Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/65PIAiCfgfiAH-DOFMDqdYi7-v0.roa
File: 65PIAiCfgfiAH-DOFMDqdYi7-v0.roa (raw, json)
Hash identifier: vrMIR5GbnN7NVc0BGSN7sHPt5ir6Ncr78mtDLJprPDY=
Subject key identifier: EB:93:C8:02:20:9F:81:F8:80:1F:E0:CE:14:C0:EA:75:88:BB:FA:FD
Certificate issuer: /CN=a928da8a616cbac4c942746693a161e498c462cf
Certificate serial: 019687C61FB0C528E320C0ED2557BF9107DE
Authority key identifier: A9:28:DA:8A:61:6C:BA:C4:C9:42:74:66:93:A1:61:E4:98:C4:62:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSjaimFsusTJQnRmk6Fh5JjEYs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/65PIAiCfgfiAH-DOFMDqdYi7-v0.roa
Signing time: Wed 30 Apr 2025 17:37:10 +0000
ROA not before: Wed 30 Apr 2025 17:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8902
IP address blocks: 31.25.160.0/21 maxlen: 21
80.76.112.0/20 maxlen: 20
185.27.12.0/22 maxlen: 22
194.105.160.0/19 maxlen: 19
2a00:1670::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSjaimFsusTJQnRmk6Fh5JjEYs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:c6:1f:b0:c5:28:e3:20:c0:ed:25:57:bf:91:07:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a928da8a616cbac4c942746693a161e498c462cf
Validity
Not Before: Apr 30 17:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb93c802209f81f8801fe0ce14c0ea7588bbfafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:ea:fb:5a:2a:12:07:ff:f0:24:e0:8b:7e:
5b:62:60:d5:94:f4:8d:fe:21:4e:98:26:bf:27:75:
40:e7:eb:aa:c9:0c:77:5a:5f:46:16:2b:a3:d4:58:
be:7c:03:d1:d1:2e:06:61:7a:a2:75:9b:45:2a:9a:
82:2e:09:e7:6d:d1:30:7c:b8:66:e0:27:a7:de:0a:
d4:e9:01:10:c7:20:45:d6:2f:b1:29:9f:91:c1:e4:
77:a0:58:8e:ac:65:ad:cf:f5:fe:f7:da:4a:9e:10:
f5:0b:96:01:b0:f1:bc:0f:5d:b4:5a:c8:12:2d:15:
9b:ca:6b:3c:7a:c4:26:c5:6c:50:a1:22:55:2a:2b:
5f:43:e2:9b:12:7d:a0:bd:9d:ee:6f:f4:cf:1d:10:
10:1e:d6:d5:5a:0f:46:6c:01:1a:ea:af:09:11:e4:
e1:e9:53:eb:60:28:1e:72:1e:af:81:e3:97:83:cb:
ae:99:1e:9d:92:68:9c:5e:9b:4a:07:55:ec:09:3c:
7d:cf:ed:8d:64:54:86:14:f9:a1:a7:60:8d:bd:7e:
ba:2e:cd:53:c2:36:1f:cb:9a:e0:ac:b5:a7:2d:5c:
f5:6c:47:da:c2:11:d6:ab:c0:0d:bc:05:97:8d:55:
74:77:11:56:a9:fd:ed:8e:46:48:90:55:d9:34:85:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:93:C8:02:20:9F:81:F8:80:1F:E0:CE:14:C0:EA:75:88:BB:FA:FD
X509v3 Authority Key Identifier:
keyid:A9:28:DA:8A:61:6C:BA:C4:C9:42:74:66:93:A1:61:E4:98:C4:62:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSjaimFsusTJQnRmk6Fh5JjEYs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/65PIAiCfgfiAH-DOFMDqdYi7-v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.160.0/21
80.76.112.0/20
185.27.12.0/22
194.105.160.0/19
IPv6:
2a00:1670::/32
Signature Algorithm: sha256WithRSAEncryption
43:13:c5:2e:11:0f:13:93:18:aa:5b:cc:bb:ac:ee:50:cd:4b:
e3:06:9e:1e:cb:d6:4c:27:9b:16:c1:03:ec:c6:12:ea:f7:fb:
c2:04:36:9b:cc:20:52:1a:a5:63:d6:31:41:60:11:84:85:21:
93:c4:04:32:d3:53:3f:4e:f9:98:f8:21:81:e4:51:6f:cb:5d:
be:f0:4a:b7:6c:0e:6f:5e:32:82:cf:61:a6:21:41:17:6b:e1:
05:bc:10:de:8a:56:df:b1:9f:7d:a7:8c:22:e4:92:5d:87:8f:
bb:c0:da:ab:13:b8:6b:51:04:43:8c:c7:7e:9f:00:29:29:99:
21:71:6c:85:a1:a7:d8:57:97:4f:47:29:2e:6b:3d:76:bb:ee:
e3:ab:04:d0:0a:3f:76:69:df:db:8f:2c:4e:03:73:f6:02:18:
9e:6b:80:be:16:09:a0:3a:87:40:d6:c3:24:3d:20:ce:c4:49:
8c:f1:38:d7:10:42:29:cb:a1:f8:d3:43:dc:81:ff:5b:6e:1a:
2f:c1:7a:e1:92:d2:8c:54:03:6a:9a:86:b8:e2:73:9b:0c:bf:
00:c0:3b:8c:c4:b9:b1:fa:3b:79:2d:8d:05:bb:a5:bb:72:c0:
f4:4e:fc:fd:c4:9d:e7:49:e0:9c:c5:e6:60:20:62:64:f4:16:
bd:75:a2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:20:42 2025 by rpki-client