Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/05a96nC6w3y2ygNtRz0fE79NNb8.roa
File: 05a96nC6w3y2ygNtRz0fE79NNb8.roa (raw, json)
Hash identifier: ppeSYFnMCMF7eN3FJQde50ROVZCQWbOF6N6WCP1Ll48=
Subject key identifier: D3:96:BD:EA:70:BA:C3:7C:B6:CA:03:6D:47:3D:1F:13:BF:4D:35:BF
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0197C1BA036BA2A31B5192358A12A35B6D11
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/05a96nC6w3y2ygNtRz0fE79NNb8.roa
Signing time: Mon 30 Jun 2025 16:44:42 +0000
ROA not before: Mon 30 Jun 2025 16:44:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 87.254.9.0/24 maxlen: 24
87.254.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:ba:03:6b:a2:a3:1b:51:92:35:8a:12:a3:5b:6d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 30 16:44:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d396bdea70bac37cb6ca036d473d1f13bf4d35bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:b2:6e:99:15:5d:6e:4f:9d:f7:e1:09:86:
b7:39:12:be:61:3f:74:6f:cd:4a:d2:70:bd:4b:2e:
c2:54:2c:fe:33:82:23:ff:aa:c2:d4:e7:ea:73:e5:
e4:47:8e:a8:48:03:1e:ce:99:c0:f7:96:a0:cd:0f:
a4:8f:40:95:c3:23:52:18:82:03:d5:2f:a7:ec:1d:
54:90:aa:e9:0f:69:cf:23:e8:78:43:4d:d9:8f:4f:
ff:c2:45:35:24:3f:03:b1:8d:1e:6d:57:eb:ec:a4:
b7:d1:8a:c6:1b:b8:ae:85:76:e9:e0:6e:e5:fd:bc:
85:4f:39:47:79:f4:0a:c8:ff:cd:2f:c2:13:c6:74:
92:6e:9f:d4:34:f4:93:b4:4a:bd:3e:f4:53:1b:4b:
4a:e3:09:32:e4:25:c7:d6:37:09:41:b0:28:d1:82:
09:c9:13:bf:1f:c4:9d:61:46:9c:8e:41:60:25:59:
5d:ab:9b:f8:34:f6:1f:3c:d9:79:be:e7:27:ab:c7:
b3:6d:2e:84:fc:01:16:1d:90:cf:27:23:40:f8:ba:
bb:9b:9f:ed:72:b7:27:bc:3d:af:7d:2b:db:16:33:
2e:7a:83:d1:06:b9:e3:6c:2f:d0:f3:b0:91:8e:0a:
01:29:1c:16:14:83:ea:f2:4d:c1:1d:ee:92:59:13:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:BD:EA:70:BA:C3:7C:B6:CA:03:6D:47:3D:1F:13:BF:4D:35:BF
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/05a96nC6w3y2ygNtRz0fE79NNb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
87.254.18.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:58:b9:af:77:20:10:4a:d8:41:30:38:16:6a:5e:ff:dc:ed:
bc:cc:e7:53:fe:ff:23:0d:e6:6c:af:ea:fc:4d:03:78:f8:6e:
05:79:4f:39:ea:25:17:be:8c:ce:4b:de:c1:a9:6e:c3:36:3f:
d8:4c:ec:51:2c:f4:88:37:44:a9:0b:6a:45:48:44:92:a7:be:
65:58:1b:71:eb:c9:95:e2:fc:74:4b:a0:7c:91:31:c5:e6:aa:
3f:91:59:1c:f3:dd:37:b9:f7:3a:2d:2c:c4:2b:b7:9e:1b:d1:
7d:d3:f8:84:7b:92:8d:fb:b3:98:95:63:fc:96:5d:74:03:a4:
32:f1:92:44:ae:d8:79:e3:98:27:b7:ec:9d:4d:62:c4:35:d4:
45:e4:36:c2:0c:c1:7e:e4:b0:cc:9b:52:b6:9a:02:5d:a8:9e:
47:67:be:e8:2f:18:3d:60:0b:04:a9:8c:79:bc:48:58:4d:00:
75:84:26:bf:90:a5:97:90:6d:60:eb:97:ce:18:46:37:e7:5a:
a2:59:6d:95:ad:c6:b8:81:ca:2a:e1:81:fa:f7:78:07:d8:e5:
92:bd:00:89:a7:35:87:12:29:45:b0:1d:5c:be:33:e6:9d:17:
a2:e6:68:cd:a2:e7:56:5b:c7:61:4e:99:2e:fb:b3:fd:08:fc:
80:5c:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:44:19 2025 by rpki-client