Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Co0O-Sx0xh7iuEv-eZ0eQH78W-8.roa
File: Co0O-Sx0xh7iuEv-eZ0eQH78W-8.roa (raw, json)
Hash identifier: Vomj2TbHm0/Mb6h9ijk9ppY6c5abzfb7pReE0x+2938=
Subject key identifier: 0A:8D:0E:F9:2C:74:C6:1E:E2:B8:4B:FE:79:9D:1E:40:7E:FC:5B:EF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01973182FF64FBFF044DBDBC16A25EE0853F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Co0O-Sx0xh7iuEv-eZ0eQH78W-8.roa
Signing time: Mon 02 Jun 2025 16:39:18 +0000
ROA not before: Mon 02 Jun 2025 16:39:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:82:ff:64:fb:ff:04:4d:bd:bc:16:a2:5e:e0:85:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 2 16:39:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a8d0ef92c74c61ee2b84bfe799d1e407efc5bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:6b:23:82:72:f1:84:e8:8c:87:be:cc:4f:
fa:f9:89:36:9a:f4:fe:22:e6:b3:7e:ab:6c:c2:2e:
97:0d:2c:5f:b6:ee:c0:3b:b8:0c:e4:04:65:7b:8d:
0a:5f:f3:e9:1e:da:46:e5:40:08:06:8a:4e:3c:01:
c7:2b:12:62:e3:21:17:7d:58:d8:88:a0:d7:2c:f4:
83:32:80:f4:11:d0:fb:f4:20:f7:8f:a1:e6:95:53:
a8:99:fc:e5:f4:07:bc:36:6b:6b:11:19:31:ad:30:
3d:56:5e:cd:fe:c9:63:48:66:fe:6e:7c:de:a9:87:
4d:e7:b1:aa:a5:6c:85:b4:ec:61:21:06:4e:77:dc:
9b:09:28:5a:98:a4:97:9b:97:96:ab:ac:65:80:1b:
84:3c:0d:fa:3c:2a:44:c0:8c:be:21:65:c8:c1:61:
07:35:f1:c2:28:9c:ae:0d:e6:14:94:b5:1a:2f:5d:
aa:a6:35:83:b2:2e:0f:8c:1c:be:ba:5a:ec:a7:67:
d7:bf:b5:6a:92:b9:6d:78:6a:04:cf:80:fb:ce:2a:
dd:ae:03:0f:42:21:c1:96:29:88:48:b8:bb:e3:70:
c1:00:93:74:01:1f:4a:36:95:4b:c5:db:18:ee:0e:
8d:42:cb:41:63:58:9c:74:f3:a4:a2:3c:72:79:9f:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8D:0E:F9:2C:74:C6:1E:E2:B8:4B:FE:79:9D:1E:40:7E:FC:5B:EF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Co0O-Sx0xh7iuEv-eZ0eQH78W-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.201.0/24
88.209.209.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:d1:da:54:72:ca:2d:df:e2:66:6a:78:50:16:96:f5:01:0f:
d0:22:78:92:93:4f:8b:ed:d0:c2:ca:a3:e5:78:4d:8d:41:62:
b2:0e:6c:c8:63:31:0e:c5:ce:05:ac:1a:35:6d:05:6c:f0:16:
75:58:4a:84:c0:21:57:a6:fa:20:09:ee:6c:83:48:18:ea:54:
fc:10:26:5c:2f:e1:2a:fb:a1:46:dc:7d:22:1e:8a:86:96:7f:
bb:68:7c:60:8c:16:61:ea:78:3c:fb:0f:24:6f:02:bc:70:22:
fd:3b:d0:e8:43:a2:92:ab:c1:6a:46:49:12:cf:f1:d8:69:b9:
66:a5:28:f1:b4:0f:83:cc:05:01:ec:2d:37:48:3c:63:8e:46:
ab:47:bb:35:b7:9e:ee:4f:60:41:66:93:b5:51:9f:e1:3f:6f:
ef:01:8f:1d:43:c7:dc:96:07:6b:48:ea:55:4c:72:fe:9e:5d:
c3:9e:03:07:cc:f5:2d:43:39:5a:a7:cc:b9:03:ba:38:2d:ff:
92:9a:26:19:1a:29:a2:9c:82:03:72:bf:e6:0a:c4:a1:ad:10:
f3:0d:98:5d:99:17:83:eb:0a:d9:9b:eb:39:95:af:4a:ca:be:
5d:21:c5:5a:d8:18:5d:06:9b:8a:5c:ce:c9:ea:73:13:5d:97:
8d:a0:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:21:09 2025 by rpki-client