Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/RhpIQufBvlT8um36o8p8__NcaC0.roa
File: RhpIQufBvlT8um36o8p8__NcaC0.roa (raw, json)
Hash identifier: SB9yn1L2urR2v3sLA87qzt8eBZ6ywq4EbVAEGhXLrdw=
Subject key identifier: 46:1A:48:42:E7:C1:BE:54:FC:BA:6D:FA:A3:CA:7C:FF:F3:5C:68:2D
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0197AC44D8C190BF56E2C74D3B641D1267DF
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/RhpIQufBvlT8um36o8p8__NcaC0.roa
Signing time: Thu 26 Jun 2025 12:44:42 +0000
ROA not before: Thu 26 Jun 2025 12:44:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214515
IP address blocks: 109.122.244.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:44:d8:c1:90:bf:56:e2:c7:4d:3b:64:1d:12:67:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 26 12:44:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=461a4842e7c1be54fcba6dfaa3ca7cfff35c682d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:a3:9f:0d:31:ba:5a:3f:81:81:fb:bf:29:
da:e4:b8:74:b9:20:30:a1:c7:51:0a:ee:14:4f:69:
0c:f6:80:c0:2d:b8:63:5d:58:de:5b:db:7e:71:37:
81:85:be:f9:1e:82:59:f4:d2:eb:85:24:06:b7:ab:
0c:78:65:78:e8:12:0b:8d:57:0c:1e:47:9d:81:ca:
59:c9:70:00:1a:36:48:a0:dd:7d:65:91:32:c7:fa:
ae:8b:95:b0:7b:d9:74:64:4e:07:7c:e8:38:24:90:
5a:ee:e7:93:b6:0a:ca:81:3f:31:ac:bc:6b:00:7f:
ba:7f:c5:a4:75:87:ee:92:e1:15:8b:be:ba:93:3e:
06:03:2a:40:c0:68:24:8f:65:b6:aa:04:96:0f:b0:
69:93:44:e6:68:04:d7:7e:d8:bb:1a:1b:b5:5b:c3:
41:e8:19:a3:0f:c7:f3:45:8f:b6:07:9e:c7:de:26:
da:48:4b:95:de:0f:83:ce:ea:ae:06:a8:24:ea:6c:
18:ec:35:60:ae:41:94:73:54:da:99:36:87:50:0e:
ef:de:f9:7d:7e:41:ae:ff:8f:f3:ca:90:58:5a:c1:
eb:97:4c:b7:ab:b8:93:57:d9:b0:fa:fa:43:26:a8:
a1:46:08:62:ba:72:c5:e0:f7:86:00:0c:dc:a2:e4:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1A:48:42:E7:C1:BE:54:FC:BA:6D:FA:A3:CA:7C:FF:F3:5C:68:2D
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/RhpIQufBvlT8um36o8p8__NcaC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.244.0/24
185.3.200.0/24
Signature Algorithm: sha256WithRSAEncryption
38:30:37:d9:75:94:13:06:88:79:19:2c:24:9a:7d:53:68:73:
ab:40:0e:a2:c6:23:6a:6d:f5:0a:6d:12:40:5e:ea:6a:20:81:
e0:10:a8:fc:5b:94:0e:b4:a6:51:6f:b4:5d:38:06:51:95:d4:
d1:51:01:1f:2a:dc:3b:43:6d:7d:e8:6f:39:f5:4e:e5:7b:c6:
25:c5:8e:fb:be:50:6b:06:ee:c3:12:38:b7:65:70:72:6f:4c:
35:e8:26:f9:9d:93:db:8a:26:64:da:1c:ee:f3:33:f6:6a:b9:
15:e4:4f:19:36:e6:4a:72:0e:e9:a4:37:39:57:4f:4b:f3:87:
b0:f5:c6:a1:2e:88:a6:2e:97:0f:3c:8b:40:f6:1c:f6:9e:ac:
7a:2e:4c:64:a0:18:45:ff:bf:2f:f0:c8:7b:81:66:2e:fa:a1:
bc:b6:23:db:87:7a:54:bf:fd:94:71:2c:d7:01:08:92:91:f8:
49:71:12:a0:d0:c2:78:30:ae:0d:b2:3e:cf:ac:ce:7f:6e:ee:
6e:19:c7:b6:34:8a:05:15:36:77:02:02:43:11:e8:e1:7c:9a:
44:e7:93:bd:7c:69:fe:12:b0:09:ce:92:6a:c5:a1:d4:dd:02:
5c:a3:4b:32:18:c1:99:d0:93:be:d8:c7:32:be:0f:e1:c7:39:
fc:c6:e7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:04:13 2025 by rpki-client