Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/O_1KEMFUqgk53YPdkiJOMWFybCU.roa
File: O_1KEMFUqgk53YPdkiJOMWFybCU.roa (raw, json)
Hash identifier: 4rGooap/6UNkN/imOgEGeKddbOoLvOCJN4FBsaaC0Sw=
Subject key identifier: 3B:FD:4A:10:C1:54:AA:09:39:DD:83:DD:92:22:4E:31:61:72:6C:25
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 0197323007652BA7BC89E1D9168FCA8CCF6C
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/O_1KEMFUqgk53YPdkiJOMWFybCU.roa
Signing time: Mon 02 Jun 2025 19:48:17 +0000
ROA not before: Mon 02 Jun 2025 19:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15570
IP address blocks: 31.186.232.0/22 maxlen: 22
31.186.240.0/20 maxlen: 20
77.242.192.0/21 maxlen: 21
77.242.194.0/23 maxlen: 23
95.172.64.0/24 maxlen: 24
95.172.72.0/23 maxlen: 23
95.172.76.0/22 maxlen: 22
95.172.88.0/22 maxlen: 22
95.172.94.0/23 maxlen: 23
212.118.234.0/24 maxlen: 24
2a02:b50::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:32:30:07:65:2b:a7:bc:89:e1:d9:16:8f:ca:8c:cf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jun 2 19:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bfd4a10c154aa0939dd83dd92224e3161726c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:31:de:6e:48:c8:91:a6:4c:07:b8:b1:e7:
18:3e:fa:31:59:bf:f8:59:ec:b9:86:95:6b:55:4f:
2b:40:93:28:5c:ee:3d:70:39:87:ea:94:1e:a7:b6:
9e:a9:96:24:ca:8b:0f:33:b5:b4:d8:1a:a8:6d:e6:
2f:59:6d:4d:4a:49:55:cf:99:26:71:ba:05:48:f1:
74:88:18:5d:b6:5a:59:05:90:8a:5e:9c:44:cb:e1:
32:28:65:9e:2b:53:94:bc:39:6a:f1:c9:e5:5f:ce:
7e:03:b6:80:74:8f:21:1e:3a:db:13:58:82:df:51:
ab:dd:a5:17:db:f0:2f:5a:02:b6:6b:c0:76:7c:57:
77:71:d9:96:29:df:61:26:c3:82:5b:dc:d0:84:8c:
a5:26:dd:4e:bf:af:31:dd:e4:14:25:c9:7d:39:04:
79:6f:6d:28:bb:97:20:91:95:48:66:2c:ad:d5:09:
49:3c:4a:00:7d:ab:04:14:55:e8:34:e3:c2:f4:a0:
b6:88:3a:64:a9:af:69:54:9e:b2:75:56:f8:0d:6f:
9b:d1:02:f7:eb:88:4d:00:0a:ad:44:dc:fd:f1:e1:
ac:81:50:1d:94:52:7f:09:aa:5f:c8:d1:5c:4d:43:
b0:d2:fd:23:b0:10:61:c3:c5:be:5b:4b:47:a2:7b:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FD:4A:10:C1:54:AA:09:39:DD:83:DD:92:22:4E:31:61:72:6C:25
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/O_1KEMFUqgk53YPdkiJOMWFybCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.232.0/22
31.186.240.0/20
77.242.192.0/21
95.172.64.0/24
95.172.72.0/23
95.172.76.0/22
95.172.88.0/22
95.172.94.0/23
212.118.234.0/24
IPv6:
2a02:b50::/34
Signature Algorithm: sha256WithRSAEncryption
1d:cb:f4:9c:a8:b0:22:84:59:39:4b:96:db:22:8a:31:57:4a:
bc:17:15:46:33:af:6b:09:db:22:9e:36:95:4e:da:37:fd:19:
9a:93:12:c7:3e:6e:0b:f9:26:d6:f3:74:60:4d:e0:bf:e8:44:
80:a6:50:6e:84:77:6a:e5:33:28:c6:1b:ab:62:16:9b:c4:62:
c5:4c:9c:29:f3:94:e6:47:98:31:19:04:21:34:92:f8:31:30:
f8:aa:ca:04:8f:58:82:f7:71:79:e8:c2:6f:01:f0:d5:a3:7f:
78:1a:ac:67:4c:07:3c:c3:7c:a6:4b:6a:68:2d:65:dc:dd:cf:
25:18:96:7f:2d:da:cf:10:20:ba:4f:4b:7d:f9:ab:99:d6:15:
af:50:58:8e:8d:3a:0b:bc:12:70:f4:b4:0b:96:d4:4f:3e:d3:
78:1b:02:18:ca:8e:98:7c:a3:7e:32:c5:96:8a:5d:25:47:4b:
ce:e8:12:47:19:c4:f6:06:1f:e0:b7:cd:ec:21:0a:56:13:1c:
b6:bf:4c:48:e1:46:8e:30:7e:82:0a:63:cd:c8:75:cb:9b:3f:
03:d7:20:b1:25:4b:27:e5:f0:92:27:ba:f3:4a:c5:ce:40:c7:
7f:bb:64:af:8a:f6:4d:bc:32:5d:f0:7a:72:c3:4b:62:d5:af:
bf:ce:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:19:36 2025 by rpki-client