Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/8dUZQtn2PiQ2Mqqoq8PbDYMN-KQ.roa
File: 8dUZQtn2PiQ2Mqqoq8PbDYMN-KQ.roa (raw, json)
Hash identifier: gfuwHblEZ674N+Ai1/PQK2tVCiQRLzWCCJGV8+Mfryo=
Subject key identifier: F1:D5:19:42:D9:F6:3E:24:36:32:AA:A8:AB:C3:DB:0D:83:0D:F8:A4
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 0198C109D71E25A7042EECA6471F4B1F1856
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/8dUZQtn2PiQ2Mqqoq8PbDYMN-KQ.roa
Signing time: Tue 19 Aug 2025 06:35:04 +0000
ROA not before: Tue 19 Aug 2025 06:35:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 212.124.68.0/24 maxlen: 24
212.124.69.0/24 maxlen: 24
212.124.70.0/23 maxlen: 24
212.124.72.0/22 maxlen: 24
212.124.76.0/24 maxlen: 24
212.124.77.0/24 maxlen: 24
212.124.78.0/23 maxlen: 24
212.124.86.0/24 maxlen: 24
212.124.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:09:d7:1e:25:a7:04:2e:ec:a6:47:1f:4b:1f:18:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Aug 19 06:35:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1d51942d9f63e243632aaa8abc3db0d830df8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:78:1c:6c:95:db:a4:a6:7b:52:8e:01:ae:98:
e7:67:11:3a:ac:9c:c7:15:87:cc:55:d8:5d:0d:d7:
d9:fe:12:f3:2e:f1:f8:28:fb:a0:d9:9a:4a:d4:18:
6b:2a:88:52:f8:c8:18:8b:d8:5e:19:97:d3:6d:fc:
be:ec:c8:49:f9:a3:f8:16:fb:35:7f:0c:77:69:3b:
37:6b:7f:42:fe:76:2d:61:d6:ba:ba:33:25:28:42:
d0:1c:68:ef:f2:23:79:ab:3c:c6:e1:1e:97:7d:30:
4a:6f:64:3a:87:aa:a0:7b:eb:56:3c:d3:f4:11:30:
32:ac:62:a5:40:a8:dc:31:7b:77:46:75:03:5c:b2:
d1:88:42:45:28:e4:aa:5d:a8:82:8f:0c:ab:0e:3e:
e5:c9:e5:e9:73:f1:3e:f1:89:f8:f5:2a:6c:d2:e8:
c2:77:54:81:00:2d:01:d6:8e:34:7b:f9:c3:bc:bd:
0c:64:bd:8b:de:1d:7a:d1:8d:f6:bd:c5:d7:8f:b9:
b3:8f:c0:a5:04:c6:28:f8:19:e9:f4:ad:4f:a5:1f:
84:c9:89:3e:ac:53:8e:34:ca:8d:b9:7f:79:15:65:
90:69:f6:73:03:1b:6d:7e:cc:2f:a4:b2:f0:bb:8b:
0a:89:24:57:50:ea:fc:6d:6b:db:67:17:2c:65:fa:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:19:42:D9:F6:3E:24:36:32:AA:A8:AB:C3:DB:0D:83:0D:F8:A4
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/8dUZQtn2PiQ2Mqqoq8PbDYMN-KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.68.0-212.124.79.255
212.124.86.0/24
212.124.92.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f0:03:5c:bf:1d:0d:90:26:e3:68:33:d5:a8:d3:79:1e:fb:
85:12:00:bc:ea:86:f2:ca:0b:5b:e4:75:b8:4a:f4:d1:67:67:
54:87:03:82:52:61:c5:0b:50:ce:b3:c4:07:c8:3c:81:c1:7d:
3b:1f:40:9b:0c:a2:b7:35:d7:74:19:c6:ab:a8:38:c3:16:54:
24:a6:30:7a:3c:b9:ac:bf:33:23:25:41:70:bd:0b:07:b4:e1:
84:3f:9f:da:0b:bb:cf:6a:e8:b9:28:67:02:2e:23:7a:09:29:
61:e8:6c:3d:e6:b5:b3:5e:ed:0b:55:68:62:d5:87:20:35:f4:
25:d6:d6:c8:f5:58:a0:5c:4d:a8:02:d5:1f:d5:b8:d6:af:62:
88:87:55:51:39:1d:a1:c6:4f:41:15:89:81:b1:de:17:04:cb:
5c:be:01:94:47:30:4a:c4:5a:57:03:1d:97:90:da:65:12:dc:
ae:68:25:4a:10:ac:79:ed:eb:a0:ad:ac:4e:1f:4a:11:87:4d:
d1:bf:61:24:bc:6e:8d:b4:f7:fb:cb:6b:cf:53:ac:fb:01:ba:
ee:52:00:b1:60:d1:0b:41:69:df:03:88:38:bf:4d:ba:aa:3b:
78:01:9d:77:80:4b:c1:41:85:e1:c3:c1:1f:85:4a:90:29:36:
ff:65:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:52 2025 by rpki-client