Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/56avvtzTP76zckNF3ziWhT42SCY.roa
File: 56avvtzTP76zckNF3ziWhT42SCY.roa (raw, json)
Hash identifier: QlUC6IzJ4VZBgrJ8D1uVy5icXmumWjL9CCS6RyZ1ZZA=
Subject key identifier: E7:A6:AF:BE:DC:D3:3F:BE:B3:72:43:45:DF:38:96:85:3E:36:48:26
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198B913E49B3EBF6F9A04AFF22FE0859538
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/56avvtzTP76zckNF3ziWhT42SCY.roa
Signing time: Sun 17 Aug 2025 17:29:05 +0000
ROA not before: Sun 17 Aug 2025 17:29:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 81.168.65.0/24 maxlen: 24
213.130.132.0/24 maxlen: 24
213.130.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b9:13:e4:9b:3e:bf:6f:9a:04:af:f2:2f:e0:85:95:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 17 17:29:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7a6afbedcd33fbeb3724345df3896853e364826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:83:b9:6b:f1:43:e5:15:6f:01:00:35:7d:
5d:4f:12:67:56:2a:fa:e7:e5:9d:c0:10:ca:4c:35:
fe:df:64:e1:e1:ec:4b:81:0b:ee:2b:61:b5:30:8d:
13:c0:3e:19:82:ab:01:b0:26:9f:cb:d2:51:3d:dc:
f3:93:23:40:b0:e2:86:bb:39:a6:df:f6:84:62:2e:
82:cb:6f:0d:19:a5:0c:ad:82:03:52:7b:b3:2e:46:
9b:16:37:59:d5:72:80:a4:2a:b2:6a:3a:b7:6b:0c:
d7:90:1c:7d:23:73:02:c6:7b:08:ec:26:0d:1d:a2:
7f:fa:ef:4a:92:fd:5d:37:b4:95:38:c2:fa:7e:dd:
0c:0f:9f:27:aa:79:ef:29:29:7a:44:00:5d:93:c9:
12:c5:a6:ab:c7:ff:f6:a5:6d:3c:fe:73:39:78:05:
5f:39:c1:6a:fa:00:2d:52:6d:13:8f:0a:f6:3f:2b:
22:47:ea:92:d2:80:02:11:39:b5:08:0f:62:5b:4a:
4b:95:b7:75:e3:33:0c:f5:7a:de:33:be:16:db:a1:
a0:e9:19:c1:70:60:c5:48:ac:df:71:19:8a:b4:ad:
4d:3f:f9:2c:86:dd:1b:96:17:3f:9e:f4:55:35:3c:
b0:91:32:96:d4:96:10:84:35:cb:98:ec:1b:4d:2f:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A6:AF:BE:DC:D3:3F:BE:B3:72:43:45:DF:38:96:85:3E:36:48:26
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/56avvtzTP76zckNF3ziWhT42SCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.65.0/24
213.130.132.0/23
Signature Algorithm: sha256WithRSAEncryption
52:2c:e0:82:ce:35:6d:a8:14:26:d8:65:b9:7e:89:f6:dd:01:
ed:9c:14:a5:3e:3a:08:d7:a3:e1:a0:82:56:a2:65:60:fc:23:
61:a2:25:30:89:1a:f3:66:10:94:41:12:2b:16:9d:9f:68:62:
cf:c2:ef:f1:b5:a3:01:a6:fe:3b:8c:b3:1a:56:a8:eb:51:d6:
2c:61:f1:7d:2c:94:4a:a3:e4:c7:c7:1c:77:0d:9f:0a:cb:28:
54:52:06:2e:da:96:f4:ba:77:df:2b:ba:be:30:38:8d:03:b1:
f9:27:54:6c:90:e8:db:c9:30:4e:36:d5:fd:ae:b1:3b:3d:90:
29:16:01:e8:86:ce:c4:88:dd:39:03:18:84:b3:83:b2:32:d7:
cf:44:2e:19:a0:01:29:0c:e1:e9:d8:ae:96:00:10:73:7b:6c:
ce:9b:48:4b:ba:e4:3e:66:41:ae:39:84:39:e8:ec:fc:26:b6:
48:2e:d4:41:04:cd:f9:27:b3:76:a9:30:60:46:b6:d5:ca:73:
a9:e1:06:9a:33:a0:a1:69:8f:25:7e:de:61:13:12:e3:0d:16:
89:51:7e:80:02:fa:2b:3c:43:39:75:7f:4a:20:47:a3:76:37:
76:2c:03:e4:cb:26:40:54:4d:e5:8a:ff:42:7a:94:70:c9:0f:
4a:f9:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:57 2025 by rpki-client