Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/szfvO5xemUDNwsm8NEBYT23dwtg.roa
File: szfvO5xemUDNwsm8NEBYT23dwtg.roa (raw, json)
Hash identifier: OdcOwoNaGAN/Y8J6PuQ8N31R1GhbrMuGKQ8CdaMQwk0=
Subject key identifier: B3:37:EF:3B:9C:5E:99:40:CD:C2:C9:BC:34:40:58:4F:6D:DD:C2:D8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0197C5428EF56653ABD355BA810E5A551704
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/szfvO5xemUDNwsm8NEBYT23dwtg.roa
Signing time: Tue 01 Jul 2025 09:12:42 +0000
ROA not before: Tue 01 Jul 2025 09:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 185.214.108.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:42:8e:f5:66:53:ab:d3:55:ba:81:0e:5a:55:17:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 1 09:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b337ef3b9c5e9940cdc2c9bc3440584f6dddc2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:66:84:72:20:76:71:12:00:69:82:e3:29:
20:de:33:be:a6:c3:19:4c:d2:9e:ef:b5:a6:75:52:
a4:16:a7:12:6c:22:4f:64:7f:bb:51:e8:35:89:e5:
a0:dd:d2:bb:6f:f2:72:cd:78:a0:cd:9c:af:72:42:
1b:4e:0c:9e:5d:0a:97:8f:af:57:33:b7:51:5f:4c:
b4:17:81:c3:dd:20:96:7d:b6:3b:0d:ae:9d:be:ef:
35:23:22:5d:86:7f:22:21:ee:33:af:b9:4a:12:82:
41:5a:bb:c7:01:a7:ee:67:1f:ff:ee:bb:2f:87:ad:
c0:71:9b:ad:90:0d:b7:d0:8e:9c:ff:de:4f:c3:7a:
ab:74:cb:62:bd:9c:11:8f:41:40:af:10:32:4a:02:
e8:72:63:a3:9f:9a:f5:d1:a7:96:f5:31:27:cc:6e:
47:2a:3c:b7:76:02:fa:27:fc:67:c9:86:5c:4e:50:
9b:90:1d:31:a5:4f:17:00:f9:fc:34:72:fa:18:58:
1d:e7:4c:ee:e1:8d:45:92:b4:dd:63:d1:4a:69:a2:
97:14:21:53:46:7d:48:73:08:a3:e0:ad:8a:78:7b:
f2:d9:5e:27:f7:6f:ee:14:ef:1f:6e:35:61:4e:6f:
06:5f:b4:63:db:45:f5:0b:99:00:c0:1b:a1:12:6d:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:37:EF:3B:9C:5E:99:40:CD:C2:C9:BC:34:40:58:4F:6D:DD:C2:D8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/szfvO5xemUDNwsm8NEBYT23dwtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.108.0/24
185.223.82.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:2e:b4:24:e6:8c:05:12:0d:20:a8:38:b1:52:eb:4d:d6:04:
b1:19:44:9d:c8:c8:c4:bb:89:6b:64:a6:fe:2d:22:ea:28:72:
13:fd:e4:2a:6a:23:33:39:3c:f6:c0:33:cf:2c:fe:f4:9b:2f:
4d:04:1e:cf:17:79:e3:1a:10:3d:c9:87:64:aa:78:10:99:ca:
ed:72:ce:ad:9e:6b:c2:fb:83:9b:90:16:ca:00:9b:ed:ca:c1:
d5:22:27:7d:7d:12:18:39:b3:e2:10:2a:07:ab:c2:44:2c:0f:
0c:a9:fe:32:16:59:88:86:6c:92:b1:1a:07:db:20:fc:48:85:
de:dd:e8:8f:ca:aa:61:14:47:6c:d8:b1:4e:a3:9c:60:01:f9:
9a:11:08:9a:5a:11:f4:ba:61:f0:91:d4:1f:72:40:67:a5:b7:
7f:1e:46:7a:36:f8:d2:00:a4:22:7a:7b:8e:8d:4d:0e:2f:57:
89:44:60:a7:37:07:a9:a1:aa:ca:bd:f6:21:4e:23:71:94:c8:
72:21:5e:ad:7e:c9:d3:85:f4:25:f2:c0:8e:28:73:78:0d:40:
b7:a1:e8:86:e9:be:16:7c:2c:64:56:92:38:22:90:37:3c:3d:
3d:9f:63:8c:b9:1c:a4:84:5b:3e:42:32:48:ee:fc:97:be:ee:
2b:6a:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:00:35 2025 by rpki-client