Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/_BTZQ0zK_fvKReKxFaBu1-Vwvm8.roa
File: _BTZQ0zK_fvKReKxFaBu1-Vwvm8.roa (raw, json)
Hash identifier: IbkaaN1eobNCsZcNskJYmH0crzqKNoH6G8sKqEsCFhk=
Subject key identifier: FC:14:D9:43:4C:CA:FD:FB:CA:45:E2:B1:15:A0:6E:D7:E5:70:BE:6F
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 0197B1A6B705EBA9035174BB701366B197AB
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/_BTZQ0zK_fvKReKxFaBu1-Vwvm8.roa
Signing time: Fri 27 Jun 2025 13:49:42 +0000
ROA not before: Fri 27 Jun 2025 13:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9011
IP address blocks: 212.100.0.0/19 maxlen: 19
212.100.0.0/24 maxlen: 24
212.100.1.0/24 maxlen: 24
212.100.2.0/23 maxlen: 23
212.100.4.0/24 maxlen: 24
212.100.5.0/24 maxlen: 24
212.100.6.0/23 maxlen: 23
212.100.8.0/21 maxlen: 21
212.100.16.0/20 maxlen: 20
2a00:ed00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:a6:b7:05:eb:a9:03:51:74:bb:70:13:66:b1:97:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Jun 27 13:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc14d9434ccafdfbca45e2b115a06ed7e570be6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:87:fd:c0:3e:4f:14:61:98:5f:16:e9:8c:2f:
69:2b:52:d3:19:4d:74:be:47:89:2d:50:43:b9:c1:
09:c8:eb:94:dc:64:ff:9d:e8:08:02:be:20:e1:ca:
c7:6d:5c:1b:07:9b:6a:13:f3:31:51:eb:3c:fe:1c:
20:8e:b0:3d:96:95:16:dc:66:56:b9:78:ed:f1:ba:
84:60:d6:67:af:df:72:a5:7b:93:31:3d:8c:08:8b:
b3:be:7c:12:c9:89:b8:27:cd:dd:9e:5e:fc:45:7a:
1c:ca:40:ff:2d:3f:e3:39:86:a5:c9:16:57:81:72:
54:6c:e3:1a:c5:9f:d7:0d:cd:64:f5:f2:44:63:72:
5c:2a:9d:d9:95:1b:8d:0b:56:8f:72:cc:1b:23:95:
ae:68:2a:8f:e7:2f:27:a2:c0:65:fa:08:dc:0f:62:
74:31:8a:6a:6f:a6:58:f6:ed:91:05:da:0c:01:e5:
11:38:61:8b:55:c0:12:e3:d9:52:45:58:7e:ad:86:
fb:ec:9d:c5:99:ac:47:8d:eb:3f:2a:ec:50:8c:b0:
38:46:76:c9:5f:99:4d:a6:4b:f6:89:2b:5a:8d:29:
7e:f6:d5:52:7c:2c:55:68:62:ca:40:1c:29:f7:5b:
e3:4d:a8:76:1c:6e:cb:13:f7:2d:90:da:e5:52:19:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:D9:43:4C:CA:FD:FB:CA:45:E2:B1:15:A0:6E:D7:E5:70:BE:6F
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/_BTZQ0zK_fvKReKxFaBu1-Vwvm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.0.0/19
IPv6:
2a00:ed00::/32
Signature Algorithm: sha256WithRSAEncryption
8a:1d:cb:45:ee:01:0b:31:17:ec:39:72:25:aa:41:33:cf:24:
c0:c8:b4:9d:a5:fd:ad:9e:84:59:e5:48:19:3e:7c:ed:dc:02:
95:a1:e4:1c:c8:b4:15:6d:35:71:07:e7:51:2c:0e:d6:84:41:
e2:dd:c4:8e:5a:c5:6b:be:c7:96:59:63:46:fd:86:44:28:23:
63:0e:0f:48:f7:2e:35:fa:75:a4:ae:cc:8d:a1:2a:98:be:24:
95:12:a2:38:d0:ad:85:f6:79:c9:65:e0:5a:d5:89:56:67:ce:
fd:97:20:d6:fc:8e:85:dd:d9:8f:bb:86:3b:bb:dd:d5:42:c2:
00:9b:31:92:54:ac:8c:78:28:31:d4:b1:d0:9c:b0:f4:a2:cb:
ff:fb:59:b8:d5:eb:27:a6:66:b2:b3:80:8f:f6:7a:7a:43:4d:
3c:5f:24:30:0b:24:19:ab:a1:8c:18:0e:17:5b:aa:39:26:98:
0f:c4:c2:65:88:bb:36:af:62:73:e2:ea:c6:1c:7a:58:0d:74:
c1:6a:08:d4:9f:0d:5a:38:0c:c8:49:2a:1c:ca:8f:dc:c1:7e:
46:10:81:23:a9:e6:f2:ec:e8:f0:03:f1:4d:b2:8c:c5:9d:4a:
c4:4f:6b:9b:ef:a2:bb:f4:4b:09:7c:61:fb:33:20:71:21:b1:
b5:c9:0a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:17:39 2025 by rpki-client