Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/cWAdhU3hX0hdaD4S4i2jxeLEsvI.roa
File: cWAdhU3hX0hdaD4S4i2jxeLEsvI.roa (raw, json)
Hash identifier: CbZCrLrBNvDl6GA+4AMsjbqfMw/tMSNe3yxf2Lnv4dE=
Subject key identifier: 71:60:1D:85:4D:E1:5F:48:5D:68:3E:12:E2:2D:A3:C5:E2:C4:B2:F2
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 0198755657283B5AF21123A5761C3E48CBDF
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/cWAdhU3hX0hdaD4S4i2jxeLEsvI.roa
Signing time: Mon 04 Aug 2025 13:47:29 +0000
ROA not before: Mon 04 Aug 2025 13:47:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 109.122.1.0/24 maxlen: 24
109.122.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:56:57:28:3b:5a:f2:11:23:a5:76:1c:3e:48:cb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 4 13:47:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71601d854de15f485d683e12e22da3c5e2c4b2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:c1:3c:ac:f5:8e:d5:b0:b5:be:1a:52:8c:
34:b1:43:99:27:57:e8:b1:61:1b:6e:26:a6:54:b0:
84:bd:8a:c5:a6:01:15:da:5c:0f:b5:45:b9:b4:f5:
12:b3:df:73:e1:06:68:e5:da:78:51:1c:2a:3c:7f:
5f:61:bd:4f:5a:c3:7e:6e:ac:a2:d0:f4:6a:dd:ca:
c7:ed:1c:a8:43:55:f9:77:23:14:90:80:fb:b0:42:
b2:fc:8f:19:28:c9:bc:f5:6d:b5:89:34:1c:38:56:
f1:84:7f:9c:ed:c8:19:e1:41:2b:52:84:c8:0e:ce:
c7:65:ec:04:72:fe:1c:db:26:8d:17:5f:98:71:3a:
57:22:5a:b6:49:b5:84:ce:30:ee:5d:70:2d:6c:1b:
01:d7:09:5b:f4:6e:35:b3:73:9f:b7:0f:36:79:c2:
40:a3:8e:1e:0d:78:82:95:57:8b:53:d4:e1:fe:2d:
4a:a3:f0:c3:48:5b:a5:52:fd:1d:4c:28:ae:0a:42:
f2:15:96:93:76:f1:5a:d1:0f:45:36:7b:8c:b9:8c:
25:1c:b3:21:4c:80:fb:a6:95:df:f3:72:e0:11:5d:
09:b1:92:05:5c:3e:6b:57:a6:9e:21:bf:37:9d:4e:
38:c6:44:ee:98:f7:57:36:a9:c1:8b:3c:8c:34:5c:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:1D:85:4D:E1:5F:48:5D:68:3E:12:E2:2D:A3:C5:E2:C4:B2:F2
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/cWAdhU3hX0hdaD4S4i2jxeLEsvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.1.0/24
109.122.7.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:32:e0:a3:fe:ac:5c:a5:79:ad:c1:f8:7c:ea:58:01:7e:f9:
23:e7:07:c9:ac:e7:ab:d9:ac:28:7b:53:23:e1:a8:4e:3d:e3:
fb:c9:6a:63:d1:97:ee:41:80:39:7e:a3:ae:14:a6:ad:44:f6:
c7:b5:7e:5a:d0:74:44:5b:26:34:1a:40:f8:82:f8:66:e9:08:
f4:77:63:c6:a7:2f:2e:98:5a:3c:52:73:27:50:04:d5:2e:77:
b7:5e:53:ef:cc:5e:9f:76:28:6f:ef:99:34:b6:82:67:7e:71:
40:fe:3a:9f:f4:f4:1b:47:f7:75:8b:ea:57:0b:54:e1:4f:bf:
9d:e3:29:5b:00:1c:b8:be:5f:fd:03:74:fc:b1:e1:49:8f:90:
22:68:1c:b7:13:ae:fd:90:32:f8:6f:ce:8e:c1:c5:93:4f:83:
df:5c:48:87:88:68:81:7b:97:5d:de:ff:00:5c:66:95:21:65:
63:7c:ae:2b:d5:d9:b3:28:ef:31:0d:a9:4a:69:5b:90:f3:63:
5d:30:51:03:23:5c:2c:1d:93:e3:81:5f:c5:1e:e6:fa:42:05:
ab:d0:ba:e2:8b:2b:1f:9b:f9:f3:3c:72:8f:26:6e:19:98:a7:
34:8b:3b:7e:f7:5a:fb:ae:db:a9:f7:07:95:b6:ef:a1:a4:92:
e8:71:12:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:48:10 2025 by rpki-client