Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/2Ny-ueNvAFjL9IDe1yMO8HfDBJE.roa
File: 2Ny-ueNvAFjL9IDe1yMO8HfDBJE.roa (raw, json)
Hash identifier: SriKAtzLJClJ8RYlJnsDDGPLefd9t0TyrlM6Ndh0w6s=
Subject key identifier: D8:DC:BE:B9:E3:6F:00:58:CB:F4:80:DE:D7:23:0E:F0:77:C3:04:91
Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial: 019889E3CD0B9F6C990EBB6308E55DF3E31A
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/2Ny-ueNvAFjL9IDe1yMO8HfDBJE.roa
Signing time: Fri 08 Aug 2025 13:34:24 +0000
ROA not before: Fri 08 Aug 2025 13:34:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 212.122.160.0/22 maxlen: 24
212.122.164.0/24 maxlen: 24
212.122.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:e3:cd:0b:9f:6c:99:0e:bb:63:08:e5:5d:f3:e3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
Validity
Not Before: Aug 8 13:34:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8dcbeb9e36f0058cbf480ded7230ef077c30491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:2f:de:3d:e4:eb:f6:a6:e2:bb:a4:bd:52:
7c:03:6d:23:b6:1c:94:f1:af:14:a4:95:56:cc:e2:
41:d4:04:05:67:e8:bf:63:77:c3:f3:9b:59:90:f3:
b4:96:c7:4c:ba:56:55:a7:e4:0a:df:33:c7:5d:92:
b3:66:5a:43:05:0e:6d:a9:0e:41:34:80:30:b8:e0:
5a:0c:4f:34:0d:7f:b0:2d:d9:31:12:8a:2d:e0:00:
b2:82:da:52:81:ea:f9:dd:07:59:84:11:0d:a0:ec:
e0:70:37:ef:b6:a7:e2:55:b5:03:c6:15:f1:b7:e2:
2c:67:4b:1b:8f:df:e6:a9:8e:f3:19:91:9c:50:e9:
fe:21:cd:7e:fe:d6:8a:2b:ef:e8:55:c8:95:c3:f0:
6a:04:31:75:f7:e1:83:ce:df:a0:df:47:39:53:19:
b0:c3:19:a7:48:2c:b3:b7:cb:0b:94:95:47:3b:28:
4a:75:1f:58:3e:bf:4b:da:73:37:6b:23:58:8b:63:
4e:0a:b1:84:10:25:aa:88:eb:1d:f8:fb:c8:fe:3d:
24:73:e5:f8:e0:b8:38:44:c9:25:69:d6:cb:34:41:
98:41:f6:78:7a:2d:5f:53:28:05:2e:26:fa:d8:8c:
61:49:38:3f:e6:a0:0f:c3:01:aa:79:4a:6b:fd:41:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DC:BE:B9:E3:6F:00:58:CB:F4:80:DE:D7:23:0E:F0:77:C3:04:91
X509v3 Authority Key Identifier:
keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/2Ny-ueNvAFjL9IDe1yMO8HfDBJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.122.160.0-212.122.165.255
Signature Algorithm: sha256WithRSAEncryption
35:c1:fe:a1:c7:f9:59:07:d8:35:c7:c6:7d:2c:7a:44:60:75:
0b:ab:7b:cd:8e:2a:1d:66:ae:3e:c3:40:ea:79:3c:e6:9e:a9:
3c:70:1a:90:04:09:66:c2:c0:56:0f:c8:1e:38:19:e8:58:a9:
f2:93:b3:c5:f6:68:43:19:40:b0:20:29:63:c4:ee:87:54:a5:
f9:59:2a:1e:76:97:41:58:cf:90:d7:16:13:74:9f:f7:2a:60:
88:d4:06:97:d2:1f:56:9b:52:84:e6:0c:2b:37:3e:9d:0f:8c:
20:a7:3d:2f:78:f1:d8:2c:53:87:29:53:bc:fb:d9:c6:de:8b:
0c:2f:50:b0:58:91:b9:20:95:30:d6:2b:07:62:90:7f:89:ef:
ac:cb:0d:d7:82:fb:3c:7f:15:08:19:6b:de:e6:b0:3e:c4:2b:
05:d2:81:9f:cd:50:6c:37:df:7a:57:05:62:6b:28:20:c4:8f:
8a:7d:87:ee:cb:5a:33:c9:87:ef:cc:0b:a1:ef:74:3c:99:d9:
66:ae:37:5d:59:53:49:19:f9:19:21:91:ec:fa:f8:4e:1c:2e:
00:e6:01:4c:11:41:9c:b9:ff:39:26:b3:31:a1:bc:ed:0f:b8:
0b:d0:a0:87:84:e2:05:65:77:4e:d4:6a:9c:f6:0a:6f:16:99:
50:76:f1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:55 2025 by rpki-client