Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa
File: 5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa (raw, json)
Hash identifier: o6t7ExGzOX2KWBxMdFDPPoJaZWdADyyPaXoKd8DGN1w=
Subject key identifier: E7:14:53:AB:37:07:14:75:50:A3:C7:C0:93:D8:DD:38:40:D6:70:DA
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 0196AAC74D3922EAF0308143DCF54EC6122C
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa
Signing time: Wed 07 May 2025 12:45:10 +0000
ROA not before: Wed 07 May 2025 12:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203268
IP address blocks: 185.137.244.0/22 maxlen: 22
185.137.244.0/24 maxlen: 24
185.137.245.0/24 maxlen: 24
185.137.246.0/24 maxlen: 24
185.137.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:c7:4d:39:22:ea:f0:30:81:43:dc:f5:4e:c6:12:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: May 7 12:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e71453ab3707147550a3c7c093d8dd3840d670da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:56:1f:80:24:58:6b:a9:0a:12:0a:76:55:
ba:1e:1c:af:1d:b2:c4:1f:27:e4:75:41:eb:2e:d4:
99:f3:3f:e5:fd:dd:00:86:32:d1:8f:a7:8c:fc:81:
92:33:37:a3:32:46:bc:28:a2:17:40:be:cd:e3:98:
e0:41:d1:5d:04:c0:5c:92:44:0e:b8:54:c4:0a:83:
55:03:56:4a:0c:3c:99:31:6c:8e:0e:dd:33:e2:ca:
ef:e1:4f:30:54:78:d6:c0:a9:39:2e:cb:c4:36:38:
bf:6e:f3:bd:ac:68:6d:75:a0:33:18:b1:75:c2:4e:
7e:ef:db:bd:62:f1:6d:f2:dc:fd:49:c1:96:2e:69:
97:4c:e5:ed:3f:22:a4:f9:34:e8:4a:a7:3a:e1:73:
02:3a:f3:50:2a:a8:70:0a:84:f0:7c:01:c9:df:38:
00:9d:86:82:e0:eb:61:36:02:4c:36:e7:ef:23:c5:
d0:ff:9c:ab:97:d3:f0:2b:72:f1:d5:09:a1:5d:1d:
d1:9c:c9:c3:2e:b5:3a:69:81:fa:de:e6:ac:9b:01:
40:5c:b1:31:91:fb:89:30:28:80:58:a7:b2:af:96:
5e:bb:29:e7:e7:3c:14:dc:51:c7:ee:b3:6d:e3:64:
65:32:d9:72:f6:c4:af:59:c4:2e:60:5e:70:95:9b:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:14:53:AB:37:07:14:75:50:A3:C7:C0:93:D8:DD:38:40:D6:70:DA
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.244.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:58:7b:8b:6d:ad:0e:36:91:d2:b9:17:26:b1:39:b6:44:00:
c1:5f:75:a4:ed:2a:68:2a:88:d0:47:7a:9c:f2:fe:91:d2:0b:
1d:d5:23:0b:ae:48:3c:c5:cf:67:9e:cc:10:78:79:dd:7e:d6:
12:1a:83:da:7b:f4:51:32:79:90:43:68:f9:0a:bd:92:fb:0c:
02:44:f4:b3:f4:80:11:35:b2:1f:66:66:b9:bd:ab:5d:b0:36:
a8:a9:4a:b3:74:b4:24:a5:f8:13:75:28:a8:6a:8c:7e:e1:d4:
84:04:b4:cf:c5:3e:80:03:2c:34:36:2e:a9:85:60:c2:63:7e:
e5:dd:12:4f:69:20:f3:cf:b6:7c:21:ec:7c:22:d2:e9:4a:f1:
82:ed:45:9a:33:56:ee:73:c3:b5:57:7f:d9:d8:30:33:1b:57:
8b:87:d7:98:80:b7:09:27:01:c1:d4:fd:1d:b6:6f:d2:d4:2b:
b8:ef:11:f3:0d:46:ef:ca:7c:d6:18:36:9a:d2:6f:58:49:27:
88:34:c8:50:26:df:df:85:28:41:49:8c:be:ea:5e:1f:b8:56:
e8:c6:cf:32:d5:6c:2e:9d:0d:2b:6b:52:d0:e0:8e:9a:bc:b7:
11:3f:20:65:b3:87:af:e6:d0:51:24:95:04:61:04:7b:37:c8:
53:b2:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:36:58 2025 by rpki-client