Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/A8YDmTBK0K140SrVGjKT4rgJaBs.roa
File: A8YDmTBK0K140SrVGjKT4rgJaBs.roa (raw, json)
Hash identifier: dZ2I5la+5OGaL56JsGr6ibfQkik4DvtIbwTHLacKDFU=
Subject key identifier: 03:C6:03:99:30:4A:D0:AD:78:D1:2A:D5:1A:32:93:E2:B8:09:68:1B
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 0197D3F29F1FEEF09EE2E7DD3EB57D0542F1
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/A8YDmTBK0K140SrVGjKT4rgJaBs.roa
Signing time: Fri 04 Jul 2025 05:39:42 +0000
ROA not before: Fri 04 Jul 2025 05:39:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60774
IP address blocks: 194.15.88.0/21 maxlen: 24
212.102.97.0/24 maxlen: 24
2a09:2800::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:f2:9f:1f:ee:f0:9e:e2:e7:dd:3e:b5:7d:05:42:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Jul 4 05:39:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03c60399304ad0ad78d12ad51a3293e2b809681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:06:99:a5:1c:4c:41:4d:d8:77:1e:33:84:
11:b3:16:1c:d0:fa:3d:f4:c2:f2:3d:96:17:bd:62:
b7:8f:b4:e8:51:70:cb:3a:8e:23:35:f5:ff:5b:21:
7d:eb:2d:c8:4f:e1:31:c4:f1:f8:6f:f3:69:b1:24:
ba:0c:37:09:c4:44:7e:7a:e1:33:c9:47:e4:2d:bb:
0c:eb:cc:cc:19:c1:d0:46:88:67:a1:e9:63:ee:cf:
49:7e:42:ae:30:70:a0:cc:b1:19:6d:c0:64:1a:8c:
bc:51:95:66:a9:f1:5c:10:a4:32:a3:51:56:35:51:
b9:79:d9:5a:d0:e4:cd:78:b0:27:cb:a3:cd:c5:a4:
55:de:f5:23:43:49:e6:6a:ab:c8:94:ae:87:bd:3d:
e4:76:b6:b9:21:21:81:a2:57:1d:e3:f3:0d:88:f8:
93:fd:94:4e:b8:0d:e5:7d:96:9b:5a:f7:a1:7d:f4:
da:b8:74:da:2e:8d:8c:53:1a:f9:dc:aa:98:09:29:
6e:e4:31:a3:aa:e0:65:70:0b:af:d0:4b:e4:eb:0a:
65:0a:83:26:ba:b5:4b:85:b1:e8:14:2c:db:90:f5:
a5:07:6a:03:79:bd:91:02:e2:be:fc:e4:fd:5d:bf:
d1:d5:5c:43:2d:84:d9:c4:d5:9d:35:fc:cb:42:b8:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C6:03:99:30:4A:D0:AD:78:D1:2A:D5:1A:32:93:E2:B8:09:68:1B
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/A8YDmTBK0K140SrVGjKT4rgJaBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.88.0/21
212.102.97.0/24
IPv6:
2a09:2800::/29
Signature Algorithm: sha256WithRSAEncryption
47:3e:a6:a4:2d:a0:72:75:d1:f4:14:3a:6d:cd:ae:4a:5b:45:
cd:54:f2:0c:f1:e4:36:40:84:b2:38:a3:f7:68:a5:00:41:1a:
67:eb:66:16:bb:38:47:77:8c:34:07:2f:ff:ab:04:eb:d2:2f:
a9:73:08:f7:bc:d3:72:d7:e9:68:06:b5:ad:ac:0e:0e:77:e6:
95:33:13:9b:5f:3d:d3:c6:37:d6:94:21:6a:20:b8:77:72:30:
67:fe:37:c6:ad:41:5e:e0:bb:9c:9c:63:23:8f:76:17:72:fd:
2f:62:38:1c:65:de:d8:22:38:0c:bb:3e:5b:08:b2:e1:f5:73:
15:20:8c:1f:7c:6a:f4:4f:22:5a:88:f2:aa:27:9f:23:ab:09:
a0:49:27:a7:56:35:78:50:6e:e3:e3:ad:1b:0a:71:65:de:70:
dc:84:41:fd:21:82:20:8c:50:38:92:94:78:2c:c2:4a:0f:d4:
5c:e6:ed:36:47:52:7f:40:26:e1:c8:76:8c:41:65:c8:24:b6:
95:fd:b3:a4:52:8c:fe:25:86:c8:58:86:d4:bc:bb:58:56:59:
de:af:02:32:6a:38:4c:17:ff:2e:20:64:7d:a0:d0:6e:31:e8:
58:92:95:b4:be:19:fc:af:ca:67:36:48:19:93:04:06:22:b1:
75:8d:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:57:30 2025 by rpki-client