Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/qIUofiNUFwxbkOh-Rgb1sv8n3ek.roa
File: qIUofiNUFwxbkOh-Rgb1sv8n3ek.roa (raw, json)
Hash identifier: Gi9FPFk4uTQFZQ6i+EVGdedkAv5cDx+m98eiuI3qMjo=
Subject key identifier: A8:85:28:7E:23:54:17:0C:5B:90:E8:7E:46:06:F5:B2:FF:27:DD:E9
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019744D102EA1B6010EBE1DF75C356F0D7D8
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/qIUofiNUFwxbkOh-Rgb1sv8n3ek.roa
Signing time: Fri 06 Jun 2025 10:37:17 +0000
ROA not before: Fri 06 Jun 2025 10:37:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64439
IP address blocks: 185.159.129.0/24 maxlen: 24
185.159.130.0/24 maxlen: 24
185.228.232.0/24 maxlen: 24
185.228.233.0/24 maxlen: 24
185.228.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:d1:02:ea:1b:60:10:eb:e1:df:75:c3:56:f0:d7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jun 6 10:37:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a885287e2354170c5b90e87e4606f5b2ff27dde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:53:25:b2:3d:49:56:be:ae:e9:c8:26:dc:
d9:8f:b0:09:de:70:c9:0c:e5:8f:05:00:5f:70:1c:
2e:e8:c0:99:93:c8:5a:0f:84:fb:cb:70:ce:17:57:
2e:28:af:be:36:b9:c3:a5:0c:7b:d2:a7:53:5e:01:
c2:47:33:19:83:0d:f8:7c:12:90:04:e1:2b:7c:7c:
29:63:ca:d3:26:7d:c0:69:ef:02:9f:c1:f2:d9:1c:
1e:f0:50:bd:dd:7b:84:a1:16:41:b3:79:21:68:a9:
8b:f7:86:d4:ab:9f:81:5d:a1:be:89:2f:ff:bf:3c:
3e:4a:e9:93:d5:52:e0:95:cc:b4:c2:91:b3:f3:0d:
9a:04:d2:60:7d:f0:53:a7:e5:1b:41:72:24:75:72:
79:2d:81:92:21:a2:9c:8c:4c:a6:ec:f0:99:b4:9f:
5f:23:14:ae:ba:84:b6:c6:32:8f:17:7e:9f:75:dd:
5e:17:a0:a6:06:e0:6f:fc:23:e3:45:64:6d:11:54:
6b:14:84:c2:68:4f:72:92:7b:46:69:a4:dd:91:aa:
91:69:5f:61:7d:1c:2e:06:64:fa:fe:b2:03:d1:03:
1b:ad:7e:db:ac:e2:71:b6:1b:ec:60:4e:27:e4:32:
f5:01:37:f3:1a:81:73:bb:58:ce:9e:59:3f:ae:88:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:85:28:7E:23:54:17:0C:5B:90:E8:7E:46:06:F5:B2:FF:27:DD:E9
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/qIUofiNUFwxbkOh-Rgb1sv8n3ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.129.0-185.159.130.255
185.228.232.0-185.228.234.255
Signature Algorithm: sha256WithRSAEncryption
96:71:06:0b:2f:b4:e4:55:b0:b6:e3:99:d5:ee:42:34:5c:6a:
60:26:77:74:22:c2:db:19:a7:99:62:c0:f0:29:a8:f9:7e:6a:
4f:ef:d1:ba:74:89:00:ef:8c:d5:8f:e6:b6:3d:0c:90:32:dd:
aa:94:5c:a9:ff:09:9f:15:1a:dc:03:87:01:8f:e5:76:c0:cd:
75:57:12:fd:85:59:ec:c5:e3:86:03:78:81:b6:ca:a2:13:5e:
e7:8f:29:ce:a5:19:94:32:87:70:cd:b9:62:dd:98:9a:19:3b:
6a:9e:be:82:f6:60:2c:ed:f3:35:ac:70:e2:4b:c9:1a:90:c1:
4d:28:b9:1a:0b:5a:98:cc:b4:bb:63:a6:23:e0:3e:ad:ad:2d:
38:36:0b:5a:23:9f:d7:5b:18:77:df:63:e0:e2:0b:0e:78:98:
d1:a5:19:c5:15:09:81:8f:38:ac:35:4d:69:78:6b:14:bf:ee:
92:f1:72:c9:f1:82:c3:e2:5b:82:c7:54:47:74:96:6b:27:e3:
21:fa:86:99:7a:fb:81:dc:41:e8:74:01:ab:38:e5:36:06:c7:
73:92:55:19:31:f6:b5:03:59:ac:b9:f4:32:a6:d1:a3:5f:58:
19:c8:44:8b:0a:0a:43:4d:3f:63:8c:8d:87:7f:5b:4d:29:7a:
1b:8e:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:03 2025 by rpki-client