Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-SYiE6Ef3v5hxQu4nJTXa_0UiJA.roa
File: 1-SYiE6Ef3v5hxQu4nJTXa_0UiJA.roa (raw, json)
Hash identifier: RoAPVDfHMsY+soRH+zs/qIe/L7uYVA0z2MsLEpuiyEU=
Subject key identifier: F9:26:22:13:A1:1F:DE:FE:61:C5:0B:B8:9C:94:D7:6B:FD:14:88:90
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0197C4757B8E6802C065C9142583309AFA08
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-SYiE6Ef3v5hxQu4nJTXa_0UiJA.roa
Signing time: Tue 01 Jul 2025 05:28:43 +0000
ROA not before: Tue 01 Jul 2025 05:28:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 170.62.96.0/22 maxlen: 24
170.62.101.0/24 maxlen: 24
170.62.105.0/24 maxlen: 24
170.62.109.0/24 maxlen: 24
170.62.176.0/21 maxlen: 24
192.253.211.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
203.188.174.0/24 maxlen: 24
203.188.180.0/24 maxlen: 24
213.254.162.0/24 maxlen: 24
213.254.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:75:7b:8e:68:02:c0:65:c9:14:25:83:30:9a:fa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 1 05:28:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9262213a11fdefe61c50bb89c94d76bfd148890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:ed:a8:52:68:5f:35:df:f8:af:ae:47:3b:
ce:e8:49:7b:17:77:20:d8:b2:31:d3:d3:11:11:9f:
9a:b1:eb:ec:a4:d4:5b:12:f7:43:b1:e7:ca:37:7d:
3d:5b:73:e3:bb:78:8d:0f:83:0c:ae:37:4a:3d:90:
80:08:d2:71:5f:7c:a7:f9:1d:10:bb:50:23:6a:49:
df:b7:75:24:d7:fa:5a:a0:8a:a3:bf:e8:5d:71:3c:
9d:30:c0:0b:4e:ef:b5:17:85:84:c3:5d:53:dd:26:
39:cd:fc:1c:59:83:4f:61:6a:63:9d:01:ce:08:0d:
4f:bb:f2:46:59:71:7b:43:cb:c2:0f:bf:c8:dd:68:
4a:28:3d:8e:b1:f5:e4:42:b7:67:72:da:77:b7:6b:
93:1d:1d:c3:ce:76:a0:27:3b:e8:77:91:33:5c:1c:
14:f3:7b:f0:e0:dc:fc:00:31:b9:f8:e8:f9:2c:c8:
12:ef:10:d8:fb:19:62:64:0f:cb:2b:7a:7c:e8:7b:
f3:eb:bb:cc:7d:44:60:35:1a:db:d0:79:39:cc:3e:
c6:c0:c7:33:18:75:59:bf:f9:5c:1c:a6:9c:b4:10:
b8:e7:72:55:20:dd:20:f3:f2:d5:71:c1:ad:1a:66:
8b:4f:ae:b5:71:f5:0a:21:4e:f8:45:d4:4e:f0:43:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:26:22:13:A1:1F:DE:FE:61:C5:0B:B8:9C:94:D7:6B:FD:14:88:90
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-SYiE6Ef3v5hxQu4nJTXa_0UiJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.96.0/22
170.62.101.0/24
170.62.105.0/24
170.62.109.0/24
170.62.176.0/21
192.253.211.0/24
203.188.173.0-203.188.174.255
203.188.180.0/24
213.254.162.0/24
213.254.172.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:a4:87:b1:d6:90:4c:0a:8c:46:9a:6d:90:87:43:84:d9:33:
49:a1:7f:ee:81:89:de:3a:08:10:c1:fb:10:ff:c8:26:d2:8f:
b9:82:00:13:f1:3c:18:74:ea:d6:4a:93:eb:b1:c7:0e:aa:e8:
9d:d4:85:31:eb:95:c1:a2:cd:14:88:86:01:4e:0e:41:31:69:
49:40:d7:37:02:1f:b7:70:13:f4:94:83:36:89:56:6b:4e:0d:
d3:61:60:9e:d1:0b:fe:bb:7f:56:9f:6c:04:10:e0:e6:b6:0a:
e1:c5:f1:7d:92:fa:c7:36:b8:73:1a:75:57:ed:00:be:42:e7:
0e:44:8c:87:91:d8:f4:ff:5c:f0:f2:a6:d1:e1:6c:c7:c7:b0:
cc:15:84:36:ca:f5:12:d6:83:1f:da:d8:9d:da:32:8b:e9:0f:
c3:e3:a8:8b:c9:72:2e:f8:6c:73:ad:c9:02:a6:43:f5:f3:83:
2b:38:5b:55:d1:c4:26:25:d8:92:1e:06:79:96:06:a3:df:82:
47:4d:c5:8b:c1:a7:de:2d:51:be:72:3b:ab:2b:fe:8d:4a:2c:
1d:b4:b9:67:68:83:49:5a:9c:b3:54:1b:83:df:27:60:3f:9d:
50:40:f0:63:ed:65:2e:13:ea:ed:ab:fd:55:90:9f:64:09:ba:
55:d1:9e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:49:21 2025 by rpki-client