Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dtf5jn1XL0F_8aCWrc_4uRDv9gs.roa
File: dtf5jn1XL0F_8aCWrc_4uRDv9gs.roa (raw, json)
Hash identifier: BV4prXF6TTzr5R+mC+5My3rta6nIxaii7n4xVFbWwkA=
Subject key identifier: 76:D7:F9:8E:7D:57:2F:41:7F:F1:A0:96:AD:CF:F8:B9:10:EF:F6:0B
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019897B1BCE0B4079D21C29FDFF240D921CC
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dtf5jn1XL0F_8aCWrc_4uRDv9gs.roa
Signing time: Mon 11 Aug 2025 05:54:24 +0000
ROA not before: Mon 11 Aug 2025 05:54:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 79.132.180.0/24 maxlen: 24
79.132.183.0/24 maxlen: 24
79.132.188.0/24 maxlen: 24
79.132.190.0/24 maxlen: 24
88.223.154.0/23 maxlen: 24
88.223.164.0/24 maxlen: 24
88.223.165.0/24 maxlen: 24
88.223.166.0/24 maxlen: 24
88.223.167.0/24 maxlen: 24
88.223.176.0/20 maxlen: 24
88.223.180.0/24 maxlen: 24
88.223.183.0/24 maxlen: 24
88.223.189.0/24 maxlen: 24
88.223.190.0/24 maxlen: 24
88.223.191.0/24 maxlen: 24
88.223.208.0/24 maxlen: 24
88.223.218.0/24 maxlen: 24
88.223.224.0/19 maxlen: 24
213.164.96.0/20 maxlen: 24
213.164.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b1:bc:e0:b4:07:9d:21:c2:9f:df:f2:40:d9:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 11 05:54:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76d7f98e7d572f417ff1a096adcff8b910eff60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:7b:48:41:ca:76:d2:f2:d3:47:ec:8b:5d:
98:3e:1f:94:ff:6b:e6:75:5d:6f:10:48:ea:01:81:
28:f0:ad:bf:dc:cd:17:fd:db:fa:74:82:b7:bc:d2:
25:62:d1:66:6a:03:3c:5c:5e:65:eb:6a:73:02:64:
64:82:00:06:a8:62:22:77:ac:3f:11:ad:46:35:15:
3c:62:6e:a6:5b:09:7d:c4:9d:55:29:68:59:fe:a1:
09:6b:68:d5:fe:be:57:f0:5d:82:b2:77:03:66:76:
c6:58:8a:84:d8:46:39:7f:71:ef:df:b5:85:e8:50:
e9:33:66:d7:71:a0:c9:67:09:d4:6d:c3:e8:05:7a:
ac:49:a1:5b:4b:25:60:f9:73:df:7b:4b:d2:9a:44:
c6:a8:88:4e:55:f1:fd:46:14:8d:b3:49:3a:04:99:
4f:9f:b7:b2:0a:b2:d8:1d:fa:dd:7d:05:41:5f:29:
35:df:29:48:92:86:49:1e:ef:1e:15:29:8d:ca:a3:
a8:6d:85:19:47:4f:46:a4:c8:1b:63:9e:22:cb:6f:
5d:92:bc:17:a3:0b:1d:60:ce:7a:88:90:6b:d9:1b:
e1:80:79:d7:23:29:73:eb:7c:78:00:27:ab:24:08:
1d:06:c7:de:d0:dc:08:1b:44:33:2e:44:c0:21:cc:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D7:F9:8E:7D:57:2F:41:7F:F1:A0:96:AD:CF:F8:B9:10:EF:F6:0B
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dtf5jn1XL0F_8aCWrc_4uRDv9gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.180.0/24
79.132.183.0/24
79.132.188.0/24
79.132.190.0/24
88.223.154.0/23
88.223.164.0/22
88.223.176.0/20
88.223.208.0/24
88.223.218.0/24
88.223.224.0/19
213.164.96.0/20
Signature Algorithm: sha256WithRSAEncryption
81:e1:94:03:8e:60:a9:1c:3d:21:4c:4d:53:ef:55:be:d9:ce:
96:1b:a2:51:ac:8b:cb:35:1d:33:f5:a6:24:10:fe:b2:17:a1:
2a:b0:49:5d:b5:0f:0d:5e:4a:0c:f8:ba:b1:33:b5:8b:8f:3c:
72:b1:01:00:f2:2b:95:04:64:ae:68:99:35:f2:76:dc:3d:2f:
25:bd:63:60:ce:3c:6e:b3:44:13:d2:29:1d:09:49:dc:be:ee:
e9:bb:22:13:53:26:45:1b:61:6a:cd:aa:b7:6e:b0:89:df:d7:
72:89:bf:16:35:49:2f:72:b4:fd:8e:c3:dd:cd:81:bf:2c:87:
37:7e:40:c4:9f:b1:0f:0e:7c:b3:d8:19:0b:8e:cc:39:22:ff:
b1:6a:9c:2d:7d:57:f9:3e:75:56:21:1c:f0:4d:fa:3f:61:98:
0c:8c:92:5c:8e:69:90:e3:18:72:a4:01:01:1d:9b:32:70:68:
46:84:ab:e6:38:73:9c:19:c0:8c:ee:35:a2:29:9e:c4:d6:e1:
10:09:fa:a4:0e:75:25:ae:57:c8:49:9d:3a:47:58:9d:a3:2a:
ab:36:15:9e:d4:0c:f8:a5:8e:02:73:49:e7:c9:2b:20:24:f5:
a2:86:19:54:c6:31:2d:aa:06:72:66:cf:d7:65:9a:9c:da:2d:
1f:9b:d3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:47:51 2025 by rpki-client