Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/poFYbbPGkTt6CCvX4o3TCsHpfsg.roa
File: poFYbbPGkTt6CCvX4o3TCsHpfsg.roa (raw, json)
Hash identifier: s1SNEkHqWiUfn1yNCntzkNwcArO1bOsbt3CndoD1K8g=
Subject key identifier: A6:81:58:6D:B3:C6:91:3B:7A:08:2B:D7:E2:8D:D3:0A:C1:E9:7E:C8
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 0196C5449D5CD6CC859B41C516E2B952BD5A
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/poFYbbPGkTt6CCvX4o3TCsHpfsg.roa
Signing time: Mon 12 May 2025 16:12:10 +0000
ROA not before: Mon 12 May 2025 16:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55207
IP address blocks: 185.186.8.0/24 maxlen: 24
2a0b:6b86::/48 maxlen: 48
2a0b:6b86:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:44:9d:5c:d6:cc:85:9b:41:c5:16:e2:b9:52:bd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: May 12 16:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a681586db3c6913b7a082bd7e28dd30ac1e97ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:a4:e6:ed:67:50:38:41:1c:69:f7:e7:c2:
d4:9b:44:bc:94:b6:96:78:9a:49:8d:80:7f:d2:f7:
7f:da:6e:fe:c9:80:5e:75:b1:a5:51:66:0a:bd:84:
65:f1:04:f1:b3:7f:7c:7e:41:27:42:b2:e1:7c:10:
0d:8b:1b:c8:77:97:0c:91:a4:25:b7:5c:a1:cd:2f:
a6:4d:33:8d:bc:48:31:08:ed:02:81:e9:c4:9f:80:
f8:eb:0b:d6:79:8b:5e:e6:2a:1b:d9:ca:81:25:5b:
9b:fb:d3:b3:a6:c3:58:b2:1d:84:46:34:31:c1:ea:
f6:c2:f5:49:3c:19:e2:8a:ab:ca:d7:93:00:18:9b:
5e:ae:bf:ec:7f:0f:a4:84:7e:75:c6:5b:c3:f9:85:
1c:db:ad:8e:4f:96:a1:b4:30:78:3a:90:88:7c:b9:
df:ee:fe:f7:36:92:fa:e1:3e:8b:76:ad:42:32:f2:
10:79:25:e6:95:4e:a5:a3:83:1c:19:ea:a8:3c:75:
9b:91:8f:e5:9a:f4:b7:67:0b:a5:cc:5c:24:ec:59:
1f:56:74:e4:82:88:c8:46:1d:2c:da:f0:ea:57:aa:
06:d4:46:26:24:6b:9f:04:04:e4:b4:a3:6d:89:3b:
9c:dc:3c:58:cd:e9:19:e4:34:96:dd:b6:07:c0:fd:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:81:58:6D:B3:C6:91:3B:7A:08:2B:D7:E2:8D:D3:0A:C1:E9:7E:C8
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/poFYbbPGkTt6CCvX4o3TCsHpfsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.8.0/24
IPv6:
2a0b:6b86::/47
Signature Algorithm: sha256WithRSAEncryption
13:1a:bc:a0:24:ad:e4:5f:9a:5e:71:8b:5a:74:ea:79:f9:87:
60:19:b7:e5:0c:56:94:4b:c6:e5:2e:0f:3f:14:6f:6c:3b:0f:
25:b8:3b:b1:85:45:f6:b4:3b:93:a6:48:d5:a0:84:ad:f9:1c:
7a:90:2a:52:e2:c8:dc:08:d1:bd:d1:6c:de:a8:47:22:83:ce:
81:0f:81:24:0e:96:f6:f9:21:df:73:dd:06:f1:0c:2b:a5:22:
2f:97:7c:9c:cb:db:7a:96:83:8b:1b:b3:84:b0:c9:32:a0:6c:
93:30:c2:57:31:42:74:d5:18:ed:05:9e:26:83:29:e8:3e:a8:
a8:be:92:d2:66:0d:90:11:49:23:ee:40:e4:e6:f1:f3:55:af:
72:70:c1:04:1c:dc:e7:0d:87:55:01:20:5e:fd:ee:66:78:29:
a8:67:af:5e:0b:fd:43:b9:41:f6:34:7e:a9:c7:1e:40:c0:a7:
9d:28:4c:74:b3:52:06:38:57:65:a8:85:23:fa:45:ae:b5:77:
d6:22:f3:a9:0d:83:d3:d2:41:82:5b:44:8e:8f:81:4c:92:1a:
53:cb:45:e6:10:a0:b9:19:4b:e9:26:c6:76:ba:cc:31:c5:e6:
32:bc:39:70:a7:fc:1e:44:28:05:94:db:c9:06:46:87:90:23:
7e:11:35:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:35:09 2025 by rpki-client