:b3:40:8a:fc:8d:f3:7d:98:
ab:3e:5f:a3:8d:81:d7:29:8d:73:b6:a5:08:b4:27:e3:01:f2:
fd:fe:fd:4e:ed:5d:9d:cf:84:4e:ae:d6:6c:34:61:93:4b:fc:
ec:ce:32:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:19:42 2025 by rpki-client