Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/pCTaApQvpYsM3MDm7LT2JqcNyVI.roa
File: pCTaApQvpYsM3MDm7LT2JqcNyVI.roa (raw, json)
Hash identifier: cN9xaAGxJwSGMNwDYwUyA6y68OgG68IIjUc9Bijaotw=
Subject key identifier: A4:24:DA:02:94:2F:A5:8B:0C:DC:C0:E6:EC:B4:F6:26:A7:0D:C9:52
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 0196F7D504CE66801F9A4F3C0DE92D91B5F4
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/pCTaApQvpYsM3MDm7LT2JqcNyVI.roa
Signing time: Thu 22 May 2025 11:50:54 +0000
ROA not before: Thu 22 May 2025 11:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43733
IP address blocks: 46.130.0.0/16 maxlen: 16
46.130.0.0/17 maxlen: 17
46.130.128.0/17 maxlen: 17
46.130.255.0/24 maxlen: 24
83.139.24.0/21 maxlen: 21
83.139.24.0/22 maxlen: 22
83.139.28.0/22 maxlen: 22
83.139.32.0/22 maxlen: 22
185.36.36.0/22 maxlen: 22
185.36.36.0/24 maxlen: 24
217.76.0.0/20 maxlen: 20
217.76.0.0/21 maxlen: 21
217.76.0.0/24 maxlen: 24
217.76.8.0/21 maxlen: 21
2a00:1f28::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:d5:04:ce:66:80:1f:9a:4f:3c:0d:e9:2d:91:b5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: May 22 11:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a424da02942fa58b0cdcc0e6ecb4f626a70dc952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:ae:66:b1:02:f2:db:4d:61:90:ef:02:dd:
05:ad:66:d1:c9:28:cd:fc:f8:3f:23:2a:33:80:88:
83:31:a1:21:93:0a:c2:29:ed:d1:1f:8a:3a:84:c8:
24:17:d9:84:48:92:9e:6d:c3:f2:ed:af:1f:4d:c1:
46:be:35:d9:6b:47:8c:3b:47:eb:db:cf:f0:f8:e9:
f0:fa:e6:be:36:51:bf:53:3b:ac:88:4f:d2:ee:ff:
7e:99:39:97:da:ee:eb:93:85:7f:6c:65:1a:27:64:
92:c2:bc:e1:55:53:2e:d5:88:36:60:b2:a9:84:a8:
73:99:e1:88:8a:59:ef:fa:70:dd:99:c9:0e:29:8a:
20:82:06:d6:a1:c1:13:0c:b1:76:26:4d:47:65:85:
25:7f:ba:09:1c:77:d8:a1:63:fe:b2:59:5b:59:66:
67:3a:fe:ab:12:34:43:17:2b:aa:27:29:e0:4f:3b:
7a:8b:72:b4:b9:c3:2c:06:44:1a:78:8d:6c:d8:87:
61:9e:84:04:56:b4:30:f3:6e:c5:a3:e0:38:61:4e:
c0:93:47:2d:50:e1:6a:0d:47:78:c7:d1:47:96:ec:
6e:a3:21:a0:7e:09:02:c8:8c:24:d4:84:6b:aa:aa:
1b:55:14:b0:88:ee:de:f7:28:96:ab:a9:21:2f:63:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:24:DA:02:94:2F:A5:8B:0C:DC:C0:E6:EC:B4:F6:26:A7:0D:C9:52
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/pCTaApQvpYsM3MDm7LT2JqcNyVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.130.0.0/16
83.139.24.0-83.139.35.255
185.36.36.0/22
217.76.0.0/20
IPv6:
2a00:1f28::/32
Signature Algorithm: sha256WithRSAEncryption
3d:f0:00:6d:bc:bd:ea:0b:b5:d5:2b:a3:30:b8:a1:7a:11:97:
1d:3b:b9:1e:a6:dc:fd:c1:f8:17:b8:a0:3b:b7:a3:d5:3b:43:
9a:f8:5e:31:47:3b:d8:2c:05:9f:fa:9f:3f:3e:af:b7:a2:3c:
91:a1:25:f5:b1:af:62:58:35:8d:23:34:f3:3e:05:8a:f9:1d:
d2:89:e6:a2:e4:c2:ab:a5:3b:f9:62:e6:e0:ab:31:bf:ab:56:
98:8b:78:e4:35:3d:7a:34:73:3f:82:24:99:2e:a8:7e:18:0b:
d2:3f:71:62:33:a2:99:6b:3a:c9:94:1c:75:d0:97:07:ae:c2:
4c:a0:b2:23:1a:55:94:63:d7:d5:88:06:0e:ca:15:af:c7:92:
e9:9c:25:0a:19:c9:17:d5:7a:6c:ad:f9:46:77:1d:d9:62:e9:
84:80:14:0d:e9:bc:af:60:ce:05:fa:b5:2c:f2:f3:8a:3c:02:
8f:6d:b0:5e:a6:a0:bf:fe:39:a7:2d:45:a3:36:19:4f:c2:74:
7d:db:56:7d:6f:17:80:e1:48:bb:2f:45:74:1c:50:fa:2d:63:
d2:3b:df:57:fc:bb:2a:ae:eb:5b:94:08:f9:42:fe:65:5c:68:
28:fc:af:f6:9b:ca:c9:4c:ef:f3:11:0a:3a:36:4a:46:3a:cf:
61:85:d4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:28:42 2025 by rpki-client