Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/xGKRDUoNwKE-0A8L3UtvZR4n7ZU.roa
File: xGKRDUoNwKE-0A8L3UtvZR4n7ZU.roa (raw, json)
Hash identifier: XJjpR8q63ngPWCGrsWqcaTflWDnmW7hxauZ9HYf70oI=
Subject key identifier: C4:62:91:0D:4A:0D:C0:A1:3E:D0:0F:0B:DD:4B:6F:65:1E:27:ED:95
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0197A62DAC2E3081DF2D4615157E80681D12
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/xGKRDUoNwKE-0A8L3UtvZR4n7ZU.roa
Signing time: Wed 25 Jun 2025 08:21:40 +0000
ROA not before: Wed 25 Jun 2025 08:21:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204833
IP address blocks: 193.233.6.0/24 maxlen: 24
193.233.8.0/24 maxlen: 24
193.233.17.0/24 maxlen: 24
193.233.78.0/24 maxlen: 24
193.233.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:2d:ac:2e:30:81:df:2d:46:15:15:7e:80:68:1d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 25 08:21:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c462910d4a0dc0a13ed00f0bdd4b6f651e27ed95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:8e:cc:da:61:cc:04:d2:88:f9:b2:e8:46:
ce:cb:95:72:39:8b:3b:d6:eb:37:70:3b:29:bc:e8:
d1:aa:cc:c4:ec:bf:d4:90:76:bc:ad:6c:20:c5:0d:
84:8c:05:6c:12:0c:ee:32:13:d3:f3:45:4c:d7:d6:
03:f0:c5:24:a3:bb:ee:71:4c:9e:96:76:00:5f:1f:
3c:1b:7e:e9:b0:10:47:7d:26:26:ec:ad:dd:e5:f1:
03:06:e8:15:50:1d:de:6a:98:c7:c9:46:ff:c5:e3:
fc:fc:a1:d6:f4:76:c6:ea:a3:54:bc:2c:3d:b0:5e:
fe:aa:c5:32:a2:a2:e5:82:9c:3f:7d:99:1f:8d:0f:
83:5b:36:71:e3:fd:c6:0d:fe:22:f9:75:66:e8:fd:
06:c5:4e:a1:87:45:3b:f7:25:7e:9b:c1:0f:71:0e:
a0:7c:ef:7c:c6:bf:7d:4a:87:aa:60:5a:76:4f:bb:
9c:0d:c2:3c:3f:42:ec:14:57:90:82:0f:8d:2d:de:
84:9b:f2:a2:78:bd:62:2a:98:d9:0c:5b:53:79:78:
ab:da:31:ab:92:61:98:d6:43:06:d4:2b:7e:e1:6c:
40:5b:61:19:95:8e:fa:92:79:0f:b8:21:1b:cb:33:
ba:e4:1b:9e:f2:7c:62:b4:9f:a5:8c:a4:b0:67:63:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:62:91:0D:4A:0D:C0:A1:3E:D0:0F:0B:DD:4B:6F:65:1E:27:ED:95
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/xGKRDUoNwKE-0A8L3UtvZR4n7ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.6.0/24
193.233.8.0/24
193.233.17.0/24
193.233.78.0/24
193.233.160.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c9:6a:72:f6:24:57:08:8e:f0:1e:e1:a0:40:82:13:fd:fd:
94:bd:e3:c5:c7:cb:c9:41:dd:34:a6:f0:c4:65:d4:f0:f4:44:
e8:75:fe:2d:26:bc:c3:1a:e9:bf:10:5b:bb:0b:f9:56:41:e6:
0c:31:df:27:f4:b2:cb:ac:1b:f5:6f:ba:af:4d:f4:3e:f4:1f:
ed:38:ff:67:ed:f5:45:16:38:c6:e7:00:f5:86:ab:07:31:c7:
5d:77:06:dc:5e:6a:17:2a:72:5c:ad:f5:af:eb:0a:22:ce:a8:
4b:74:a5:ec:3a:b7:af:e0:8f:44:77:df:00:21:98:20:3d:c8:
22:0c:2e:41:31:c2:a6:de:3b:1e:72:3c:4f:01:d1:a1:af:aa:
23:78:26:b4:8f:27:7f:e6:b0:f0:63:26:1b:75:4b:52:32:53:
f5:d6:6c:c7:a3:66:6f:d0:9e:7a:cd:f3:ee:1d:14:4e:70:76:
ed:e2:d9:db:b4:7c:50:b9:4c:6a:43:31:1a:3b:7f:38:5a:69:
60:34:f8:46:20:1c:26:7c:29:7b:c9:e6:78:17:d3:8b:5d:39:
5d:e4:db:79:75:ee:4e:9d:74:ad:e5:f4:96:18:e2:49:37:e2:
30:f5:8e:be:5c:03:73:61:f6:07:ab:40:65:d0:2b:34:8c:76:
4f:73:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:12:27 2025 by rpki-client