Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/X62X-jiQ-0UAZwMWIFM3EU6c8q4.roa
File: X62X-jiQ-0UAZwMWIFM3EU6c8q4.roa (raw, json)
Hash identifier: ZyfxHFUBjGrLSgfRQi1lqT1U0IVSPLZ06e88Xsn5Wq0=
Subject key identifier: 5F:AD:97:FA:38:90:FB:45:00:67:03:16:20:53:37:11:4E:9C:F2:AE
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0198A5BED975C0DFBDF7DB759B85C301F97F
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/X62X-jiQ-0UAZwMWIFM3EU6c8q4.roa
Signing time: Wed 13 Aug 2025 23:23:24 +0000
ROA not before: Wed 13 Aug 2025 23:23:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 155.212.0.0/23 maxlen: 23
170.168.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a5:be:d9:75:c0:df:bd:f7:db:75:9b:85:c3:01:f9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 13 23:23:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fad97fa3890fb4500670316205337114e9cf2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:51:54:98:64:6c:0f:de:39:8f:46:c2:93:
3d:dc:77:1b:84:b3:e3:b0:16:c8:90:a0:5b:39:28:
e4:c8:36:d4:f1:aa:65:8c:4b:e3:26:7e:8f:38:32:
04:8c:c3:e0:7b:1a:c8:af:80:0f:20:4f:e8:df:31:
70:bf:f1:d8:bb:fb:68:63:ab:f3:55:c2:20:43:95:
b6:e1:61:f1:3c:70:4d:cd:cd:2d:af:f0:90:6e:fb:
27:42:44:4d:55:05:df:50:03:af:2d:fb:41:7a:e5:
95:22:19:6d:79:ee:33:5f:01:8f:c3:24:f5:db:5f:
e1:40:42:50:1e:f9:ab:55:94:d5:8d:08:49:b4:a4:
95:be:20:c1:1e:c7:b5:d4:ef:c4:56:dc:a0:b3:ee:
92:08:36:ad:eb:08:aa:0c:2e:4d:9e:94:07:38:ad:
1a:13:87:5a:36:47:94:2e:fe:25:d3:1c:fa:15:6f:
e0:b6:49:4e:9e:2f:f2:6f:26:a6:02:e8:89:f8:5d:
72:3b:6a:2d:a2:a0:42:ac:ff:cf:ad:be:fc:7a:d6:
ac:19:5a:49:61:0f:44:1a:18:c3:13:70:a3:14:c8:
d8:30:8b:32:bb:f0:50:1c:93:c1:f6:5d:6a:94:8b:
7f:68:c7:43:9d:0c:d1:ee:86:4d:04:b4:00:ea:ab:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:97:FA:38:90:FB:45:00:67:03:16:20:53:37:11:4E:9C:F2:AE
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/X62X-jiQ-0UAZwMWIFM3EU6c8q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.212.0.0/23
170.168.66.0/24
Signature Algorithm: sha256WithRSAEncryption
71:82:6e:30:61:b6:e4:f7:2c:7b:46:90:d1:92:38:4c:c3:a3:
66:4e:37:b7:7e:c8:db:9f:ab:08:fa:50:f9:f3:cd:92:81:82:
ff:28:0b:ac:f4:3f:19:ab:a3:af:8f:3b:54:61:f6:56:80:a8:
b2:9b:9f:6e:5e:0b:26:0d:f0:00:79:16:4c:79:a8:f5:3a:a1:
c2:31:96:98:51:d5:81:d0:8e:bb:90:ab:f3:5b:1c:52:37:51:
83:49:49:a5:3d:cc:9d:3b:63:e1:af:24:74:04:f8:11:e0:5c:
a1:a1:e8:ba:09:4e:de:c5:e9:17:d9:79:65:ef:7f:9c:37:59:
71:b0:40:3c:a7:ab:d9:2f:0d:9a:df:55:e9:da:19:92:13:ec:
75:02:fe:3e:c2:87:a1:2e:4b:27:78:cc:da:50:f6:c0:2e:c4:
5c:95:54:53:72:d0:c6:e1:af:ff:c8:02:31:bc:31:32:be:5f:
fd:49:0a:dd:98:9e:e3:a1:aa:37:61:7d:63:21:54:0f:98:5b:
b3:b7:23:ad:d1:d1:48:6f:78:f9:84:14:60:fe:66:0b:da:a9:
bc:be:4d:4d:af:27:74:1a:7b:f8:ce:5f:60:5f:7f:32:af:0a:
2b:83:83:0c:46:1d:e8:35:de:44:14:2f:e4:87:cf:71:f0:0c:
aa:ff:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:55 2025 by rpki-client