Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/_1HtuPPegCsZH5xbPr5JxIFI1x4.roa
File: _1HtuPPegCsZH5xbPr5JxIFI1x4.roa (raw, json)
Hash identifier: jgOfG1mvQH8BBd/pIUrCdZw4Fa7XjnGRz79hSDI6CI4=
Subject key identifier: FF:51:ED:B8:F3:DE:80:2B:19:1F:9C:5B:3E:BE:49:C4:81:48:D7:1E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01970D1CCC541C01ECF1E084D07172F37DDF
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/_1HtuPPegCsZH5xbPr5JxIFI1x4.roa
Signing time: Mon 26 May 2025 15:01:20 +0000
ROA not before: Mon 26 May 2025 15:01:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34918
IP address blocks: 85.133.197.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:1c:cc:54:1c:01:ec:f1:e0:84:d0:71:72:f3:7d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 26 15:01:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff51edb8f3de802b191f9c5b3ebe49c48148d71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:a8:0f:3a:0f:4b:af:16:8f:d7:73:b4:8b:
78:2f:0e:12:6c:59:c3:9a:ab:45:1d:2c:52:59:fb:
a0:29:7c:2a:ee:98:ce:93:d3:3b:06:b7:a2:35:1b:
d1:d5:5d:ab:b9:8b:bc:4d:9b:50:36:4d:6e:de:5e:
b6:53:6d:01:99:90:37:10:cd:4f:7a:60:25:df:5f:
cc:7f:b4:b5:06:40:96:ed:27:ad:d3:f5:4e:de:87:
b8:0e:c8:3e:88:44:8e:23:eb:fc:91:ff:9b:16:8d:
3c:27:4d:a6:cb:a3:c6:b6:f2:54:a7:cf:f6:a9:99:
24:66:c1:2a:3c:ec:c1:29:1a:3b:54:f2:0f:fe:6c:
4b:cc:a8:7e:23:71:8a:77:da:87:47:72:f6:cd:71:
61:b9:d7:a3:41:57:9d:ac:18:22:fd:8c:32:35:c6:
da:bf:1b:05:97:29:08:3e:d5:2c:b3:a0:66:0b:dc:
4a:ea:79:01:50:cf:84:ba:88:a2:d8:c7:70:40:8a:
57:92:78:ca:63:a9:ed:af:bb:21:4b:23:a8:5a:82:
c8:fb:fb:fb:a1:92:1d:37:08:17:14:28:24:10:f1:
4a:ad:1b:3a:b7:6f:94:e7:df:05:27:c8:bc:4e:55:
65:20:69:5a:9f:32:f0:31:c4:f1:c7:ee:fd:fb:24:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:51:ED:B8:F3:DE:80:2B:19:1F:9C:5B:3E:BE:49:C4:81:48:D7:1E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/_1HtuPPegCsZH5xbPr5JxIFI1x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.197.0/24
85.133.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:7a:82:ac:9b:ce:e0:31:6e:85:e1:48:85:d0:97:d7:d7:0d:
e2:5f:43:b3:c1:5a:a2:f2:1a:c6:6a:7c:d4:b4:f3:34:a2:ff:
ea:7c:f0:87:50:4b:8f:d5:4a:24:75:c1:13:4c:8d:00:e0:92:
93:39:03:20:5c:c0:10:e6:47:02:4a:eb:7f:f3:aa:6e:8d:a8:
52:86:cf:ce:b4:e0:e7:7d:37:0d:e3:16:aa:bf:1b:d9:ff:92:
72:14:40:e6:ce:02:a3:91:40:7b:23:f4:3f:fc:f8:7e:21:86:
2e:9c:b1:98:fa:33:e9:bc:1c:67:19:60:ab:9e:42:30:f4:1b:
22:bc:e6:ef:50:71:aa:6b:34:2c:f9:a0:e4:e6:6b:e7:97:0e:
54:e2:86:29:2e:f6:8b:14:c7:b6:01:7b:35:2a:74:08:50:92:
29:f5:e7:c1:b1:cc:65:4d:7a:2b:5a:6f:4a:e3:87:16:89:60:
60:1e:e0:f6:5c:34:f6:32:c4:5a:d7:21:62:ee:26:f9:8a:7b:
e1:d0:1f:0b:90:ac:16:0d:37:c6:33:bb:97:54:f6:90:a7:1e:
93:5f:7f:f9:fc:b0:fd:2d:c3:41:1d:c7:d8:6c:51:e4:15:a1:
ee:6b:d7:72:0a:06:86:c1:77:98:0d:3b:db:ae:a8:a7:2d:ee:
30:d1:1b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:55 2025 by rpki-client