Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/gDrJ_yW-_CzbWfpTMme-odFmJlw.roa
File: gDrJ_yW-_CzbWfpTMme-odFmJlw.roa (raw, json)
Hash identifier: gy5Z4mzDyCMzzZeJUBNPlOeBnObygQh/RNlUGtI+BkA=
Subject key identifier: 80:3A:C9:FF:25:BE:FC:2C:DB:59:FA:53:32:67:BE:A1:D1:66:26:5C
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0196ED5370BCC95B2E4E93EC8492E20A55A7
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/gDrJ_yW-_CzbWfpTMme-odFmJlw.roa
Signing time: Tue 20 May 2025 10:53:10 +0000
ROA not before: Tue 20 May 2025 10:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201935
IP address blocks: 84.254.130.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.132.0/24 maxlen: 24
84.254.137.0/24 maxlen: 24
84.254.144.0/23 maxlen: 24
84.254.144.0/24 maxlen: 24
84.254.145.0/24 maxlen: 24
84.254.146.0/24 maxlen: 24
84.254.164.0/24 maxlen: 24
95.210.111.0/24 maxlen: 24
95.210.132.0/23 maxlen: 24
95.210.132.0/24 maxlen: 24
95.210.133.0/24 maxlen: 24
95.210.189.0/24 maxlen: 24
176.227.131.0/24 maxlen: 24
176.227.138.0/24 maxlen: 24
176.227.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:53:70:bc:c9:5b:2e:4e:93:ec:84:92:e2:0a:55:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: May 20 10:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=803ac9ff25befc2cdb59fa533267bea1d166265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:2d:10:79:57:d8:1c:fa:a2:9f:6d:ba:21:
73:ee:54:d5:80:07:24:56:ea:f0:2c:f1:aa:67:5c:
a7:ae:81:9d:1e:69:22:3d:12:f6:11:56:d1:f0:93:
5d:a4:d6:b0:e6:6e:bc:24:df:dd:80:62:ce:8e:bd:
ff:a2:46:ce:a8:fe:4f:fc:5a:ad:e8:ad:ee:f7:1e:
de:0f:db:30:c2:a8:88:cd:e3:82:0b:1d:33:bb:f0:
b9:58:f2:48:33:6e:2a:f5:11:0c:76:d7:14:e6:64:
88:62:c1:94:dc:15:7c:d6:b4:00:91:03:d0:0e:5c:
f0:a9:fb:ce:ed:8a:71:4f:91:da:91:53:57:ac:4f:
ac:ee:8f:60:7a:e3:41:99:dd:86:87:d4:cd:47:46:
65:eb:e4:4f:04:18:24:66:ec:f0:e9:71:4c:e3:5b:
d0:4c:5d:1e:5d:19:0c:87:90:67:c6:d5:1a:39:f5:
01:48:12:f0:09:48:29:bd:63:3c:a0:73:75:a9:46:
7d:3d:a8:80:6a:b2:e0:c3:5e:ee:8a:98:cb:22:0e:
c5:74:28:6a:da:50:18:70:9e:b8:30:5a:db:70:f8:
9b:85:91:6a:1f:cc:91:ac:9d:22:47:45:31:ad:cb:
ce:5d:f9:53:98:96:95:c1:74:b2:45:0f:9b:a6:1d:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3A:C9:FF:25:BE:FC:2C:DB:59:FA:53:32:67:BE:A1:D1:66:26:5C
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/gDrJ_yW-_CzbWfpTMme-odFmJlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.254.130.0-84.254.132.255
84.254.137.0/24
84.254.144.0-84.254.146.255
84.254.164.0/24
95.210.111.0/24
95.210.132.0/23
95.210.189.0/24
176.227.131.0/24
176.227.138.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:a5:df:ea:ef:82:1d:0f:a3:f5:5a:1c:b4:1e:e8:6c:fb:bb:
13:b0:fe:33:88:3a:b9:15:28:56:83:a1:22:c8:b9:02:c4:ed:
46:2a:8a:b4:0d:36:89:05:1c:2a:c2:5f:1d:2e:16:43:de:5a:
e8:6a:0c:8c:fa:ab:cd:70:3d:f9:04:6b:6d:63:83:86:93:f2:
5d:4c:82:e1:78:d6:f9:31:15:00:10:8d:d7:89:44:70:11:96:
a3:e7:80:b7:b8:e5:91:c3:0b:be:bb:b8:9a:46:bd:29:e8:ff:
36:7b:c3:e0:5b:a7:e2:5b:19:e6:2c:13:ca:57:2a:68:3d:75:
4d:88:eb:17:d0:27:2a:33:18:5b:0c:d1:a6:c9:57:29:0a:2a:
fa:d5:80:62:26:93:7c:72:91:d9:6a:bf:ca:ba:cd:7b:b2:08:
78:28:b3:75:85:96:42:bb:12:60:e6:38:b2:f9:59:3b:38:83:
d9:2d:15:ae:bc:e7:1f:9e:74:4d:fa:15:4c:4f:a0:9d:55:e9:
bc:32:d3:28:b5:31:40:79:21:0a:23:21:31:99:55:ce:d5:73:
f2:1a:1d:8f:aa:26:fb:e9:a1:9d:44:51:37:05:95:e3:d6:7a:
78:6c:d0:4b:60:f2:94:af:b8:22:f4:98:16:28:44:b4:a3:fe:
a2:99:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:22:16 2025 by rpki-client