Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/QmFH5JvM3VC_JAbySWgAPqV6UHI.roa
File: QmFH5JvM3VC_JAbySWgAPqV6UHI.roa (raw, json)
Hash identifier: l6Fwra+B7GrB2tJFkxbVnW9ZuL62WOg2AUF3u0rUSgw=
Subject key identifier: 42:61:47:E4:9B:CC:DD:50:BF:24:06:F2:49:68:00:3E:A5:7A:50:72
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0198B44BD0EB3BACEA2E688C453BF80E0609
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/QmFH5JvM3VC_JAbySWgAPqV6UHI.roa
Signing time: Sat 16 Aug 2025 19:12:04 +0000
ROA not before: Sat 16 Aug 2025 19:12:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 82.139.233.0/24 maxlen: 24
82.139.234.0/24 maxlen: 24
82.139.236.0/24 maxlen: 24
82.139.237.0/24 maxlen: 24
82.139.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b4:4b:d0:eb:3b:ac:ea:2e:68:8c:45:3b:f8:0e:06:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Aug 16 19:12:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=426147e49bccdd50bf2406f24968003ea57a5072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:45:dd:a8:92:69:46:46:c6:d5:f2:40:7c:
27:b1:19:08:ef:bb:a4:2d:89:41:6b:76:73:8d:5d:
63:a9:b1:ea:63:48:bb:26:57:33:6e:2a:94:98:f4:
18:2e:22:27:97:88:22:1a:eb:04:d7:c1:17:b0:58:
10:20:ad:ed:ea:0a:f2:92:b9:8b:71:c7:55:4d:bc:
33:43:2a:28:4e:5f:3e:24:d8:08:1b:8b:cb:e5:49:
9f:9d:d4:1c:a5:10:1b:bc:a4:56:f6:5e:67:83:92:
8a:04:fe:8e:92:4d:33:c8:f5:e1:61:08:f5:31:34:
7c:69:8a:c3:54:eb:f3:22:fd:81:a1:a4:bc:c7:9f:
16:4a:31:1b:3d:2d:5e:21:83:3a:e6:4e:d1:c5:38:
cb:4a:0a:1f:e6:e5:f3:87:c8:71:4d:49:07:5e:08:
dd:0e:40:59:82:91:68:3a:21:18:0d:ee:7b:7e:2b:
4e:be:af:dc:b1:99:d4:93:5f:c1:dd:b4:bf:48:27:
ca:3f:09:93:13:d8:c3:66:a9:4d:fe:15:8f:21:79:
9c:d4:45:70:9d:a0:d8:9a:7d:3b:1d:75:4b:ad:73:
59:27:2d:7e:a4:84:9b:8a:43:f7:41:fe:76:60:69:
51:81:fd:dd:1f:b2:4c:54:dc:3e:b3:1c:e7:f5:b0:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:61:47:E4:9B:CC:DD:50:BF:24:06:F2:49:68:00:3E:A5:7A:50:72
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/QmFH5JvM3VC_JAbySWgAPqV6UHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.233.0-82.139.234.255
82.139.236.0-82.139.238.255
Signature Algorithm: sha256WithRSAEncryption
0a:7a:71:d8:80:41:9b:52:60:88:df:43:59:53:b9:61:f4:52:
22:57:18:2c:83:d6:03:f8:6d:6c:ae:40:55:85:77:95:eb:05:
10:cb:89:f4:05:93:d9:16:9c:bb:12:54:a6:e2:9d:44:e5:12:
4a:0a:b4:58:41:36:92:39:ad:66:08:cc:97:50:51:08:42:75:
88:0a:95:48:1e:c7:b6:51:f9:28:43:2b:a7:8a:b3:15:bd:00:
8c:2b:3a:04:3e:cc:58:9d:c1:5f:88:bc:06:b0:c1:ee:3e:58:
75:25:ea:bb:6e:cc:6e:b4:4e:28:55:2e:54:42:a2:54:8f:5d:
01:13:8f:73:f8:f2:be:ca:f2:60:e2:3e:46:dc:df:22:e9:86:
0f:67:93:8e:b2:51:92:6d:6d:9e:a8:88:22:86:f3:de:e4:27:
5a:f9:72:19:d1:0f:4e:47:02:d7:3d:9b:16:40:4c:e6:3d:18:
ec:9b:83:2a:1f:21:18:3f:86:c4:5b:22:42:73:53:d3:b4:6c:
c7:cc:79:ed:11:df:90:8d:46:9d:c7:21:48:a7:a7:c3:bd:05:
95:38:e4:24:ed:2a:10:f6:31:b8:b0:fe:17:6c:66:53:7b:d2:
93:ed:90:56:a3:84:53:77:0e:20:15:c9:15:b9:eb:10:d3:fd:
a2:e5:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:04 2025 by rpki-client