Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/d0YXwc1ZBHHMR9ZAKLms7HlOiUA.roa
File: d0YXwc1ZBHHMR9ZAKLms7HlOiUA.roa (raw, json)
Hash identifier: XtdrQk1bystPGs3Lhcrr1va53IhMr+A/sR56pklaba8=
Subject key identifier: 77:46:17:C1:CD:59:04:71:CC:47:D6:40:28:B9:AC:EC:79:4E:89:40
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 0196D4579018F20CE53D2AF31148F8268CD7
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/d0YXwc1ZBHHMR9ZAKLms7HlOiUA.roa
Signing time: Thu 15 May 2025 14:27:10 +0000
ROA not before: Thu 15 May 2025 14:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209897
IP address blocks: 193.149.253.0/24 maxlen: 24
193.149.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:57:90:18:f2:0c:e5:3d:2a:f3:11:48:f8:26:8c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: May 15 14:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=774617c1cd590471cc47d64028b9acec794e8940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:04:fa:70:6c:9b:e8:b9:fa:7f:23:dd:35:
65:e9:7a:06:b6:cd:51:6e:e9:a1:c0:9e:bd:cd:bf:
00:6d:3b:f6:85:b4:ef:a3:80:70:d4:1b:56:c2:e4:
e8:d8:03:2e:37:b6:73:6c:e0:ee:bd:8b:12:36:3e:
34:93:c1:c3:62:f7:90:85:ea:c8:f8:99:a0:3a:35:
44:9e:d6:45:5a:f5:f3:cc:14:7e:1f:b6:45:7b:c4:
78:44:a9:2b:cb:a3:44:43:61:55:46:00:25:ec:d5:
c9:0d:a2:1d:ae:f1:0c:2d:57:ec:91:9a:6d:da:d7:
e9:d2:64:16:67:b9:0c:ca:b7:da:f0:33:71:4a:8c:
56:75:62:83:bb:97:be:2f:ba:a2:2d:d3:9b:a0:53:
dd:49:a9:19:91:c7:3d:f3:b3:ed:5b:f0:85:7d:4c:
1d:65:c3:70:b7:4b:c7:79:4e:b2:38:27:36:bb:a9:
5f:6d:f1:42:19:88:5c:aa:15:ba:05:e5:87:8a:d1:
2c:af:fb:6c:c5:cc:30:a6:fe:17:a6:67:f7:e6:86:
04:fe:d2:ce:c4:24:d2:b0:f9:19:5d:68:52:de:4e:
cd:25:97:77:6d:0c:7a:77:5c:74:2f:b8:32:31:88:
3c:d0:24:c1:0d:98:61:08:ae:af:c9:e6:cd:41:ae:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:17:C1:CD:59:04:71:CC:47:D6:40:28:B9:AC:EC:79:4E:89:40
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/d0YXwc1ZBHHMR9ZAKLms7HlOiUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.253.0/24
193.149.255.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2d:cc:7f:66:d3:66:45:3d:22:f3:a3:ce:8f:c9:64:ab:ee:
c3:89:a6:ec:df:6e:f9:99:eb:3f:7a:f0:a4:e8:aa:52:e2:d9:
df:65:2d:4f:aa:01:5b:89:24:51:13:80:5d:07:17:be:9f:4d:
93:49:a6:51:68:9c:80:87:0d:1a:d3:41:8e:14:ce:f8:32:a5:
74:26:e8:7b:03:87:cc:17:e7:4e:32:cd:8a:c8:b9:9d:00:00:
57:5e:3f:7c:53:e3:1c:2f:86:95:3f:3f:fd:29:a5:26:d8:e2:
a9:49:8d:ca:32:e2:7d:06:11:4a:75:20:5d:79:e0:0e:8d:28:
1a:f8:4d:c4:66:18:db:68:34:d3:0a:a5:d7:fc:68:1b:25:98:
cb:27:80:aa:75:94:a3:2c:6d:ef:0c:50:d6:02:83:22:c9:3a:
66:32:b2:2f:bc:a5:08:13:ac:4d:4f:14:c5:2d:cb:c0:a5:98:
1d:65:c1:94:dd:d5:58:63:84:f6:09:5a:02:20:de:d8:d8:ce:
a5:83:02:ba:42:67:24:ab:2f:db:2a:23:41:12:f6:22:fc:7e:
ac:5f:7c:48:49:8f:a8:14:52:95:83:ba:60:d4:61:2c:ea:8f:
b8:82:2b:64:ef:2b:e5:d9:03:72:7e:b1:04:f5:6c:a5:e5:b2:
47:7d:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:26:50 2025 by rpki-client