Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Ck6zT6x0Zv6U2p-ZSrNCj8cqENA.roa
File: Ck6zT6x0Zv6U2p-ZSrNCj8cqENA.roa (raw, json)
Hash identifier: vn4Mm/Ol0HS3ALJw769qg2+sjsgf0CiNSgVo1qEs5GI=
Subject key identifier: 0A:4E:B3:4F:AC:74:66:FE:94:DA:9F:99:4A:B3:42:8F:C7:2A:10:D0
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01971B347FB9F0FFEE945B85D7258BBEF33B
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Ck6zT6x0Zv6U2p-ZSrNCj8cqENA.roa
Signing time: Thu 29 May 2025 08:41:54 +0000
ROA not before: Thu 29 May 2025 08:41:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206388
IP address blocks: 185.169.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:34:7f:b9:f0:ff:ee:94:5b:85:d7:25:8b:be:f3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: May 29 08:41:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a4eb34fac7466fe94da9f994ab3428fc72a10d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:88:b7:72:fb:e3:c3:3a:0d:fd:03:7f:11:
45:19:dd:17:50:aa:c8:50:01:ce:a1:3c:a8:f8:2e:
ae:69:0f:fe:56:24:fc:18:ba:c7:2a:ad:fb:f8:90:
8a:47:fe:bd:18:a1:8e:ab:5e:e4:fd:d6:04:04:14:
29:d7:97:89:ae:29:20:b0:af:45:9b:f6:d6:9b:c9:
db:c6:5a:a7:a9:81:97:3b:d3:06:b3:90:35:e7:73:
e9:00:80:6a:e0:6e:42:d0:38:10:f5:2c:e7:16:b9:
1f:21:c0:0e:f9:01:e2:73:db:a5:cb:ae:46:8f:ea:
68:04:f2:a1:a4:c4:79:80:dc:2a:f6:ed:d9:a7:47:
40:a8:91:67:d6:79:87:e5:3a:fb:9f:f1:48:f9:7c:
b9:6a:4f:63:96:a6:84:b7:e0:87:88:59:7f:36:87:
34:74:06:3c:89:82:5b:35:12:2e:8f:23:63:49:34:
b9:1f:a1:8b:3d:c2:cf:55:73:f5:53:db:30:eb:13:
8b:74:9d:e0:cc:91:ba:e6:cb:63:23:f1:82:05:76:
8f:40:58:52:62:91:36:65:f2:c6:2e:b6:f3:96:20:
5e:32:64:de:ca:57:a2:ad:ee:23:0c:3a:dc:f2:68:
f7:8f:bf:8d:62:ed:ce:90:1f:a5:3b:96:6b:ce:64:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4E:B3:4F:AC:74:66:FE:94:DA:9F:99:4A:B3:42:8F:C7:2A:10:D0
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Ck6zT6x0Zv6U2p-ZSrNCj8cqENA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:e4:5c:2f:14:9f:97:af:b5:dd:bf:ff:4e:f0:c7:f0:4e:a4:
fa:b6:23:22:1b:98:5c:ee:6f:d9:86:2f:62:cd:b2:02:39:73:
f2:08:c0:d7:ec:a4:a6:bd:1c:62:f5:43:10:44:3d:6e:fe:65:
6f:e8:f7:fe:40:aa:2b:ec:8f:ad:80:f3:4a:d1:67:95:fa:30:
2a:51:2c:76:93:6c:a6:65:bd:5c:c4:c5:76:af:ce:8b:c7:f7:
61:fc:3e:04:dc:a3:a5:9a:f5:f7:eb:cf:b3:74:cd:96:b9:94:
d0:9e:ca:67:26:e5:c2:73:a7:0d:e1:79:c1:aa:16:d0:f4:b6:
47:18:f4:75:29:ab:bb:96:11:19:83:96:29:48:03:71:46:49:
2f:bd:d4:d0:ea:27:c5:e5:d0:41:3d:ef:a1:de:07:c2:3c:18:
a7:e6:8e:93:d8:64:72:52:3d:cb:78:14:b3:3f:32:02:e6:6e:
09:53:64:70:93:f5:a0:11:ef:75:52:c2:ee:f8:d8:c8:61:3d:
22:c8:e1:98:2a:0d:08:b2:18:6f:7f:d1:16:b9:33:a0:f5:db:
9a:45:2b:97:37:dd:c6:4b:19:61:04:67:a1:78:87:44:a0:0f:
3d:87:e3:2a:24:a4:bd:bf:9a:02:a1:ca:75:ba:2c:26:54:3e:
43:ec:ed:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:07:59 2025 by rpki-client