Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/XYQSeVCr4kShWFAmH70HRVamuIg.roa
File: XYQSeVCr4kShWFAmH70HRVamuIg.roa (raw, json)
Hash identifier: nQ8g4Z1Hm3mqDRzd9jVpTll1Ra05lnJOEAHJodd0ld8=
Subject key identifier: 5D:84:12:79:50:AB:E2:44:A1:58:50:26:1F:BD:07:45:56:A6:B8:88
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0197309AB078D20BF1449695B2AD390E330D
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/XYQSeVCr4kShWFAmH70HRVamuIg.roa
Signing time: Mon 02 Jun 2025 12:25:33 +0000
ROA not before: Mon 02 Jun 2025 12:25:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215098
IP address blocks: 80.250.165.0/24 maxlen: 24
85.143.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:9a:b0:78:d2:0b:f1:44:96:95:b2:ad:39:0e:33:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jun 2 12:25:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d84127950abe244a15850261fbd074556a6b888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:b8:76:a3:44:ad:ec:78:56:e3:47:c6:51:
e8:9b:ee:f8:6e:7e:e6:bc:94:a2:81:19:bc:a2:d9:
cd:65:1c:54:f7:fa:9e:19:94:e4:b7:b5:ec:01:76:
7d:6b:d9:e2:80:29:43:c3:3b:29:ca:90:76:fc:ec:
71:e6:73:41:25:8a:85:61:55:a2:44:b3:43:ee:9a:
22:45:aa:fb:aa:5a:fe:76:cc:dd:cd:c2:1a:25:2f:
fd:ed:a3:dc:3d:22:70:48:f8:88:aa:42:d6:e4:27:
96:92:58:39:85:0c:a8:e6:28:00:48:b9:95:e0:3b:
ee:02:f3:41:e8:84:59:4f:cc:d3:73:2c:39:f2:97:
81:02:f1:10:a9:ba:c1:7e:cc:de:f7:73:9e:3d:e8:
43:99:0a:27:6f:41:6c:c1:de:11:ee:50:a5:6f:1d:
72:b2:ec:54:5b:39:2f:5b:1b:54:83:22:01:07:c1:
d5:ee:e5:38:1b:25:77:3f:f4:00:20:ba:16:82:a4:
ff:8a:4c:9a:9e:74:82:82:c4:f2:dc:27:20:31:03:
92:3c:14:4a:ad:7f:2a:85:d4:4d:05:db:fc:f4:fc:
7a:ac:7a:09:26:8e:c8:28:d7:98:51:a3:3a:f1:43:
3f:e2:b5:82:22:83:ba:4e:1f:db:99:05:30:76:8f:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:84:12:79:50:AB:E2:44:A1:58:50:26:1F:BD:07:45:56:A6:B8:88
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/XYQSeVCr4kShWFAmH70HRVamuIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.165.0/24
85.143.201.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8f:77:05:42:d5:19:5a:a5:5a:0f:91:61:6b:7f:4d:d7:2c:
d6:7b:35:d5:36:f7:ae:49:3e:57:22:15:f0:ba:7a:ab:3b:26:
c4:bc:71:a6:57:23:cf:28:cb:fd:97:fb:cc:cb:60:cc:90:f8:
cf:f5:70:9c:4b:6d:f0:b4:7e:15:1d:69:84:f2:cb:2f:55:8b:
6e:bd:49:c9:a2:9f:db:58:6c:26:0f:51:3c:6d:82:02:b0:1b:
a7:f9:9d:dc:bb:f9:c7:81:de:43:16:94:aa:e7:9a:ea:9c:9b:
69:2b:d3:05:68:07:da:9d:6d:1b:18:b8:ad:ae:29:4f:b4:fa:
16:4e:77:aa:e1:9b:2c:c2:2b:ad:c1:dd:1a:59:ca:55:0f:30:
f6:1f:f0:1e:3e:d2:d0:a0:72:f3:47:f2:83:0b:a9:b6:e7:3e:
62:e5:56:29:0a:9c:28:28:db:bd:88:92:cf:0d:8e:5e:1d:14:
a0:ca:c6:6e:19:55:e8:d4:af:d3:9e:a8:c3:f2:05:7e:29:c8:
10:bc:8c:25:50:82:cf:41:8a:de:97:4a:15:e0:a2:2b:06:3b:
3c:dd:d9:dc:75:7b:20:84:d5:be:79:12:a5:05:08:3d:01:a1:
5c:fc:a4:83:52:d3:d5:f4:4b:a9:11:ef:2d:35:cb:78:38:9b:
b8:67:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:25:05 2025 by rpki-client