Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tBQoCysmVfxzdheHcgd9d0nu87o.roa
File: tBQoCysmVfxzdheHcgd9d0nu87o.roa (raw, json)
Hash identifier: 1EpFrn2gQbMF7Ag7HxGhFgJjFIH9fDvcipe4pwrCojM=
Subject key identifier: B4:14:28:0B:2B:26:55:FC:73:76:17:87:72:07:7D:77:49:EE:F3:BA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0198BEC3915E20BBD147BD276E05A273A7DD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tBQoCysmVfxzdheHcgd9d0nu87o.roa
Signing time: Mon 18 Aug 2025 19:59:04 +0000
ROA not before: Mon 18 Aug 2025 19:59:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
89.106.16.0/24 maxlen: 24
89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
89.106.22.0/24 maxlen: 24
89.106.23.0/24 maxlen: 24
89.106.25.0/24 maxlen: 24
89.106.26.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
103.47.59.0/24 maxlen: 24
194.36.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:be:c3:91:5e:20:bb:d1:47:bd:27:6e:05:a2:73:a7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 18 19:59:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b414280b2b2655fc7376178772077d7749eef3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:71:5e:9c:dc:24:b8:70:23:78:e5:10:66:
dd:67:35:77:f7:27:ce:17:f0:c3:93:57:3f:99:39:
93:62:2f:36:fb:9d:85:31:92:2a:0d:c6:ba:44:64:
ee:66:12:ac:76:97:93:44:be:8e:9a:01:e0:ec:ad:
26:3c:76:64:16:53:8f:84:6d:9d:a7:dc:5d:f9:b9:
06:91:23:bc:c0:d3:21:e6:d7:6b:4d:d5:8e:76:bd:
ea:48:93:40:71:a5:60:fb:8f:16:0d:fd:e5:fe:7c:
ae:15:89:f0:3c:2c:dc:38:42:32:58:6c:e7:6e:e1:
c7:d5:16:6a:7b:ea:48:a5:d0:5c:be:34:8f:2a:9c:
93:ef:fe:92:80:49:3d:e6:cb:f7:a5:bb:b1:1b:e7:
e6:6e:bc:e5:73:41:06:7d:c9:68:8a:ee:30:72:91:
37:33:67:83:e3:63:ea:ac:39:47:0a:c4:57:30:64:
c5:65:0b:59:d9:63:3b:02:72:57:64:d5:5c:67:c7:
4a:aa:df:3d:b8:dc:df:af:4e:9b:51:6f:9f:89:c8:
c2:dd:40:0d:e8:54:33:9c:68:df:a9:96:5d:6a:58:
2b:31:2a:25:bd:5a:8b:3b:fb:93:5a:d7:a3:eb:1e:
fb:bf:e9:f5:a1:6f:1b:34:ca:bd:64:0b:0d:b0:f2:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:28:0B:2B:26:55:FC:73:76:17:87:72:07:7D:77:49:EE:F3:BA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tBQoCysmVfxzdheHcgd9d0nu87o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
77.111.96.0/22
77.111.102.0/23
77.111.105.0/24
89.106.16.0/24
89.106.18.0/24
89.106.21.0-89.106.23.255
89.106.25.0-89.106.26.255
94.229.212.0/24
103.47.59.0/24
194.36.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c4:01:18:40:0b:a0:c9:7a:e1:d7:e7:f7:01:d4:2a:2e:be:
10:a4:f1:ae:25:52:be:a3:25:ca:6a:ae:76:ff:57:ac:fb:32:
8d:f8:c3:c7:a3:4f:fa:cd:fd:46:b2:d4:b1:19:fe:f0:a5:5c:
f0:ee:32:c7:44:36:c1:ca:81:c5:2b:6d:7d:cf:fe:b0:7c:a0:
b4:62:fa:db:04:4c:cb:e5:49:bd:1d:30:84:bd:e4:2a:ba:4d:
2a:9b:c5:d5:bf:58:9d:54:f1:2c:17:ab:4c:5f:43:0b:95:d2:
de:78:be:24:3f:e8:d0:3a:30:04:ce:19:0e:20:41:f9:6d:ed:
35:af:2a:73:be:80:eb:85:ed:60:61:cb:c1:c1:6e:fc:a7:55:
e3:62:0e:52:66:8f:32:29:43:8a:55:01:ac:54:bc:2f:db:3a:
52:57:4d:a1:3e:a5:57:fa:7c:7f:38:7e:ce:0b:f6:93:d5:3e:
0b:0d:52:cd:ed:e6:3d:77:ac:85:51:f0:9a:84:c5:b3:0e:ee:
30:bf:e3:11:48:2f:66:dc:3f:fc:5c:aa:b2:81:a6:1e:93:e2:
e3:87:8f:42:41:57:08:d1:13:44:1a:30:b8:da:06:4d:b1:85:
3e:3e:96:0c:08:25:3d:e9:de:d3:f1:37:2e:de:a1:3d:7b:6c:
ee:23:53:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:46:07 2025 by rpki-client