Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IS5Y7xpj3MsiZ73QvGzuySdl9HM.roa
File: IS5Y7xpj3MsiZ73QvGzuySdl9HM.roa (raw, json)
Hash identifier: mLKIDtdNErnqIL5hnzMx6CpSHF/6qunSx1xGrtmVRzc=
Subject key identifier: 21:2E:58:EF:1A:63:DC:CB:22:67:BD:D0:BC:6C:EE:C9:27:65:F4:73
Certificate issuer: /CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Certificate serial: 0198C7049A95B83097981BEEB2ADA08592CE
Authority key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IS5Y7xpj3MsiZ73QvGzuySdl9HM.roa
Signing time: Wed 20 Aug 2025 10:27:04 +0000
ROA not before: Wed 20 Aug 2025 10:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206215
IP address blocks: 167.150.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:04:9a:95:b8:30:97:98:1b:ee:b2:ad:a0:85:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Validity
Not Before: Aug 20 10:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=212e58ef1a63dccb2267bdd0bc6ceec92765f473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:f6:a9:e2:d5:05:78:78:b9:68:a7:d0:ec:
58:2d:60:10:86:8f:ce:b0:db:24:c1:71:a5:e1:54:
26:24:db:c7:8b:48:71:2e:85:d5:49:df:6c:27:6f:
d2:01:25:3d:e3:7b:6a:f3:74:54:7f:46:ed:26:ef:
a4:db:65:a3:70:cf:ef:6a:56:e8:f2:37:16:32:c5:
45:65:9e:e4:d2:df:5e:44:58:ff:31:c4:5f:49:2e:
36:75:f9:0b:bf:5b:48:5e:b3:81:1d:52:c6:af:45:
42:d6:01:98:39:bb:49:cb:0c:2d:1d:69:40:02:9a:
9c:94:c9:48:cd:a7:3c:e0:11:31:35:6b:90:06:66:
59:aa:72:93:cf:3a:95:9a:e1:74:5b:fd:5a:cd:49:
1b:66:a3:6a:c6:95:8c:5d:b3:ab:fb:81:09:38:e3:
68:f9:e3:a9:67:c8:ac:03:9f:4a:89:df:81:d3:00:
25:9d:9a:7b:92:b2:1a:28:f5:76:ea:9c:46:51:76:
1f:ec:24:33:0a:3c:2f:a0:0f:4b:ec:15:89:54:1f:
4f:1c:64:0e:2e:36:79:56:0a:cd:b8:64:d1:aa:c2:
84:59:6a:87:c5:00:d6:15:63:9c:d3:6b:6d:db:c0:
cb:71:24:a8:7c:0e:a2:47:d2:5d:8e:46:25:31:bf:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2E:58:EF:1A:63:DC:CB:22:67:BD:D0:BC:6C:EE:C9:27:65:F4:73
X509v3 Authority Key Identifier:
keyid:21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IS5Y7xpj3MsiZ73QvGzuySdl9HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.150.22.0/24
Signature Algorithm: sha256WithRSAEncryption
22:7d:b4:16:da:64:f3:1f:31:cf:70:96:4f:55:af:66:cb:ac:
91:da:aa:5c:80:0a:03:61:28:5c:42:0d:54:58:1f:a8:51:7c:
40:83:0d:29:90:d8:a2:9c:a1:81:bf:bc:03:41:11:13:d1:99:
b3:88:d2:67:82:be:8e:85:57:7b:59:59:f7:aa:d2:80:4a:d8:
25:bb:c4:f1:39:b4:f6:69:9d:4e:29:bc:f7:60:7b:09:32:49:
30:e9:32:38:3b:ec:96:53:80:7e:97:8e:af:2f:f9:c3:dc:25:
f3:15:b8:96:96:a7:6d:75:9d:ff:29:40:c1:1a:d9:85:15:5f:
92:ed:ae:fe:89:f8:9d:9b:9b:d1:92:d1:0e:38:1f:f8:0c:c0:
49:3f:ed:e3:2a:df:be:a0:95:84:c4:28:c2:0f:d6:a3:d8:47:
08:90:7f:22:02:63:df:0a:07:94:46:b1:8b:75:c6:58:c1:80:
b5:d1:96:3f:be:db:1a:8b:16:17:d3:11:a3:54:3b:36:13:08:
fc:9f:a4:42:4d:ec:3f:82:90:1e:19:ca:b1:54:50:90:8d:b0:
d7:10:d3:d9:a4:1c:e6:ca:7c:c9:11:48:80:7c:9b:76:0f:40:
f6:cc:50:93:2b:77:e2:23:7c:ff:d4:3b:0f:39:ee:1e:c0:e9:
7e:f7:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:02 2025 by rpki-client