Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/zC1Sn658_TpTHaiHtbRsJ5ASeUg.roa
File: zC1Sn658_TpTHaiHtbRsJ5ASeUg.roa (raw, json)
Hash identifier: p+xEHDv2mI7HSN0Md1NF4A8uiIrqEQrPGZAyc5GO4iE=
Subject key identifier: CC:2D:52:9F:AE:7C:FD:3A:53:1D:A8:87:B5:B4:6C:27:90:12:79:48
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0198C6C7428960E6D1585DDF5F99DCCC3CC1
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/zC1Sn658_TpTHaiHtbRsJ5ASeUg.roa
Signing time: Wed 20 Aug 2025 09:20:04 +0000
ROA not before: Wed 20 Aug 2025 09:20:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28716
IP address blocks: 212.104.0.0/24 maxlen: 24
212.104.2.0/23 maxlen: 24
212.104.4.0/22 maxlen: 24
212.104.8.0/23 maxlen: 24
212.104.11.0/24 maxlen: 24
212.104.12.0/23 maxlen: 24
212.104.15.0/24 maxlen: 24
212.104.16.0/20 maxlen: 24
212.104.32.0/21 maxlen: 24
212.104.40.0/23 maxlen: 24
212.104.42.0/24 maxlen: 24
212.104.44.0/22 maxlen: 24
212.104.48.0/21 maxlen: 24
212.104.50.0/24 maxlen: 24
212.104.55.0/24 maxlen: 24
212.104.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:c7:42:89:60:e6:d1:58:5d:df:5f:99:dc:cc:3c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Aug 20 09:20:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc2d529fae7cfd3a531da887b5b46c2790127948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:34:6b:b0:bc:b4:7b:81:50:2d:27:c1:75:
cd:ea:35:d1:b9:a3:64:ca:17:86:46:30:8e:bd:5a:
64:9a:35:29:8f:ab:54:a9:0e:08:9c:94:67:87:8c:
9b:46:2b:86:93:c4:ba:0d:74:87:80:d1:f3:62:1a:
ec:46:e5:07:d1:f9:b0:0c:b9:09:bb:44:b4:25:7c:
d9:94:fb:01:ed:e2:56:4b:88:13:2d:d8:17:33:95:
72:33:85:1c:41:61:ec:6f:bc:97:ca:e8:f1:63:e6:
5b:cc:f5:2c:82:5b:6f:98:35:95:77:ea:5a:50:f2:
df:66:6c:3b:b1:1e:e5:e7:ab:45:90:95:68:7b:bd:
d2:f7:cf:e2:2f:90:5b:c2:31:b3:48:1a:ca:4f:df:
20:1b:75:50:52:a4:41:40:4f:c8:4c:35:d3:95:0f:
40:3c:95:5f:f7:1a:1d:d5:4f:6f:c8:83:d7:55:ef:
07:5c:4a:cc:3b:c1:61:ad:7c:c5:ee:e2:36:52:e1:
16:70:1f:a2:b8:cd:ce:b6:32:e5:15:e3:8c:4f:fb:
3c:67:2f:f7:f3:ac:2f:5c:8c:2a:32:a9:bb:1d:33:
46:4a:12:5c:88:5c:4d:eb:99:dd:38:60:cc:fa:f2:
17:22:7e:97:6d:f8:a1:7f:d9:4b:8b:a1:f8:27:c8:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:52:9F:AE:7C:FD:3A:53:1D:A8:87:B5:B4:6C:27:90:12:79:48
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/zC1Sn658_TpTHaiHtbRsJ5ASeUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.0.0/24
212.104.2.0-212.104.9.255
212.104.11.0-212.104.13.255
212.104.15.0-212.104.42.255
212.104.44.0-212.104.63.255
Signature Algorithm: sha256WithRSAEncryption
83:ab:eb:a7:bd:23:45:b3:25:95:47:37:04:84:30:f5:b4:43:
29:c1:96:74:6e:03:8d:45:8b:29:73:a9:8b:35:2e:a3:65:24:
a4:bf:8d:78:34:b1:af:29:4b:8a:83:d2:bf:a8:62:a1:bb:87:
f4:0a:de:9d:25:ec:0c:6c:82:b2:8d:f8:17:65:b1:30:f0:38:
d3:36:e4:43:db:f1:b9:a7:4f:5f:53:52:36:d4:ca:ba:6c:08:
12:d6:7e:1d:52:cf:80:9c:1a:1d:3a:f2:d4:87:1b:8b:f0:2d:
18:10:d5:4a:da:67:ef:d0:99:4e:03:56:05:6c:eb:dd:bb:63:
53:7f:6e:93:93:d4:66:92:37:9a:21:90:af:c7:c0:e7:57:08:
8b:a5:ad:54:d0:52:08:e8:93:2b:b8:7c:eb:a4:3c:22:bb:b4:
1d:52:2c:c3:0e:1c:37:a0:d4:0e:8e:5a:7b:bf:56:ef:c8:b6:
34:ac:ff:a8:53:40:d7:17:c5:8f:57:ae:4c:50:02:4d:69:65:
76:1f:b0:fd:0b:e2:2a:6f:45:4b:b4:96:4a:5f:7b:91:ce:b4:
89:b7:98:5c:50:97:32:63:31:12:3d:6c:b1:30:97:25:ff:7e:
fe:5d:ee:e7:5b:4b:d2:cd:b1:c4:b3:a1:3d:42:78:c0:1b:7d:
a8:9b:ff:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:24 2025 by rpki-client