Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EDUcNCkBTNQG1rlvApNZGAPdsFw.roa
File: EDUcNCkBTNQG1rlvApNZGAPdsFw.roa (raw, json)
Hash identifier: nHw/vfh8wCV0SdJZCG/9ZCxQDjMTgSWNMME4DSJ0FFw=
Subject key identifier: 10:35:1C:34:29:01:4C:D4:06:D6:B9:6F:02:93:59:18:03:DD:B0:5C
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0196DF29F2B2A0AA868DC39D40D8AC8114C5
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EDUcNCkBTNQG1rlvApNZGAPdsFw.roa
Signing time: Sat 17 May 2025 16:53:10 +0000
ROA not before: Sat 17 May 2025 16:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215140
IP address blocks: 195.216.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:df:29:f2:b2:a0:aa:86:8d:c3:9d:40:d8:ac:81:14:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: May 17 16:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10351c3429014cd406d6b96f0293591803ddb05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:01:3d:85:7f:d1:4f:f1:16:e7:8a:69:2e:
23:11:ee:ee:17:03:6d:ba:d9:7d:e4:dd:09:5f:5b:
e4:f3:59:dd:6e:00:46:54:5b:2d:98:a9:b2:a0:32:
81:fd:5e:38:99:c7:ee:05:fb:46:7d:07:e2:ec:91:
85:19:74:ba:25:7f:0b:66:5e:c8:bf:6c:9d:91:9f:
89:57:0e:3d:4e:24:f1:35:cd:d6:17:30:f4:ef:82:
16:40:f4:fa:46:24:ad:50:02:96:06:f5:77:8f:e5:
62:b5:f8:fe:c3:a9:ba:a4:a1:3e:3e:38:d0:08:11:
a2:97:9d:5b:2f:17:2d:25:76:84:ac:21:f4:6c:62:
9c:56:59:0d:7d:51:38:6f:f7:f2:f3:b5:df:42:a2:
2f:36:c1:66:7f:f9:42:a1:db:7b:f2:1d:67:0b:21:
56:6d:af:d4:6f:0b:fc:8d:b8:c4:82:54:c8:07:43:
57:a6:02:42:d4:af:36:3a:fb:6f:9a:98:17:41:61:
7b:1a:56:1c:62:dd:d1:15:86:e7:1b:5d:68:15:96:
1f:7d:ff:c3:49:a3:b2:28:33:b1:6e:de:60:15:30:
b7:3a:77:ef:d2:7b:8a:fb:15:5f:9d:fb:a0:ba:d5:
c5:c0:0e:cb:30:5a:37:09:b4:4d:99:1d:38:a7:5f:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:35:1C:34:29:01:4C:D4:06:D6:B9:6F:02:93:59:18:03:DD:B0:5C
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EDUcNCkBTNQG1rlvApNZGAPdsFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3d:0f:f8:fc:bb:b0:04:cb:18:c4:d9:26:5a:54:d0:5c:1a:
33:52:3f:0c:0a:c1:9f:df:33:7c:0c:91:48:5a:f6:7a:a3:36:
b8:93:17:4f:08:01:47:f3:67:be:38:b9:ef:4a:7b:11:de:0d:
ca:ac:21:bf:3e:47:93:df:f4:29:ed:fa:cd:ef:4a:a6:5a:2a:
5b:08:c7:4a:62:07:25:fd:f1:ab:e3:9f:23:22:ad:50:d2:3c:
1d:34:0e:40:7a:8f:16:2e:1d:d4:39:19:97:86:e0:f2:61:d9:
62:db:de:0e:6e:7d:b6:49:8e:78:d5:ff:7a:43:ec:52:b0:64:
ad:31:d5:b0:4d:dd:e1:91:d3:50:ad:f4:8a:43:a7:53:3c:10:
79:2c:e8:0e:2e:30:44:a2:8f:31:f2:b7:6e:4c:e1:b5:bd:3c:
9c:2f:67:10:05:99:bc:47:65:93:6c:14:77:22:37:4f:94:78:
1b:d8:c7:25:28:14:d1:0b:b6:c7:ee:87:8d:a1:58:54:85:aa:
49:44:6c:56:e5:9b:bf:78:03:59:db:a5:a6:3a:9b:70:06:bb:
4a:d9:ac:08:e2:37:f6:2c:23:dc:6c:e4:0f:2a:cd:a7:54:e6:
08:90:0e:8b:04:d3:6a:4b:35:1a:96:5b:b1:e6:26:37:6d:ce:
b8:8d:79:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:11:43 2025 by rpki-client