Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/e-zqoP0nWdm02Bk16jrVb4CC90g.roa
File: e-zqoP0nWdm02Bk16jrVb4CC90g.roa (raw, json)
Hash identifier: pTRQmXW0bB5un3EpnoOxHqaBcDgz2x7X9RkzGbB+gaE=
Subject key identifier: 7B:EC:EA:A0:FD:27:59:D9:B4:D8:19:35:EA:3A:D5:6F:80:82:F7:48
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 0196F1F6303E421F47C96B03C2007F2E4AA7
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/e-zqoP0nWdm02Bk16jrVb4CC90g.roa
Signing time: Wed 21 May 2025 08:29:25 +0000
ROA not before: Wed 21 May 2025 08:29:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199484
IP address blocks: 37.75.8.0/21 maxlen: 24
185.28.0.0/22 maxlen: 24
185.81.236.0/22 maxlen: 24
185.153.248.0/22 maxlen: 22
185.153.248.0/24 maxlen: 24
185.153.249.0/24 maxlen: 24
185.153.250.0/24 maxlen: 24
185.153.251.0/24 maxlen: 24
185.155.148.0/24 maxlen: 24
185.155.149.0/24 maxlen: 24
195.142.0.0/22 maxlen: 24
195.142.104.0/21 maxlen: 24
195.142.132.0/22 maxlen: 24
2a07:89c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:f6:30:3e:42:1f:47:c9:6b:03:c2:00:7f:2e:4a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: May 21 08:29:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7beceaa0fd2759d9b4d81935ea3ad56f8082f748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:0c:2e:5c:84:a7:03:72:7e:06:f1:c8:cf:
e9:f8:ef:75:02:d5:8f:b5:b8:07:35:23:9a:1c:09:
d2:5e:0a:e0:11:ca:3d:d4:d9:c3:0d:26:5a:e2:33:
54:ab:b3:66:19:35:a7:d0:99:e6:33:70:c5:b0:0b:
bc:70:7f:4a:f4:2e:6c:ee:fe:7c:61:0b:fd:b9:a6:
04:33:00:c6:5e:d0:76:ec:70:35:17:6b:c9:8f:70:
e0:e0:f0:2e:c0:1a:f2:11:d1:62:60:82:f6:d0:a5:
82:18:ff:97:3f:ac:44:68:e0:19:04:20:e9:5c:73:
7c:8b:99:97:76:43:8c:d5:06:c7:e0:a2:02:a7:a3:
4f:fb:a8:18:d7:27:19:2c:bb:27:4a:45:33:a9:e3:
fd:42:bc:4a:f5:ff:22:c6:36:b4:48:c4:96:a9:32:
d8:8a:6b:80:e6:5c:79:b0:9e:49:ba:f2:ff:d2:7e:
4c:8f:1c:bc:2f:6b:48:a6:17:1c:9d:bb:a0:79:0e:
87:b0:2d:26:74:9e:42:d6:e3:d9:5e:5b:69:ba:0a:
79:91:74:cb:1d:0e:4c:36:d8:9f:fe:cd:01:ac:f8:
50:ce:51:57:d1:66:07:df:b3:d5:6e:cf:05:f6:e7:
46:fa:fd:c3:d3:42:9e:d9:eb:bc:c9:af:7f:1a:eb:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EC:EA:A0:FD:27:59:D9:B4:D8:19:35:EA:3A:D5:6F:80:82:F7:48
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/e-zqoP0nWdm02Bk16jrVb4CC90g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.8.0/21
185.28.0.0/22
185.81.236.0/22
185.153.248.0/22
185.155.148.0/23
195.142.0.0/22
195.142.104.0/21
195.142.132.0/22
IPv6:
2a07:89c0::/48
Signature Algorithm: sha256WithRSAEncryption
99:6f:48:d6:ba:b5:93:e9:6a:89:fb:02:6c:33:8e:ea:97:7b:
92:b2:50:a7:87:77:0d:f0:4c:c8:9d:9e:e6:ed:b5:89:dd:fd:
fe:8f:38:0c:54:ee:1a:9f:b4:25:94:50:aa:46:db:c2:c6:24:
16:a3:2f:05:ba:6a:f2:fa:bb:fd:72:f8:94:1b:e7:6a:27:18:
c4:61:c1:ef:7f:5b:4c:d1:3f:ed:14:89:65:65:ee:c2:bd:9a:
23:6d:62:74:dc:92:1b:29:f4:6c:9a:49:68:ea:8d:ee:4f:56:
c7:e5:59:3e:dc:7c:82:4c:5b:b7:78:63:e9:ad:5d:d6:5a:57:
9e:aa:65:8c:bf:ff:a8:46:76:e3:f0:a3:35:a8:58:6c:dc:e0:
bc:c6:76:60:3d:26:4f:87:c7:76:63:76:5b:07:ed:44:f1:3c:
03:26:f3:c7:be:b5:1a:41:e5:3e:5b:66:21:d3:6c:eb:05:21:
fa:a1:0e:10:38:cb:6f:5a:78:9c:b2:e3:44:bd:6a:62:ea:dc:
b5:8e:05:72:14:26:85:b4:52:85:fb:ca:84:c8:b0:fa:3a:fe:
6a:68:b4:33:25:b2:31:96:2a:07:49:ca:21:fc:87:00:56:f9:
37:b3:a2:2f:5a:fb:2f:11:32:07:47:4d:b2:68:bf:04:fa:e8:
fd:da:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:01:29 2025 by rpki-client