Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/IM58WB6oRVSvth3T7GBmopm97NY.roa
File: IM58WB6oRVSvth3T7GBmopm97NY.roa (raw, json)
Hash identifier: INk1QBtFJkQWxAphCXnUNmrjrSk0YRYITXcjMt0RgK4=
Subject key identifier: 20:CE:7C:58:1E:A8:45:54:AF:B6:1D:D3:EC:60:66:A2:99:BD:EC:D6
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0198CB301BEAD59E2289039C559A8788FCFA
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/IM58WB6oRVSvth3T7GBmopm97NY.roa
Signing time: Thu 21 Aug 2025 05:53:04 +0000
ROA not before: Thu 21 Aug 2025 05:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3170
IP address blocks: 88.80.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:30:1b:ea:d5:9e:22:89:03:9c:55:9a:87:88:fc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Aug 21 05:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20ce7c581ea84554afb61dd3ec6066a299bdecd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:b7:86:97:f8:4f:36:f5:29:ed:13:df:e3:
c0:d1:3b:16:76:9d:10:71:10:0e:3e:5a:a0:27:4c:
0a:2d:b0:a4:04:ac:72:f6:0b:80:13:7b:bd:7c:56:
1c:8d:14:1f:b3:05:1c:71:1a:bd:10:2e:cf:e0:30:
9a:ae:d2:f4:9c:70:b8:3c:ac:24:60:be:12:bb:6d:
9a:17:f4:7d:54:13:88:2d:3a:20:85:8c:31:25:07:
d9:06:73:4c:02:cb:27:01:7b:3d:e4:f6:28:ac:eb:
b1:7d:88:85:0e:fb:cd:b9:8d:83:a6:cf:98:41:88:
b6:c1:46:9b:bf:0a:93:8f:f5:5f:56:57:45:c6:b7:
bc:34:63:02:7e:ee:9d:71:3b:f9:ee:b6:f8:3d:1c:
0f:ea:01:11:44:10:d4:0b:e2:9e:33:02:90:3c:61:
20:4a:06:5d:9c:c2:b4:80:ed:45:c1:c4:e2:29:bc:
06:bd:20:4c:94:de:17:02:75:3b:67:a5:6e:1c:a8:
7e:6e:e5:a3:6d:81:2a:dd:c6:42:d2:8d:73:ec:67:
1e:71:2d:9b:2e:eb:bd:c5:2c:af:eb:56:92:b3:5c:
27:f9:24:e5:7e:37:e8:09:fd:85:a7:42:67:30:95:
ab:8a:e9:3b:03:94:87:82:65:05:f4:f2:8f:c9:ed:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:7C:58:1E:A8:45:54:AF:B6:1D:D3:EC:60:66:A2:99:BD:EC:D6
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/IM58WB6oRVSvth3T7GBmopm97NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:21:2e:8d:f3:b8:ec:38:e8:cb:2f:5f:ba:f2:d2:04:69:25:
b7:4a:89:de:80:ab:77:f3:8f:05:da:57:92:54:47:39:f9:1c:
0d:35:c7:27:8b:f5:df:4b:5e:f4:30:48:51:81:5a:68:17:04:
5b:e1:9d:46:b1:4c:df:ff:f3:3d:48:7f:ca:18:aa:15:52:aa:
14:cd:43:c2:e2:79:a5:9f:7c:18:c4:78:22:11:2d:15:c0:5e:
b4:b0:d7:63:69:cc:08:5d:a1:ae:cc:43:5e:67:e1:39:c8:22:
03:e9:c4:ce:f1:e3:24:78:60:15:03:66:20:26:8e:44:65:01:
c3:6a:a1:2e:9f:29:a3:71:1e:c1:19:c5:95:3c:61:09:b9:64:
a1:a3:80:0d:93:02:4a:5b:44:87:99:90:e0:d4:75:80:ec:c7:
d1:dd:c4:d2:d4:a4:32:7d:cf:a7:4a:ee:f9:76:3b:73:7b:f2:
1d:c7:5d:4e:d1:9a:5e:76:52:dc:c3:06:3f:b7:7e:08:b9:0a:
0d:64:7f:5f:6c:47:04:0f:e3:15:3d:e1:5a:0c:ac:c0:7d:78:
00:c3:89:7d:4e:00:ab:48:bc:a2:74:6a:b1:a1:e1:b8:16:96:
e5:ac:ef:b4:27:d1:79:1a:17:72:4f:a6:62:98:c3:3d:7f:e8:
5a:36:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:07:05 2025 by rpki-client