Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/ACAAllRVQZSY6CEwPUn6nHE0pI0.roa
File: ACAAllRVQZSY6CEwPUn6nHE0pI0.roa (raw, json)
Hash identifier: iIJLabdlVKYUojIdfB178Gbcf89MJgK/cIMBkqfpXow=
Subject key identifier: 00:20:00:96:54:55:41:94:98:E8:21:30:3D:49:FA:9C:71:34:A4:8D
Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial: 0198A4210707CCAD6FC84C09BCC1F2C14CEA
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/ACAAllRVQZSY6CEwPUn6nHE0pI0.roa
Signing time: Wed 13 Aug 2025 15:51:24 +0000
ROA not before: Wed 13 Aug 2025 15:51:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12788
IP address blocks: 80.78.32.0/19 maxlen: 19
80.78.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a4:21:07:07:cc:ad:6f:c8:4c:09:bc:c1:f2:c1:4c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Validity
Not Before: Aug 13 15:51:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=002000965455419498e821303d49fa9c7134a48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:65:54:6b:48:b0:f0:8a:73:4f:7c:bf:15:
35:46:6c:e7:06:ee:26:b2:b1:f8:b8:9e:2d:00:0b:
99:8c:d2:35:78:f8:25:f0:7e:83:08:79:15:2a:9b:
44:e3:4b:d3:d8:ed:b9:0e:48:7d:47:b7:3e:97:ca:
be:b4:1d:14:9b:a9:de:80:67:20:4c:8f:9f:bf:a8:
2d:b8:f6:a5:0e:64:84:44:d5:36:a3:74:0f:e0:83:
5c:cb:ff:67:ad:81:4e:48:52:8c:ef:09:9e:9c:8f:
b9:40:90:f1:db:c0:7d:ae:6d:ea:2c:38:e0:f7:91:
16:36:d9:bd:57:e8:0e:7d:d6:b7:a7:98:64:4f:15:
57:4e:df:63:93:7e:d9:82:92:97:6e:5f:63:a7:06:
a5:0a:ce:58:0b:31:19:2a:a7:0b:cc:e5:b7:f6:09:
9a:fe:75:1b:c5:34:c7:23:d0:d6:85:ab:84:81:28:
da:0a:40:70:56:3d:33:ef:f3:2a:a7:3c:e0:b5:b3:
3a:4e:63:27:b4:b2:cb:7b:ae:79:0b:c5:5e:c4:6c:
81:c5:3e:ae:f5:13:e8:2c:99:61:6e:65:06:66:5b:
d6:a3:a9:9a:2b:23:bc:9d:85:2f:f4:08:93:7f:70:
b6:6a:5f:fb:97:c4:f5:3d:64:b3:3d:52:ab:36:66:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:00:96:54:55:41:94:98:E8:21:30:3D:49:FA:9C:71:34:A4:8D
X509v3 Authority Key Identifier:
keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/ACAAllRVQZSY6CEwPUn6nHE0pI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.32.0/19
Signature Algorithm: sha256WithRSAEncryption
61:40:bf:e6:0d:a0:e6:7d:a4:41:f3:75:92:fe:8b:16:f4:8d:
6e:07:39:4b:53:51:8b:6a:64:a4:49:96:11:47:58:21:35:10:
1b:04:58:b2:b6:12:7f:be:79:0d:54:17:36:bf:fc:90:5b:16:
58:3a:e8:a1:8f:30:41:48:03:e7:b1:f0:35:c7:24:00:94:dd:
21:33:c8:0a:db:9c:ac:0f:f5:62:19:4b:d9:da:ee:c6:74:2a:
c0:58:b5:68:cc:b9:6c:a0:84:08:d9:5c:fa:ac:22:cf:df:d7:
da:b9:c4:74:94:af:70:a0:07:af:d6:dc:09:87:41:d2:67:2d:
fd:07:2d:af:24:b2:e8:ee:c8:46:d7:f5:74:f6:07:9d:d9:06:
c2:fa:66:43:f6:e4:29:c0:72:16:c3:2d:bc:f0:34:fc:b8:ff:
dd:dd:c8:d5:dd:a2:39:87:65:4b:b0:de:4f:d4:a2:93:f6:db:
e2:90:9b:b3:63:26:a6:9e:46:66:d0:3c:bf:b3:71:cb:b8:b3:
60:ab:c0:d6:6b:05:c7:a3:02:05:8b:d5:68:50:f2:71:29:48:
e2:09:43:fd:38:c2:0b:8b:11:51:ac:58:86:75:b1:76:d0:98:
e5:c5:b0:c8:8d:04:1c:ec:06:bd:44:96:b5:60:9f:e8:55:ee:
eb:e4:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:37 2025 by rpki-client