Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DpeOLky_2ECCYrWg5S_bBhcDT1Y.roa
File: DpeOLky_2ECCYrWg5S_bBhcDT1Y.roa (raw, json)
Hash identifier: h0gVh65iKTiuCQNUZ2QJq2B7C30NlofGfBIngEbGT5Y=
Subject key identifier: 0E:97:8E:2E:4C:BF:D8:40:82:62:B5:A0:E5:2F:DB:06:17:03:4F:56
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019716D8794A943B627A2D71B73EE667A5C9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DpeOLky_2ECCYrWg5S_bBhcDT1Y.roa
Signing time: Wed 28 May 2025 12:22:54 +0000
ROA not before: Wed 28 May 2025 12:22:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213701
IP address blocks: 192.121.255.0/24 maxlen: 24
193.234.16.0/24 maxlen: 24
194.14.6.0/24 maxlen: 24
194.14.7.0/24 maxlen: 24
194.68.238.0/24 maxlen: 24
194.71.174.0/24 maxlen: 24
194.71.175.0/24 maxlen: 24
194.71.176.0/24 maxlen: 24
194.71.177.0/24 maxlen: 24
194.71.178.0/24 maxlen: 24
194.71.179.0/24 maxlen: 24
2a01:280:310::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:d8:79:4a:94:3b:62:7a:2d:71:b7:3e:e6:67:a5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 28 12:22:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e978e2e4cbfd8408262b5a0e52fdb0617034f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:fd:12:7e:1b:0a:46:77:8e:ab:dd:36:ca:
5e:b0:52:3d:62:39:b7:23:53:16:d7:e3:1d:15:a6:
56:d3:2f:91:9d:63:43:44:7f:a8:63:2f:42:1c:bc:
eb:a4:ba:f1:59:af:6e:e8:1b:b2:d4:ff:87:d6:17:
6d:89:42:a5:89:9d:23:22:ad:74:55:91:f1:5f:a5:
06:f0:35:e5:94:b0:85:c1:04:01:1d:19:83:71:39:
51:f4:75:de:2e:ef:2c:a9:49:fc:ad:9f:71:a0:a4:
94:d2:54:fe:77:9d:4c:48:93:18:bf:da:c0:f8:f0:
c1:e2:63:10:15:ba:6e:bb:3d:03:5c:8a:4d:ca:a5:
62:ba:59:6f:12:09:32:2a:c2:be:cd:19:e7:be:d5:
b9:7d:2d:27:7b:f8:67:ab:2d:2c:4e:ce:34:9e:aa:
e9:06:8e:56:28:74:5f:e5:34:25:a9:a6:9c:be:0c:
45:2a:c0:f5:6f:84:db:05:c5:d8:31:d5:d7:2a:db:
76:0f:ce:c6:c2:f8:46:27:68:30:32:1a:52:63:c2:
79:7b:70:84:55:fa:14:b2:1b:1f:26:75:17:03:47:
7a:3a:3e:d3:81:68:f3:34:31:94:b3:18:f6:96:6f:
74:65:3a:f7:b9:26:7b:6d:a2:65:19:f8:5c:13:11:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:97:8E:2E:4C:BF:D8:40:82:62:B5:A0:E5:2F:DB:06:17:03:4F:56
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DpeOLky_2ECCYrWg5S_bBhcDT1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.255.0/24
193.234.16.0/24
194.14.6.0/23
194.68.238.0/24
194.71.174.0-194.71.179.255
IPv6:
2a01:280:310::/48
Signature Algorithm: sha256WithRSAEncryption
6c:9a:79:ca:b2:d9:50:7b:23:ec:99:1e:1f:de:aa:a3:2c:10:
f3:4e:63:9d:39:ff:4b:2f:da:b5:b4:11:54:4a:7c:92:32:a3:
d2:8f:d5:70:2b:7a:02:cf:60:cb:14:2e:20:c2:50:06:d1:df:
84:7c:49:5e:69:cb:83:b0:f5:ba:08:87:20:6b:ae:d2:09:2d:
41:17:ca:fa:f8:5b:f3:f0:b7:b6:9d:d6:af:e8:2b:f8:ac:55:
ce:86:43:11:96:86:f6:cf:4d:25:a4:c0:d6:6d:e1:37:f0:e5:
ad:8e:02:fd:63:fd:bd:c7:29:ec:a1:00:9f:6f:1c:05:6e:4f:
2c:98:25:ea:50:9b:1c:74:8e:e8:09:79:fb:5e:4f:fa:87:a8:
96:95:06:70:c2:f1:4f:fb:78:0f:73:2f:cc:1e:b8:c7:2c:b6:
d1:6b:24:71:60:83:53:0e:36:20:a7:bd:d7:93:6d:78:a9:20:
21:e4:88:48:16:4f:ac:d2:44:8e:ac:84:f7:52:86:f9:e8:ba:
5d:f3:dc:1b:d1:4b:c4:9e:07:e4:8f:dd:b5:f2:d1:fc:6f:0d:
25:44:09:24:b9:7e:90:28:ed:d0:05:d2:1a:bf:b9:2a:7d:a5:
56:6f:24:5f:1f:86:95:5b:c6:cb:69:27:b0:9b:20:42:73:e6:
17:60:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:13:07 2025 by rpki-client