Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/doZRzbO0R6qwkn4Q3gvMJzHE_8g.roa
File: doZRzbO0R6qwkn4Q3gvMJzHE_8g.roa (raw, json)
Hash identifier: zsgdwgoLQ+Jj2JfT45LvaOyQdrfCaBg6+krJB8Pi6no=
Subject key identifier: 76:86:51:CD:B3:B4:47:AA:B0:92:7E:10:DE:0B:CC:27:31:C4:FF:C8
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019756612B0276CD522FDA1684C0356E615E
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/doZRzbO0R6qwkn4Q3gvMJzHE_8g.roa
Signing time: Mon 09 Jun 2025 20:28:18 +0000
ROA not before: Mon 09 Jun 2025 20:28:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215245
IP address blocks: 31.22.76.0/24 maxlen: 24
31.22.77.0/24 maxlen: 24
46.247.108.0/24 maxlen: 24
46.247.109.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
86.54.5.0/24 maxlen: 24
194.46.60.0/24 maxlen: 24
2a14:6780:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:61:2b:02:76:cd:52:2f:da:16:84:c0:35:6e:61:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jun 9 20:28:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=768651cdb3b447aab0927e10de0bcc2731c4ffc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:a8:be:12:38:90:95:9a:c9:a9:3a:64:0f:
b5:d5:bc:4c:06:e6:45:5f:34:cb:0f:90:df:f2:85:
de:5b:9c:7d:0d:61:a1:d2:11:5b:43:42:a2:c7:7a:
5d:7d:b0:77:37:bf:9d:fd:94:99:c6:78:5a:a5:d6:
68:88:ad:c5:7e:50:c2:99:9e:92:12:a5:03:b6:76:
63:b2:6b:4c:28:13:03:db:83:ce:f0:fc:7e:31:ae:
c8:9e:0d:80:7f:db:52:c6:e0:d4:75:54:b7:d7:5b:
79:8e:46:4c:de:f9:f3:39:fc:99:07:ad:cb:7c:d7:
b5:04:0d:b2:69:ca:22:32:c8:68:87:85:f1:53:d8:
93:5a:5b:a1:db:03:ab:11:e3:ce:28:b7:82:dc:39:
c7:76:e6:0c:8c:8e:38:5b:bf:df:05:b1:01:8e:27:
88:42:41:82:d6:c8:bb:bb:80:5c:7b:55:26:32:51:
a0:7d:6c:c9:2a:3f:4b:39:6f:99:e1:98:33:e1:3a:
e2:cd:ce:8c:bf:90:cd:dd:38:b0:1b:f5:e5:27:e3:
1b:00:74:b9:24:dc:4c:d7:80:70:77:4d:b5:39:fc:
4a:07:eb:de:78:e4:c7:f0:d9:8f:73:fd:66:0f:3e:
06:aa:c0:0b:da:4b:5c:2b:99:78:27:ae:02:56:f2:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:86:51:CD:B3:B4:47:AA:B0:92:7E:10:DE:0B:CC:27:31:C4:FF:C8
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/doZRzbO0R6qwkn4Q3gvMJzHE_8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.76.0/23
46.247.108.0/23
62.169.152.0/24
86.54.5.0/24
194.46.60.0/24
IPv6:
2a14:6780:4::/48
Signature Algorithm: sha256WithRSAEncryption
79:5b:15:85:5a:06:72:f8:f1:dc:87:8f:b6:02:65:c2:ca:fc:
3b:5b:65:57:f0:0a:a7:7d:e0:4f:88:be:66:a9:3d:19:5c:da:
6f:81:02:fc:36:91:2c:e6:86:8f:35:77:45:52:12:55:31:cf:
da:63:27:fa:ae:ad:00:ce:47:ca:25:11:75:ca:a5:2b:29:8e:
f3:b3:4a:58:c4:7b:d9:58:dc:c6:bb:17:be:8a:32:14:67:38:
56:b3:ab:45:98:71:97:01:b5:04:1e:d0:03:da:44:3b:39:0e:
fa:81:ce:28:7d:76:fd:de:2d:ba:55:39:6f:62:fd:f8:76:6c:
e3:b0:2f:fe:2e:50:27:30:14:d4:69:f9:fe:ef:e1:7e:aa:fb:
25:d2:33:b9:cb:c6:3d:9e:a9:3d:4f:a9:af:c1:a0:2a:16:c4:
2d:3d:bc:f9:79:c5:cd:42:8e:58:11:f7:a9:a6:eb:31:07:55:
f2:64:42:2d:0b:5d:87:aa:17:54:96:68:24:ab:9c:0d:51:77:
e4:94:20:f2:84:f9:f8:96:54:69:0f:ee:d8:3f:9c:af:cd:f4:
61:50:62:27:79:05:31:ae:f5:01:77:88:15:3e:03:52:a6:fc:
61:5b:e6:19:90:cd:02:ba:74:51:72:cc:b1:db:33:a4:82:30:
e6:a4:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:04 2025 by rpki-client