Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa
File: Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa (raw, json)
Hash identifier: yHJbvycQTABXHTmwKw5e8PRSEFVUISxjCDtnqSPXNps=
Subject key identifier: 63:E8:20:BC:40:A9:27:E4:D4:8F:D0:4C:68:DC:45:54:70:86:FE:69
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 0196CA4AEDF18769A04B0BE4C6C09F3578FC
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa
Signing time: Tue 13 May 2025 15:37:10 +0000
ROA not before: Tue 13 May 2025 15:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 193.142.146.0/24 maxlen: 24
193.142.147.0/24 maxlen: 24
2a0f:ca80::/48 maxlen: 48
2a0f:ca80:1::/48 maxlen: 48
2a0f:ca80:619::/48 maxlen: 48
2a0f:ca80:1100::/40 maxlen: 40
2a0f:ca80:1337::/48 maxlen: 48
2a0f:ca80:1338::/48 maxlen: 48
2a0f:ca80:abcd::/48 maxlen: 48
2a0f:ca80:f000::/40 maxlen: 40
2a0f:ca83:1337::/48 maxlen: 48
2a0f:ca84::/40 maxlen: 40
2a0f:ca86::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:4a:ed:f1:87:69:a0:4b:0b:e4:c6:c0:9f:35:78:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: May 13 15:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63e820bc40a927e4d48fd04c68dc45547086fe69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:eb:a5:16:a5:74:e1:d9:75:4e:d6:2f:c0:
16:8e:fd:2a:7e:01:c1:32:18:08:2b:27:4a:bd:48:
32:d0:40:68:04:bc:05:2a:b6:7d:4a:ac:46:6e:1a:
4a:8f:f9:00:7e:1b:47:2b:62:5f:3f:13:ae:3c:f1:
6f:a4:0c:7e:d9:b6:c8:5e:5a:8b:1c:fb:ef:6a:a6:
60:c7:0e:2a:f4:7d:5d:bb:d8:23:9a:77:8d:09:33:
95:47:5c:0d:65:02:f2:19:77:ca:4a:a9:99:1a:df:
e0:0d:3c:56:b2:e8:3f:dd:b4:8f:a1:d1:ef:15:0c:
a5:9e:a9:63:31:d3:d9:fc:17:db:09:a0:26:35:ef:
d4:16:62:57:d6:10:47:82:93:c4:a6:6f:78:f1:4a:
bc:44:dc:f7:26:0d:bc:42:f4:2e:36:9c:13:cb:4a:
49:02:8b:19:ca:25:b2:a5:34:f8:66:e1:89:81:8a:
66:3d:15:34:d1:ce:60:c6:70:cb:c6:70:9c:6c:3d:
b8:32:f8:90:73:4e:b7:36:5b:d4:03:e4:09:07:56:
7d:8d:34:7b:7b:98:4a:f6:ea:08:a0:7a:14:ee:0e:
ad:49:36:da:3a:f8:e6:44:eb:b6:55:92:4c:b2:f4:
04:19:72:71:ff:c0:8c:e4:af:89:55:2a:bb:6f:a5:
04:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:20:BC:40:A9:27:E4:D4:8F:D0:4C:68:DC:45:54:70:86:FE:69
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/23
IPv6:
2a0f:ca80::/47
2a0f:ca80:619::/48
2a0f:ca80:1100::/40
2a0f:ca80:1337::-2a0f:ca80:1338:ffff:ffff:ffff:ffff:ffff
2a0f:ca80:abcd::/48
2a0f:ca80:f000::/40
2a0f:ca83:1337::/48
2a0f:ca84::/40
2a0f:ca86::/40
Signature Algorithm: sha256WithRSAEncryption
c0:04:0f:74:8f:05:da:ce:f8:ab:90:58:aa:5d:a7:7f:73:d4:
5d:9a:e0:a7:43:2a:07:76:c4:8f:9b:cb:f4:c3:1f:d2:6a:24:
a7:52:47:26:2d:2d:45:86:3d:16:b3:88:b8:8b:c1:fc:ac:cc:
82:97:4c:68:81:7b:db:96:41:1a:4a:0d:30:94:d5:46:34:0c:
2b:67:62:73:ac:4c:84:a5:78:df:74:11:ed:18:4b:42:08:74:
51:1e:eb:f5:85:dc:d2:87:52:09:4d:8d:e8:57:eb:dc:c3:70:
39:fc:fa:55:e6:be:1f:65:b7:cc:32:99:3e:88:6e:b5:f8:91:
9d:49:1a:02:d1:b1:6e:75:43:0b:e3:df:57:22:29:89:6c:15:
a0:0b:1e:fb:3d:19:2e:5a:cb:6c:92:48:c9:3a:d7:5c:0e:92:
4b:17:dd:82:dd:69:94:84:6b:de:6d:c5:47:2c:d8:61:4d:07:
b0:6c:a2:7d:73:6e:e4:e2:73:15:e3:03:6b:8a:8f:39:9a:a0:
47:66:b5:6f:44:72:fb:50:3d:c8:39:9a:11:9c:ab:2f:01:cb:
e0:82:d1:b3:9e:7f:18:64:ef:ba:b7:b0:e4:ab:97:99:d4:6a:
48:60:ff:3e:c7:9c:38:7e:48:7d:36:e0:85:69:ea:f1:d4:3c:
7b:3e:72:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:26:55 2025 by rpki-client