Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/do3ElDxMVIh37qtUKRGSsDPGoF8.roa
File: do3ElDxMVIh37qtUKRGSsDPGoF8.roa (raw, json)
Hash identifier: 5FNPl6Uerfw/DholCrg1Vmxt8LzF0MM2XsAWcQn7tD8=
Subject key identifier: 76:8D:C4:94:3C:4C:54:88:77:EE:AB:54:29:11:92:B0:33:C6:A0:5F
Certificate issuer: /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial: 0196FBEC6188FD3B29C005274F1A6BA0CEA4
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/do3ElDxMVIh37qtUKRGSsDPGoF8.roa
Signing time: Fri 23 May 2025 06:54:54 +0000
ROA not before: Fri 23 May 2025 06:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57961
IP address blocks: 37.139.112.0/21 maxlen: 22
37.139.112.0/22 maxlen: 22
37.139.114.0/24 maxlen: 24
37.139.116.0/22 maxlen: 22
185.63.176.0/22 maxlen: 22
2a00:9f40::/32 maxlen: 32
2a00:9f40:1::/48 maxlen: 48
2a00:9f40:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fb:ec:61:88:fd:3b:29:c0:05:27:4f:1a:6b:a0:ce:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Validity
Not Before: May 23 06:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=768dc4943c4c548877eeab54291192b033c6a05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:81:e4:a8:d4:e3:95:65:5b:1a:3b:48:fc:
d6:8d:fa:3e:20:63:b2:68:44:f6:3f:46:6b:c2:3b:
42:c1:6e:d0:40:d1:b8:2b:8a:c5:44:a3:86:06:d0:
df:9f:8a:a0:17:09:92:58:02:ee:76:a9:4b:96:89:
90:7e:56:61:7f:f9:b0:2f:35:83:8f:90:2f:fd:ee:
af:8b:15:e8:2a:a7:ce:c4:86:00:71:98:8f:3f:82:
25:99:9b:8a:e3:9a:f0:f6:b7:61:d4:aa:23:67:37:
0f:37:89:30:d3:25:31:75:21:79:e1:c5:52:96:cf:
b3:65:ad:02:27:83:0e:a3:0f:57:80:b8:4c:0e:31:
ca:cc:0d:fc:59:e9:ed:1b:10:5f:88:6a:b7:fa:8a:
43:9c:fd:07:71:bd:a9:5f:86:f5:eb:61:97:b3:fd:
23:07:27:3b:2f:9a:59:c4:17:12:14:67:6e:6b:17:
7b:f3:9d:60:09:83:2c:d4:34:09:ba:98:0e:03:38:
96:0f:ae:0b:6d:f6:c6:fb:f7:ac:0e:36:9e:f0:fb:
3c:a0:b9:c3:af:f3:33:20:eb:ab:b1:c1:e0:87:87:
db:e8:a7:23:5b:e1:3a:2d:d4:0b:6b:ee:6a:c0:4c:
21:31:9e:85:7b:a2:b0:ad:24:01:61:8b:26:a4:2e:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8D:C4:94:3C:4C:54:88:77:EE:AB:54:29:11:92:B0:33:C6:A0:5F
X509v3 Authority Key Identifier:
keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/do3ElDxMVIh37qtUKRGSsDPGoF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.112.0/21
185.63.176.0/22
IPv6:
2a00:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
8f:b1:d4:f2:25:25:0c:94:ce:0a:af:2b:bd:c7:64:be:5d:81:
87:6c:c3:b3:54:b5:97:4f:cd:2d:b7:18:bf:f3:c0:79:15:ce:
93:01:fc:f5:36:3b:39:bf:04:8a:17:19:18:fe:ba:34:05:08:
42:52:2e:85:44:c6:ec:ec:7d:ca:10:fb:9f:c9:d4:51:49:db:
46:18:fe:e8:54:ac:83:e4:57:c4:43:70:09:b0:04:f0:6c:e4:
b7:83:16:94:60:e8:da:e2:fc:87:95:98:c8:f4:e3:8c:92:a0:
6d:f2:a7:e5:e5:a7:1c:7b:1c:64:75:2a:d5:c1:73:2f:5b:f4:
27:cd:85:04:b9:c4:bc:16:91:82:49:7c:c1:de:51:a0:2e:62:
f4:01:9e:bd:f2:99:4b:c3:4a:ee:89:ed:2a:e2:35:99:57:28:
88:cd:4e:97:32:09:8d:37:b9:c2:a1:7b:c0:b6:b6:32:47:55:
dd:39:7d:32:e8:cd:dd:f9:3a:ae:eb:06:05:36:a1:ce:57:43:
bb:30:5a:84:de:b4:bd:88:1e:1c:43:ce:3d:9e:9c:71:52:c9:
70:29:96:e6:6d:30:00:55:7f:1e:4d:ae:97:b7:ce:c6:da:6b:
27:c1:cd:00:f5:d1:97:43:f0:0b:69:74:39:0c:5b:0c:f7:0c:
89:99:d8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:24:34 2025 by rpki-client