Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3LTJ1OEuBK9Xn5ByHxlcBHfBk3U.roa
File: 3LTJ1OEuBK9Xn5ByHxlcBHfBk3U.roa (raw, json)
Hash identifier: iYg2DRs0ceFDOTYRPpD0wQ0Zv6pI79UGLOVVlasBodM=
Subject key identifier: DC:B4:C9:D4:E1:2E:04:AF:57:9F:90:72:1F:19:5C:04:77:C1:93:75
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019762C83731838A0A57ACA06EE25334A7F5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3LTJ1OEuBK9Xn5ByHxlcBHfBk3U.roa
Signing time: Thu 12 Jun 2025 06:16:17 +0000
ROA not before: Thu 12 Jun 2025 06:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 85.121.18.0/23 maxlen: 23
85.121.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:c8:37:31:83:8a:0a:57:ac:a0:6e:e2:53:34:a7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 12 06:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcb4c9d4e12e04af579f90721f195c0477c19375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:0b:00:89:b8:54:29:0a:ec:e6:a4:c4:b5:
3b:4f:af:f6:7e:38:8e:52:d1:85:e3:c1:fc:95:6b:
9a:42:17:3a:f1:32:65:6e:26:15:89:f4:c8:f7:63:
bf:77:66:86:48:02:0c:6c:e9:8a:72:8a:80:98:ab:
aa:e6:d7:35:f5:d0:a1:ed:b0:08:af:6f:59:6c:76:
21:96:6c:6b:89:6b:18:ac:f9:58:72:95:d4:53:e0:
a1:4a:07:9e:de:a8:0a:fa:b8:39:29:25:3a:d2:58:
4d:52:7b:d0:54:2c:02:f1:18:46:15:bd:cf:d6:b7:
90:ea:d6:20:3d:35:48:ea:f4:c7:1e:03:29:55:ee:
70:85:e7:e9:76:23:7d:f6:96:be:4b:ec:70:84:10:
bd:e8:4a:9f:88:00:7f:4c:ab:02:0e:09:65:77:09:
cd:ce:30:70:9d:5d:05:c1:8f:0e:2a:12:ff:76:e8:
bd:8c:2c:1f:a7:c7:a8:2a:f2:16:9e:a1:09:08:ab:
10:6f:c3:15:18:bc:f5:fc:3b:5c:78:20:c1:cb:06:
9b:12:05:bc:59:33:9f:29:30:77:47:e9:be:8f:17:
85:3c:67:32:c8:6b:b5:6e:3f:2d:33:67:88:09:1e:
47:70:25:34:c4:b0:fe:7d:8f:09:b4:62:40:4f:da:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B4:C9:D4:E1:2E:04:AF:57:9F:90:72:1F:19:5C:04:77:C1:93:75
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3LTJ1OEuBK9Xn5ByHxlcBHfBk3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.18.0/23
85.121.36.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:aa:b7:fe:f9:ce:22:30:ba:3b:85:19:7d:84:49:e0:b5:a0:
48:75:98:04:9e:66:b5:ee:ca:ad:a0:82:ed:93:d8:e7:91:3e:
19:53:e2:58:12:3a:86:47:12:43:bd:d8:b0:38:bf:d3:04:5a:
4a:cf:60:f1:be:fa:ab:b5:07:fa:58:44:7d:57:9f:65:85:92:
f1:7c:57:5a:e0:41:29:64:56:e6:46:c8:d5:cf:cd:42:ac:9d:
8c:df:26:96:e7:dd:dc:87:78:7e:f1:ed:a8:77:4e:b6:00:22:
93:e3:41:de:8d:55:cb:67:71:34:c9:68:b2:9f:d2:f1:e7:a8:
8e:12:8c:07:c5:a0:54:83:53:0d:0c:c7:61:b9:fe:e9:6f:f9:
60:fb:df:78:72:ff:a4:5e:a4:c2:2f:fb:e7:54:da:85:6b:53:
83:a5:da:20:99:e9:d0:11:c3:6f:bc:a8:46:b0:8c:69:9b:8a:
ea:2b:a2:25:f5:47:9d:e2:e0:43:18:be:2b:0e:95:9d:3d:05:
13:9b:e3:bf:3d:85:13:8d:a8:f7:b0:fe:8e:f2:fb:dc:f6:6b:
f2:d9:44:7a:d8:60:ff:23:0a:81:b6:0a:2b:55:f8:24:87:66:
25:fb:41:c3:ca:c7:b4:e4:56:22:90:48:3b:69:94:fe:e7:df:
c2:a7:7e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:41:51 2025 by rpki-client