Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/X2bocyRVhCfvso68Pv43uBx6gHw.roa
File: X2bocyRVhCfvso68Pv43uBx6gHw.roa (raw, json)
Hash identifier: ch7Rg28zRrgi0YGzVdKPWQbcu7IjFqyNq5JbEbQ26hc=
Subject key identifier: 5F:66:E8:73:24:55:84:27:EF:B2:8E:BC:3E:FE:37:B8:1C:7A:80:7C
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 0196FC7B3458B00066FEB74FBE09BF71ECA8
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/X2bocyRVhCfvso68Pv43uBx6gHw.roa
Signing time: Fri 23 May 2025 09:30:54 +0000
ROA not before: Fri 23 May 2025 09:30:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20565
IP address blocks: 45.81.208.0/22 maxlen: 22
45.153.204.0/22 maxlen: 22
85.222.200.0/21 maxlen: 24
185.16.220.0/22 maxlen: 24
185.113.48.0/22 maxlen: 22
185.241.0.0/22 maxlen: 22
2a06:6800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:7b:34:58:b0:00:66:fe:b7:4f:be:09:bf:71:ec:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: May 23 09:30:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f66e87324558427efb28ebc3efe37b81c7a807c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:51:1a:5a:99:91:2c:4d:93:d9:5f:0a:f9:
74:2d:18:46:21:92:28:02:9a:1b:bc:68:f5:15:c3:
a9:cb:f3:3c:69:33:f5:c1:6e:8f:e6:52:c8:3c:7c:
6d:b9:e6:f4:8b:fd:69:05:90:07:89:c1:93:2d:44:
8f:26:cc:ed:f7:e5:04:8c:93:a5:61:98:92:cf:db:
69:a0:e4:1d:e7:9d:d2:36:af:f2:e8:39:20:e3:f1:
06:5a:59:d5:bb:7d:1d:05:28:7d:6a:1d:d7:da:7c:
68:13:dd:ee:9c:be:a5:5f:4e:20:cd:d3:8b:b4:6c:
2f:22:56:3c:1b:37:b3:ef:d2:c7:36:a3:62:f4:c0:
d1:26:b0:8d:c6:e4:56:82:a1:5b:cc:f9:98:d8:b0:
84:ea:6f:20:bc:37:da:d5:28:78:eb:39:7c:fc:32:
68:3b:e2:b9:d5:95:86:13:d4:25:5d:d0:9e:58:40:
53:8f:86:83:41:41:72:ba:97:ab:25:cf:1f:33:ab:
c0:df:84:fa:10:f0:d8:ed:c9:46:44:cb:1d:d5:e7:
87:99:7f:74:18:50:a9:d6:4e:df:4c:5b:bd:d2:0a:
f5:f1:c5:dd:d9:f5:c5:b2:69:6e:95:ca:4b:27:03:
e0:41:00:a8:27:6b:13:02:33:00:01:8c:32:73:79:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:66:E8:73:24:55:84:27:EF:B2:8E:BC:3E:FE:37:B8:1C:7A:80:7C
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/X2bocyRVhCfvso68Pv43uBx6gHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.208.0/22
45.153.204.0/22
85.222.200.0/21
185.16.220.0/22
185.113.48.0/22
185.241.0.0/22
IPv6:
2a06:6800::/29
Signature Algorithm: sha256WithRSAEncryption
45:e7:42:1d:c4:66:57:af:9e:e5:37:2d:98:43:c0:22:77:6e:
97:4a:58:68:2b:f7:0e:8d:74:f3:8c:3c:ea:e5:b7:a3:0f:16:
0f:86:c1:5f:7e:de:61:ff:ef:13:4f:90:1e:b7:81:f2:c3:7f:
fc:85:b0:56:87:a3:0a:ae:be:ed:00:d3:5f:72:fe:5f:27:8d:
3b:60:a6:2d:a1:cd:9f:c3:de:2e:91:ef:8b:22:fe:68:de:02:
5e:24:cf:27:95:23:1f:f2:93:f8:e0:64:33:31:90:f6:e3:87:
fb:db:68:14:32:18:3b:1f:39:01:a1:80:9e:0c:47:d8:b8:8d:
29:88:24:6e:4d:e9:50:b3:19:cb:90:c9:a1:c2:0a:8b:e6:9c:
4b:cc:83:b9:39:44:75:c4:0c:50:73:19:fe:17:34:b4:5b:25:
3d:bc:87:64:b9:59:f7:b9:06:f0:53:4c:26:f5:35:80:bb:c2:
31:42:00:a3:45:f4:45:9c:60:50:91:02:f9:47:f6:3a:a3:19:
65:be:b4:3a:c9:89:cc:d1:a0:57:88:56:95:33:3a:c5:bd:b0:
b6:df:61:f5:df:de:e7:25:a4:8b:39:a8:62:6e:0e:4e:31:66:
91:3f:13:3e:d5:15:d9:30:1a:36:27:47:21:e7:e0:f5:95:61:
d7:59:33:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:27 2025 by rpki-client