Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XduH6RpJ3FqsXogdbQo0Gq75RMM.roa
File: XduH6RpJ3FqsXogdbQo0Gq75RMM.roa (raw, json)
Hash identifier: mmtfmJ+u6mQnJwg6jxJPM7PkD3TJpoWFUaSVe/IBfy4=
Subject key identifier: 5D:DB:87:E9:1A:49:DC:5A:AC:5E:88:1D:6D:0A:34:1A:AE:F9:44:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197EA91BED5CDEE44D7BF36296B6B91C0CC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XduH6RpJ3FqsXogdbQo0Gq75RMM.roa
Signing time: Tue 08 Jul 2025 15:05:09 +0000
ROA not before: Tue 08 Jul 2025 15:05:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205007
IP address blocks: 87.121.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:91:be:d5:cd:ee:44:d7:bf:36:29:6b:6b:91:c0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 15:05:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ddb87e91a49dc5aac5e881d6d0a341aaef944c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:b7:96:52:6c:a3:88:9f:43:12:a2:85:57:
7b:b3:7f:4b:fe:d1:39:63:f8:cb:d9:dc:49:0c:2a:
47:0a:55:7f:b5:b1:15:78:1e:e9:3b:07:f2:8d:d2:
ee:e9:0b:d1:23:92:2d:fe:0e:30:14:b6:36:dc:0c:
d0:5a:c3:4c:88:10:0a:f5:01:66:36:65:4e:3c:cd:
40:8e:1e:84:0a:d7:03:5a:17:c7:56:f4:89:47:cc:
6b:b5:0a:9e:30:55:1d:ec:09:c0:21:2c:51:c9:86:
e6:9c:1e:5e:46:2b:66:7a:65:b5:b9:6d:be:88:b0:
a5:ae:4c:c7:15:c6:dd:01:57:04:35:5b:04:d1:e9:
06:f3:39:f8:20:7d:0c:aa:f3:ef:1a:92:8a:40:58:
13:26:fe:50:b7:3e:cc:a2:d4:a0:59:d9:e4:50:46:
df:23:7a:8b:eb:d4:8a:31:34:b3:17:24:81:df:df:
4c:0d:2b:51:9e:ca:80:84:e1:f5:72:d2:06:ab:52:
75:00:a1:b7:20:7c:44:79:b9:96:7e:eb:5d:a2:d5:
63:63:1c:bc:ef:51:4a:70:4e:8b:7b:73:d5:00:55:
8c:ac:e4:81:0a:69:3c:29:e3:b0:ab:a4:8d:ff:b0:
55:7e:cf:3b:a7:6c:1f:7a:8d:37:d2:91:be:f3:f7:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DB:87:E9:1A:49:DC:5A:AC:5E:88:1D:6D:0A:34:1A:AE:F9:44:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XduH6RpJ3FqsXogdbQo0Gq75RMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.38.0/24
Signature Algorithm: sha256WithRSAEncryption
06:25:09:f7:de:4d:cc:a3:bc:e7:6c:2b:78:3d:cc:b3:83:a1:
e6:0e:1e:84:9c:0b:26:3d:83:80:c0:90:78:e5:b7:6c:ce:73:
0f:c2:7d:54:8c:cf:7b:30:98:a2:53:b6:20:d0:e7:91:4e:d9:
fc:52:64:77:85:c1:91:f5:88:d8:3a:2f:05:d9:69:ae:74:6a:
de:95:8f:26:aa:42:d1:fe:e5:10:af:39:01:a0:a8:87:71:29:
cf:9b:ba:d9:01:df:15:c6:20:82:ea:c5:37:b7:d8:2b:2d:90:
7f:85:ae:e1:dd:19:ee:1b:47:0b:5b:81:83:65:95:4b:c0:b3:
ab:13:2b:21:b4:e5:39:5b:22:f0:3c:e7:7b:24:be:41:cb:9d:
b0:e0:1c:49:8d:ad:0a:3e:bc:7e:81:33:c3:72:aa:a5:8b:e8:
f8:f1:69:85:79:a9:cb:a9:63:8c:35:a7:a4:95:d3:ee:49:6b:
5d:3f:da:8e:82:9a:17:96:10:6b:d1:db:ac:e8:e0:de:0f:6f:
eb:e0:2e:f7:25:21:59:1c:b2:6c:e9:24:1a:51:39:b0:67:b0:
38:1d:9d:b6:45:ac:e9:c3:d3:d4:ab:20:86:6a:9d:45:3a:65:
6a:12:cc:1a:ec:0b:b0:f2:50:5e:5b:41:a8:61:25:51:a0:1b:
53:84:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:53:04 2025 by rpki-client