Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/bObL7vPF35vh9LuEyJYMk5yU3-U.roa
File: bObL7vPF35vh9LuEyJYMk5yU3-U.roa (raw, json)
Hash identifier: eG1lFL25ltcNTKgnhPFmeY0axMsTOI37jTMaagRA/AM=
Subject key identifier: 6C:E6:CB:EE:F3:C5:DF:9B:E1:F4:BB:84:C8:96:0C:93:9C:94:DF:E5
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 0197395ABEF483709F9EB90F4A9EE3395BE0
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/bObL7vPF35vh9LuEyJYMk5yU3-U.roa
Signing time: Wed 04 Jun 2025 05:12:17 +0000
ROA not before: Wed 04 Jun 2025 05:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21221
IP address blocks: 2.56.226.0/23 maxlen: 24
46.182.176.0/21 maxlen: 24
178.255.192.0/21 maxlen: 24
185.70.208.0/22 maxlen: 24
185.214.148.0/22 maxlen: 24
217.18.64.0/20 maxlen: 24
2a00:19c0::/32 maxlen: 48
2a09:d240::/32 maxlen: 48
2a0b:9cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:5a:be:f4:83:70:9f:9e:b9:0f:4a:9e:e3:39:5b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Jun 4 05:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ce6cbeef3c5df9be1f4bb84c8960c939c94dfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9a:ae:60:53:bc:11:4d:6c:e3:b9:30:43:7e:
4b:19:03:ba:df:a2:7e:d9:bf:01:cc:54:d0:96:9a:
4a:03:c5:4e:37:e7:b6:3e:0d:ca:a6:6c:ea:18:3b:
c9:c5:97:2d:f1:72:ef:2d:1e:9b:dd:e0:16:1d:87:
3d:f6:be:9e:09:76:23:8b:57:2e:69:24:11:fa:a4:
ae:d9:44:d1:26:17:74:35:95:79:31:f6:5b:67:96:
8e:51:13:00:4e:57:38:de:ad:7e:35:b4:3f:6d:6b:
44:ef:a0:30:ab:74:c0:d5:6f:45:58:f1:65:26:de:
d3:f0:52:fd:a3:31:8f:92:dd:72:5f:6b:cd:b7:52:
5e:17:94:f4:34:3d:44:77:30:6c:d6:73:6a:61:b1:
74:1f:a7:c8:cd:5b:17:70:61:e9:d2:5e:77:85:5c:
d6:aa:32:cb:93:b3:91:9f:48:ac:1f:ed:2a:b0:02:
e6:8a:18:d2:ee:89:ae:2a:c5:c1:1b:c0:40:e7:36:
d7:1b:83:c3:60:a2:54:69:e6:34:31:57:89:c7:72:
ae:f0:5a:ae:52:7b:b3:44:a9:be:4b:3d:50:72:25:
3b:8a:8a:7e:2c:bd:aa:72:a0:60:94:83:b6:b2:54:
35:37:cc:98:2e:9c:6c:ec:21:4a:57:d7:c6:8c:3b:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E6:CB:EE:F3:C5:DF:9B:E1:F4:BB:84:C8:96:0C:93:9C:94:DF:E5
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/bObL7vPF35vh9LuEyJYMk5yU3-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.226.0/23
46.182.176.0/21
178.255.192.0/21
185.70.208.0/22
185.214.148.0/22
217.18.64.0/20
IPv6:
2a00:19c0::/32
2a09:d240::/32
2a0b:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
74:91:3b:0e:6d:70:92:ed:d8:84:9d:5a:70:49:b4:e6:50:4d:
9a:01:d1:4f:3f:cd:18:fa:46:3b:a4:55:48:bc:9d:63:2a:97:
81:18:ec:ac:ae:44:4b:c9:ca:66:bb:de:50:07:20:51:9e:04:
01:8a:5f:ff:65:b6:66:89:49:8c:22:f3:ff:7e:2e:7b:21:3c:
91:14:30:db:bb:e1:54:ce:59:d8:cd:32:b3:a4:89:81:0b:ce:
38:f1:86:55:5a:1a:b9:1f:5c:3c:a3:b1:64:da:ed:e3:9a:d7:
95:4f:f5:a9:7c:ac:4b:d0:96:00:3d:03:0a:a2:63:66:3c:76:
35:0f:c1:35:48:02:d4:08:3f:17:fd:7f:a0:97:71:b0:2d:2c:
21:b3:a4:c4:a1:a0:e6:7a:ec:f9:93:bf:6c:27:04:a7:7b:b9:
28:ba:98:0e:70:af:6e:2a:f3:ad:6b:58:28:0a:34:a3:a2:f7:
47:92:8a:1f:e2:4f:8e:aa:db:04:02:c9:51:81:95:70:3a:a3:
6c:66:cd:11:b9:93:43:da:46:57:af:1c:3a:4e:a7:89:d8:f6:
11:43:e7:12:3e:10:b8:4c:1e:c0:79:65:1f:46:04:bf:59:e5:
82:0c:14:8c:b1:e9:29:c2:64:47:74:05:e6:fa:07:7f:99:ec:
8e:ff:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:00:33 2025 by rpki-client