Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/tvkZ4fqE6QJf8xxvSBRkdJHYoXY.roa
File: tvkZ4fqE6QJf8xxvSBRkdJHYoXY.roa (raw, json)
Hash identifier: 7tw+NyMEQGhNa6VQJeHyXXe47cTc78mCtTCXpfOWObQ=
Subject key identifier: B6:F9:19:E1:FA:84:E9:02:5F:F3:1C:6F:48:14:64:74:91:D8:A1:76
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0197AA9DDF371AEAFE82E4991422E2341CF2
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/tvkZ4fqE6QJf8xxvSBRkdJHYoXY.roa
Signing time: Thu 26 Jun 2025 05:02:42 +0000
ROA not before: Thu 26 Jun 2025 05:02:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 194.246.36.0/24 maxlen: 24
194.246.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:aa:9d:df:37:1a:ea:fe:82:e4:99:14:22:e2:34:1c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jun 26 05:02:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6f919e1fa84e9025ff31c6f4814647491d8a176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:90:d0:67:3c:cf:ae:f6:54:11:38:8a:89:c0:
e4:c0:91:b7:a2:0d:7a:5c:2c:e3:bb:98:4e:3f:f4:
1b:3f:73:82:10:8f:5c:49:db:ef:34:fa:08:bb:13:
f7:ab:73:6c:91:11:cb:24:b8:fe:be:3c:12:f7:c6:
5b:cb:ae:ca:4f:0e:c3:51:70:76:60:82:8c:94:0d:
ce:a9:e0:8d:d3:a7:ae:ee:f2:b2:f0:e1:61:0c:b7:
65:36:4c:7c:46:95:3e:6c:07:fc:e6:35:b2:c9:2a:
f2:65:81:ff:ac:a6:68:b9:ca:0d:06:c8:34:8c:29:
6d:b1:18:16:31:a5:fe:1f:e3:02:b8:3f:e4:79:87:
17:1d:91:2c:cb:7b:bb:4e:be:8f:3d:72:70:40:c0:
6c:8a:d6:c1:fb:23:28:73:01:4d:4c:de:74:54:7a:
32:4e:34:86:86:f8:ba:51:3a:02:25:c6:a9:6d:2f:
6a:a6:95:ef:a3:8b:6f:9a:66:8b:c6:c0:12:db:13:
b4:fe:62:9b:bc:90:e5:6c:bb:a6:76:9d:e1:b3:fb:
b5:48:ab:73:f0:e4:22:0c:b4:e9:68:c4:63:ea:4e:
17:4f:2d:8a:71:3f:c8:cf:ac:2f:d0:ad:df:ee:65:
a0:06:a6:d9:ca:d1:3b:c4:37:cd:7a:90:05:aa:97:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:19:E1:FA:84:E9:02:5F:F3:1C:6F:48:14:64:74:91:D8:A1:76
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/tvkZ4fqE6QJf8xxvSBRkdJHYoXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.36.0/23
Signature Algorithm: sha256WithRSAEncryption
64:7a:73:5b:1b:c8:aa:c7:0d:fa:32:21:04:64:f8:af:23:c7:
02:e7:e2:1d:16:4e:a1:88:26:77:62:8f:d2:92:f5:0f:2d:1c:
ca:87:a4:98:bc:40:f3:26:7f:07:96:32:dc:b1:79:9c:2c:58:
d2:19:75:bb:a3:86:70:d7:d6:55:78:08:e4:5d:cb:63:ff:f3:
0e:8b:3a:8b:ae:38:56:7d:31:b5:77:56:9e:c0:0a:25:e2:2f:
5e:03:cb:91:36:27:7b:a3:4d:b8:74:5e:4b:35:7d:06:a7:bf:
72:05:62:4c:ca:58:d3:45:5c:49:8e:a9:a8:eb:b7:a6:3d:b5:
d3:0e:d5:76:fe:74:d4:78:f2:2a:2c:72:11:ff:05:a8:93:7c:
56:03:c2:b7:fa:18:c4:8b:65:e5:8b:03:d6:2f:86:7e:10:f9:
04:93:38:a4:30:b6:6f:c5:d8:ac:79:56:b6:53:6f:9d:43:5f:
79:f7:76:39:d0:d3:db:17:6d:e7:35:db:cb:e5:c8:fb:3b:5c:
4b:b8:e9:77:31:c3:e9:b3:aa:55:c4:e4:d0:fa:5e:6b:eb:ed:
b1:ee:9a:b7:76:66:25:45:94:31:f4:06:2f:c0:75:aa:97:59:
25:a1:ee:3e:72:87:0a:ec:44:9f:8d:5b:09:31:d2:67:6d:17:
7b:04:fb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:19:47 2025 by rpki-client