Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/JcWTldbQOIZGPvSNpxUs4o4GK0w.roa
File: JcWTldbQOIZGPvSNpxUs4o4GK0w.roa (raw, json)
Hash identifier: Dx0/U8f+E3+2gBwNiiT/bEtL46Po4YuFRMtF5c7r41s=
Subject key identifier: 25:C5:93:95:D6:D0:38:86:46:3E:F4:8D:A7:15:2C:E2:8E:06:2B:4C
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019781826D5F538B5E9D4F0EB67F3C7E93F2
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/JcWTldbQOIZGPvSNpxUs4o4GK0w.roa
Signing time: Wed 18 Jun 2025 05:28:17 +0000
ROA not before: Wed 18 Jun 2025 05:28:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16125
IP address blocks: 5.199.160.0/20 maxlen: 32
5.199.165.0/24 maxlen: 32
46.166.160.0/20 maxlen: 32
87.232.136.0/21 maxlen: 21
93.115.24.0/21 maxlen: 32
109.109.164.0/22 maxlen: 22
185.8.104.0/22 maxlen: 32
185.150.116.0/22 maxlen: 32
188.214.128.0/21 maxlen: 32
2a02:ae00::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:82:6d:5f:53:8b:5e:9d:4f:0e:b6:7f:3c:7e:93:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jun 18 05:28:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25c59395d6d03886463ef48da7152ce28e062b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:de:0a:5e:3c:c7:1d:b9:95:47:71:ae:ed:
40:54:ff:bd:dc:c5:62:a2:c6:10:6e:3e:dd:a5:1a:
c1:83:a0:3a:0e:fb:db:61:5c:d5:71:bc:12:0d:74:
bb:17:c1:05:cf:59:72:61:95:0b:05:f7:0c:df:52:
65:f4:53:21:49:b7:49:fb:79:d0:65:29:5e:ee:82:
b5:36:a7:19:01:be:97:f9:77:63:71:c7:5e:0a:ea:
16:99:cf:99:3f:a8:53:ed:db:41:38:ba:fd:53:c8:
11:75:e8:07:2f:7b:57:7c:cf:f6:62:fc:64:d5:2f:
34:70:f6:76:7d:4c:85:20:2c:cc:31:fb:17:12:ea:
ac:60:73:51:e9:8b:ee:d8:18:95:fe:46:a7:d5:d6:
94:5f:17:89:3a:d1:e1:a6:cd:bc:55:45:95:43:03:
12:be:6b:72:3c:2c:26:27:bd:c3:67:17:47:41:73:
93:c8:36:8a:5e:d9:53:e9:24:15:a0:fa:78:8f:b4:
f2:76:61:89:20:46:02:12:da:0b:5b:69:c6:98:3f:
e0:4e:29:7d:83:8f:79:aa:d1:16:dd:56:e3:d8:91:
a9:bb:7d:71:ed:6d:f5:79:5a:56:16:da:81:0a:dc:
96:46:c8:11:a9:a3:33:2f:0f:36:98:69:e1:ef:39:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:93:95:D6:D0:38:86:46:3E:F4:8D:A7:15:2C:E2:8E:06:2B:4C
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/JcWTldbQOIZGPvSNpxUs4o4GK0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.160.0/20
46.166.160.0/20
87.232.136.0/21
93.115.24.0/21
109.109.164.0/22
185.8.104.0/22
185.150.116.0/22
188.214.128.0/21
IPv6:
2a02:ae00::/36
Signature Algorithm: sha256WithRSAEncryption
bb:dd:b6:66:d0:c6:ae:68:a6:3d:77:a4:3d:98:0b:5c:22:b8:
6f:d0:e1:71:37:f7:49:a5:c8:89:78:4e:b1:c5:6a:4c:d9:8e:
e9:a2:dc:1d:61:96:2f:7e:22:96:3e:f9:28:bd:63:96:f9:05:
3e:60:b7:1f:44:8a:41:83:0b:87:e9:6c:03:12:87:f9:fb:6a:
ec:01:f7:a7:b2:a2:32:04:2d:f8:c8:fa:5c:65:72:63:90:7c:
13:8d:10:59:42:9b:48:7d:43:0b:72:5b:f1:57:41:df:16:dd:
94:fa:9e:99:fb:08:28:03:7d:45:62:36:b6:1d:4f:6b:3b:b6:
31:84:a6:35:3c:61:13:23:c8:48:93:79:c5:e9:6c:ce:43:f0:
ea:b5:80:8a:4b:6b:27:80:45:ae:84:bc:34:2a:9e:46:c8:46:
fa:85:4c:78:77:ba:7d:4d:a0:3a:c2:bc:ef:14:90:b8:bd:9a:
dd:ee:be:15:3f:4b:a7:ab:b3:c7:fd:ca:de:a3:56:23:78:a5:
00:0f:bd:da:8f:6b:e9:5a:2b:d3:ec:cc:b1:3a:61:ce:f0:22:
dc:91:31:ce:37:f9:dd:e0:07:59:ad:6b:32:24:5d:86:aa:e2:
af:0d:32:4f:22:b1:09:cc:2e:28:fa:a3:df:e7:d2:db:d7:88:
04:72:8b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:49:24 2025 by rpki-client