Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa
File: NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa (raw, json)
Hash identifier: Xv44Y+Ginwz/PKxo+To+TC8XkCzR/fuz2BqxnW0vSNw=
Subject key identifier: 36:23:EA:06:86:07:50:E5:D7:CC:28:34:84:78:83:AF:A9:26:10:B4
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 019702E3D41B780B947CC06FFAED8AD578BB
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa
Signing time: Sat 24 May 2025 15:22:54 +0000
ROA not before: Sat 24 May 2025 15:22:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 185.250.186.0/24 maxlen: 24
185.250.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:02:e3:d4:1b:78:0b:94:7c:c0:6f:fa:ed:8a:d5:78:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: May 24 15:22:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3623ea06860750e5d7cc2834847883afa92610b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:ce:d8:ab:27:01:49:5e:5f:56:a4:ac:7c:
a7:35:bf:c5:7f:ee:1e:2f:68:b5:30:a9:54:76:55:
67:c0:de:f7:e4:78:dc:1d:f2:63:6e:46:b8:cd:13:
d2:c6:76:cd:6b:ff:50:48:74:3d:ae:a5:01:2f:14:
05:bf:5c:52:2c:a7:cb:61:f6:78:9a:0c:3a:a3:85:
c1:9f:18:c1:41:d5:aa:68:e7:1f:8a:18:b4:c4:04:
dd:c6:6a:83:3d:48:88:59:73:22:c7:89:b7:8f:a5:
59:78:9b:19:1a:d2:48:f8:74:9c:a4:38:74:ba:f0:
c2:aa:11:32:7f:5b:cb:e5:6c:5e:a4:16:da:e9:5f:
9b:80:97:e1:a9:ad:2d:73:5b:cf:ce:d5:90:31:43:
ce:88:2c:db:c2:14:62:02:93:a9:63:d7:39:2c:0c:
d6:6d:5f:64:d5:5a:b6:f2:37:c9:bc:b9:82:4b:c3:
ed:99:d5:c8:10:d7:20:d4:3d:87:2f:79:35:96:2f:
b0:e8:9f:f8:14:c2:b8:5c:73:cb:59:44:6b:78:df:
1b:d8:1b:39:0e:11:cf:73:9c:c3:08:14:d3:5a:a2:
78:be:8a:42:78:51:48:e2:3d:7e:a4:c3:70:57:8c:
07:ca:20:54:42:41:89:56:b6:6b:db:11:73:dd:85:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:23:EA:06:86:07:50:E5:D7:CC:28:34:84:78:83:AF:A9:26:10:B4
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.186.0/23
Signature Algorithm: sha256WithRSAEncryption
61:4a:61:2b:80:30:6b:c8:54:b2:3b:56:43:85:51:df:c8:6e:
0d:4a:29:d7:e0:b7:bc:1d:0f:4d:0a:d1:2d:a1:c7:3c:97:d8:
32:e1:1b:52:d7:ab:6b:42:b9:54:f3:0b:3e:49:91:4d:ee:f7:
37:40:d1:48:0e:df:80:06:ec:ad:1d:3c:85:95:f2:c5:aa:3b:
f8:5c:1a:49:c4:b5:5b:23:17:c1:f6:cb:93:55:71:40:7c:64:
75:b8:ec:84:32:f6:be:93:5a:67:c2:c8:9f:8d:d2:4b:06:ba:
96:7a:a0:00:19:a8:8c:0d:e5:e9:e1:fe:75:21:f4:32:87:d7:
95:7c:70:97:ce:6e:c7:4b:0d:a8:d6:62:6c:b2:b4:41:8c:2f:
74:57:ef:f3:22:6f:e7:98:93:83:36:35:ef:ad:91:65:f8:a1:
89:40:0b:4c:ff:aa:96:78:e3:df:10:cc:d7:ec:d3:09:4b:ee:
5d:4c:96:b3:3b:10:a7:2a:36:53:7a:96:29:ee:a4:18:80:7b:
b6:07:ed:7d:0b:21:53:67:c7:15:09:fa:f8:68:7e:9a:05:91:
d3:17:53:e6:d1:57:d6:01:da:e7:9d:a0:c5:e3:e6:bb:b9:95:
af:62:af:7a:39:ef:5e:2c:bf:53:7e:d5:58:d1:a6:f2:9d:05:
8c:89:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:55:54 2025 by rpki-client