Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/S-LyAPTyjR_trxSWtQRZeOWC_3g.roa
File: S-LyAPTyjR_trxSWtQRZeOWC_3g.roa (raw, json)
Hash identifier: mdb3EARrdNQMQqJtEZ6Yv2aaf9muu1ZlrouX6RhltB0=
Subject key identifier: 4B:E2:F2:00:F4:F2:8D:1F:ED:AF:14:96:B5:04:59:78:E5:82:FF:78
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0197A2C26FC2196BC17CDE57EF088F900AB2
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/S-LyAPTyjR_trxSWtQRZeOWC_3g.roa
Signing time: Tue 24 Jun 2025 16:25:40 +0000
ROA not before: Tue 24 Jun 2025 16:25:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204544
IP address blocks: 62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:c2:6f:c2:19:6b:c1:7c:de:57:ef:08:8f:90:0a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jun 24 16:25:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4be2f200f4f28d1fedaf1496b5045978e582ff78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:f7:30:3f:7f:42:20:59:04:6a:90:96:99:
17:14:69:9c:25:33:50:ce:fc:3b:66:e2:0b:f7:f1:
05:7a:08:c0:0d:b4:07:f2:37:33:2e:d1:26:89:70:
ee:4e:b0:20:ca:8c:35:fe:a5:82:10:4a:05:23:2e:
b4:59:d7:8a:ef:d6:59:6c:f4:bc:06:8a:6f:31:da:
79:1b:97:0c:b1:f7:3e:74:d8:e5:0b:3e:7d:6f:d6:
e6:dd:6f:97:34:fe:0b:ea:ac:f8:01:19:58:39:c7:
d3:e5:25:fd:5d:1b:25:84:2d:20:a2:ac:a8:e9:c9:
e2:27:7b:bf:f9:ee:e6:e9:36:73:d7:90:a5:f2:eb:
f2:d5:35:9f:11:00:ee:c8:0e:8d:d4:51:0c:4d:09:
14:eb:f3:92:59:7a:a8:a3:a7:e4:ed:bb:be:02:34:
99:fc:f4:aa:00:fe:a2:f8:30:6a:10:62:40:08:bd:
f5:e3:87:9e:37:56:7d:d4:ab:c7:5c:60:f2:01:d8:
8a:7b:84:cc:49:68:11:43:a7:b9:90:1b:d0:f8:cd:
38:2f:e6:53:cd:58:f7:8a:0a:27:cd:f4:76:6c:24:
98:6d:8a:34:bd:c6:ce:07:13:cc:35:d8:8c:61:dc:
d4:89:09:32:cb:8a:68:48:95:15:37:b0:cc:73:2c:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E2:F2:00:F4:F2:8D:1F:ED:AF:14:96:B5:04:59:78:E5:82:FF:78
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/S-LyAPTyjR_trxSWtQRZeOWC_3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.126.0/23
81.12.24.0/22
81.12.30.0/23
87.107.8.0/23
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:2c:38:de:d1:2b:02:2d:c2:5c:0b:ab:de:08:af:92:ca:c6:
15:d9:38:4d:ba:5f:b3:02:f5:fa:e5:4a:68:fa:8b:8a:79:f1:
45:ce:32:c7:cf:8c:26:4f:8a:2b:f2:80:c8:81:03:94:be:a2:
d5:dc:26:36:10:86:63:08:ef:6d:07:be:8a:b1:ea:e8:42:49:
af:57:36:ee:82:09:7e:e6:c8:a0:1a:9b:53:b8:e5:7f:da:ad:
03:67:da:c7:a9:e1:66:e1:fc:a0:f8:44:06:96:9c:33:c0:ae:
63:b8:8f:0c:35:59:6d:09:0d:d4:1e:5c:05:09:a9:78:71:e4:
56:84:86:26:db:2d:18:88:3a:a8:53:a2:ff:30:03:fc:da:39:
19:ce:7f:08:90:4f:d8:08:05:fe:2d:f8:d3:5f:c2:1e:db:08:
cf:2b:ca:91:a2:9a:6e:74:ee:e0:6c:40:32:05:5f:7b:cc:03:
39:20:56:6c:31:17:9c:cf:b7:c7:07:66:25:b0:12:65:30:8e:
c8:4a:d0:ff:d9:41:29:3d:c2:ae:0e:81:9b:1a:f1:8a:c1:f9:
3b:cf:b2:28:f6:e9:bc:5d:c2:dc:f2:f1:ce:48:7e:85:98:66:
71:8c:2d:ee:30:d6:ba:d5:f3:56:ec:e9:35:b8:43:8f:bc:75:
2e:2e:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:08:03 2025 by rpki-client