Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Ipr3KewOoeNwtKcMjwWhhMZ4XGk.roa
File: Ipr3KewOoeNwtKcMjwWhhMZ4XGk.roa (raw, json)
Hash identifier: 3JCwXXZ0yyhMNw7g8hWZGcEbqAf0RiAf0XwSMEKW1/k=
Subject key identifier: 22:9A:F7:29:EC:0E:A1:E3:70:B4:A7:0C:8F:05:A1:84:C6:78:5C:69
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0197F4484DFB49214CA07AD50BA2A6EE3B87
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Ipr3KewOoeNwtKcMjwWhhMZ4XGk.roa
Signing time: Thu 10 Jul 2025 12:21:08 +0000
ROA not before: Thu 10 Jul 2025 12:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 95.164.70.0/24 maxlen: 24
95.164.128.0/20 maxlen: 20
95.164.168.0/23 maxlen: 23
95.164.192.0/22 maxlen: 22
95.164.200.0/21 maxlen: 21
95.164.240.0/21 maxlen: 21
95.164.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:48:4d:fb:49:21:4c:a0:7a:d5:0b:a2:a6:ee:3b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 10 12:21:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=229af729ec0ea1e370b4a70c8f05a184c6785c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:62:fc:35:e1:bc:4c:8e:0d:6e:00:47:e4:
96:d5:d0:8d:7a:32:e9:82:1f:3b:49:80:7f:25:82:
74:ef:43:d1:e2:87:de:48:d3:c2:08:3a:06:11:0a:
13:9c:12:d1:e5:b8:7a:ea:7d:39:ab:42:a8:fd:26:
f4:49:56:c1:bf:73:01:57:05:27:a9:7a:cc:a3:cb:
4c:f5:06:eb:37:9f:cb:c4:1e:36:f3:89:25:d5:49:
52:af:29:f7:b5:6f:5d:30:f2:36:7b:f1:ab:6a:2e:
e0:dc:2d:0f:e2:e3:05:da:a0:c6:5c:50:70:ba:fb:
c4:8b:9b:56:8c:6b:1a:15:5c:bc:90:7e:04:c6:a3:
6e:da:95:35:ae:10:17:57:0b:c9:9e:ec:8b:09:41:
d3:c0:3c:2f:70:47:0b:f7:27:84:0c:a8:9e:37:e3:
95:aa:34:82:32:78:99:76:f6:98:0c:99:7f:f2:06:
3c:e7:a7:39:9d:75:42:90:f4:c1:fb:1c:31:aa:dc:
c8:88:2d:b4:8f:16:8a:ab:4d:7c:ae:43:62:2e:30:
24:1e:dc:8d:8d:01:78:e7:ae:20:41:d5:f1:40:a3:
be:28:53:71:52:29:0f:e6:81:a2:57:6d:53:74:a3:
5e:03:b0:71:4b:35:3b:a7:ab:f4:44:0d:5b:ea:33:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:F7:29:EC:0E:A1:E3:70:B4:A7:0C:8F:05:A1:84:C6:78:5C:69
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Ipr3KewOoeNwtKcMjwWhhMZ4XGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.70.0/24
95.164.128.0/20
95.164.168.0/23
95.164.192.0/22
95.164.200.0/21
95.164.240.0/21
95.164.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:04:fb:24:52:f1:53:80:ce:34:c7:07:f4:f2:81:f8:1a:b0:
d7:2f:95:1c:a7:70:4f:85:15:d3:67:da:f1:bb:c0:cd:3d:f5:
12:c8:67:09:bd:57:0c:a9:98:b4:8d:a7:8f:9b:df:93:6e:1e:
7a:26:50:29:27:11:a7:d0:77:ea:f6:6c:66:fa:6b:b3:10:94:
fc:b2:7c:e4:0e:d3:3e:eb:f9:73:93:5f:68:9d:05:3d:4d:d5:
44:39:c8:98:b1:9d:d2:3a:d5:c0:20:b6:4a:a3:f6:c8:83:de:
e6:3c:6f:84:ad:e6:31:c3:00:2d:cb:3f:b0:e1:d6:66:ad:fb:
6a:e5:21:57:f8:a6:85:35:00:e4:2c:06:c4:39:bd:4f:34:a0:
af:2b:c6:79:4d:cb:00:91:bb:ad:4c:6c:26:34:08:51:75:1f:
52:38:9d:37:ea:da:e1:bd:bd:3e:bc:cc:0f:29:18:b0:f1:61:
52:9c:6d:76:f8:cb:c6:23:0e:73:e0:9b:12:1d:ff:85:df:5a:
aa:4a:17:6d:6b:cb:37:c5:47:f6:34:16:79:a1:23:0c:b6:82:
70:f4:9c:c3:4c:0d:57:4b:d7:e2:91:81:57:7f:a4:30:f2:e0:
7e:75:08:3b:78:11:4b:59:59:a0:77:b5:50:cb:ad:59:28:6f:
96:d1:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 21:00:36 2025 by rpki-client