Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/dysGc3dUC19B4xYH14h547-J3bU.roa
File: dysGc3dUC19B4xYH14h547-J3bU.roa (raw, json)
Hash identifier: xZJSB931nK/0DYsJmXQtw/2T7yJN+gcQPJ/Rr8Mu1dg=
Subject key identifier: 77:2B:06:73:77:54:0B:5F:41:E3:16:07:D7:88:79:E3:BF:89:DD:B5
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 01999A0770489FFDDB518042B7F920B87C1F
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/dysGc3dUC19B4xYH14h547-J3bU.roa
Signing time: Tue 30 Sep 2025 09:50:02 +0000
ROA not before: Tue 30 Sep 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51402
IP address blocks: 178.239.64.0/20 maxlen: 20
185.128.120.0/22 maxlen: 22
185.196.224.0/22 maxlen: 22
185.221.136.0/22 maxlen: 22
2a02:2760::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:07:70:48:9f:fd:db:51:80:42:b7:f9:20:b8:7c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Sep 30 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=772b067377540b5f41e31607d78879e3bf89ddb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:33:5d:ec:d1:c2:9c:41:b7:5f:04:78:85:
f5:f8:a6:80:c0:f2:64:aa:e8:07:b6:2a:1e:d2:fd:
e4:6a:1e:a2:a3:9e:d2:cd:75:7a:18:b5:76:dc:ea:
f5:28:81:8e:a4:9f:ca:cf:0a:6c:8a:98:6c:1f:43:
fe:3a:92:c0:63:f2:49:12:54:17:a5:da:5a:b7:66:
cf:fc:9e:89:1d:01:85:74:d9:b8:12:2e:09:e3:8f:
eb:71:5a:35:3a:74:ae:a4:5e:86:50:06:7b:e9:b1:
43:5e:b4:05:3a:91:78:16:e3:d3:90:52:2d:b5:fc:
9b:0f:bd:9e:82:f1:26:5b:7a:1b:ec:9c:c5:a6:c9:
dc:8f:0a:aa:db:dd:a1:e0:9a:93:8a:e9:6e:d9:03:
70:8c:ca:67:d7:26:7d:87:eb:19:7d:0b:c7:be:08:
d0:62:83:3b:7e:2b:a4:79:31:77:e6:22:f7:33:c2:
fe:1d:09:79:5a:27:ac:59:01:dd:29:ac:4c:8a:3b:
5e:0d:47:dc:70:0f:3c:a3:7f:28:22:12:8e:70:09:
d5:ff:f5:47:20:75:65:ea:9d:7f:d2:6e:96:64:f8:
96:3f:47:4c:e4:11:96:d7:81:a1:f3:24:10:4c:85:
4f:33:d2:27:29:b8:39:47:76:08:5e:fd:4c:98:57:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2B:06:73:77:54:0B:5F:41:E3:16:07:D7:88:79:E3:BF:89:DD:B5
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/dysGc3dUC19B4xYH14h547-J3bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.64.0/20
185.128.120.0/22
185.196.224.0/22
185.221.136.0/22
IPv6:
2a02:2760::/32
Signature Algorithm: sha256WithRSAEncryption
86:7e:41:2c:01:ba:de:39:a1:9b:37:1d:bb:a6:17:89:15:53:
d7:1c:a6:8a:0c:93:2f:38:36:a3:48:53:e0:89:43:28:4c:e9:
b5:b6:b4:15:08:b7:5f:4e:f2:2e:c9:a0:49:b3:65:c4:9a:14:
c8:19:e6:c2:e5:0b:e1:1a:d5:4d:a9:d2:e5:9b:a3:b2:80:2c:
79:ec:52:4d:8a:dd:a3:0c:fa:c6:05:c4:3b:6e:b5:45:2f:0d:
05:cb:ac:4b:14:80:39:b0:1d:86:ce:c1:77:18:05:62:fa:66:
ff:22:46:3f:3f:32:81:20:44:4c:65:42:5a:96:67:34:00:68:
f8:98:1e:83:71:39:39:44:e6:f7:b0:23:cd:e1:39:a5:e9:0a:
a3:21:85:a8:ae:86:4b:c1:2e:1b:3e:de:79:91:6b:86:a5:d0:
08:7d:bc:36:68:89:be:b5:68:77:ac:49:36:28:64:ce:4f:ea:
62:2c:72:28:5b:bc:f3:75:5d:82:52:21:e8:7f:45:c0:45:0d:
9a:49:3d:ee:61:53:98:74:11:b3:a3:48:82:ee:05:d3:f7:f7:
2d:3c:42:84:80:3c:e7:f7:13:48:65:b9:2c:b5:f6:b5:6e:2e:
8b:c0:47:38:db:cc:39:12:56:2c:7e:35:72:a6:d0:b8:5a:e7:
bb:c8:c9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:33 2025 by rpki-client