Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/B9T2tEPkzR3I7bfjqMLpjqVmqX0.roa
File: B9T2tEPkzR3I7bfjqMLpjqVmqX0.roa (raw, json)
Hash identifier: jvG6Kma4d2VGMYtzkdxrMtFkS2r5Ue1ZSeSqhiErA3k=
Subject key identifier: 07:D4:F6:B4:43:E4:CD:1D:C8:ED:B7:E3:A8:C2:E9:8E:A5:66:A9:7D
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 01987DCF3834F6CFAC62A2A034BFD8B21572
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/B9T2tEPkzR3I7bfjqMLpjqVmqX0.roa
Signing time: Wed 06 Aug 2025 05:16:29 +0000
ROA not before: Wed 06 Aug 2025 05:16:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39216
IP address blocks: 212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
212.126.99.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.103.0/24 maxlen: 24
212.126.104.0/21 maxlen: 21
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/23 maxlen: 23
212.126.108.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:1d::/48 maxlen: 48
2a04:2dc0:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:cf:38:34:f6:cf:ac:62:a2:a0:34:bf:d8:b2:15:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Aug 6 05:16:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07d4f6b443e4cd1dc8edb7e3a8c2e98ea566a97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:bd:81:c3:5e:70:bd:ed:51:8c:40:0f:07:
7f:d4:41:75:a3:5d:f1:a3:4a:6e:96:66:e4:6e:b5:
02:d2:9e:4a:a8:10:00:cd:01:14:5f:7d:56:fd:ff:
7f:97:d0:df:15:e1:7d:4e:81:13:64:fd:99:61:bd:
16:d1:f0:48:4d:95:bf:d7:7d:b1:0c:26:9d:cc:ab:
fe:af:f7:73:72:29:f9:08:32:1e:ca:07:e3:2e:34:
b7:17:d5:52:7d:24:51:75:45:6a:23:98:48:c8:d1:
07:58:8f:b7:8f:31:89:f0:d8:b4:fa:7d:a4:9a:d3:
ca:47:0d:40:8c:7f:1f:ad:65:5f:11:9c:dc:16:da:
45:4b:d9:15:c2:be:65:62:a1:1c:06:5b:42:92:1e:
a0:8f:7c:6e:02:c9:d0:0a:ec:52:c0:9c:fa:9d:9c:
6b:e8:e6:1a:f2:56:c8:ca:e1:be:7e:0a:39:81:e4:
95:0c:ef:11:d4:f5:d9:01:79:05:62:39:e5:9d:c4:
e0:c3:22:0e:b8:c7:89:9b:67:0f:4d:d4:c7:1e:a7:
2d:65:14:48:f7:41:25:68:6f:02:15:a8:44:92:96:
51:36:55:76:36:56:bb:f6:c7:20:e5:52:d7:df:a4:
a5:44:1f:b7:25:fe:8c:f5:d8:e4:b1:94:22:cb:4d:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D4:F6:B4:43:E4:CD:1D:C8:ED:B7:E3:A8:C2:E9:8E:A5:66:A9:7D
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/B9T2tEPkzR3I7bfjqMLpjqVmqX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0/20
212.126.115.0/24
212.126.117.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::-2a04:2dc0:19:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:1d::-2a04:2dc0:1e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8f:88:d9:c1:cd:5e:c6:8f:01:c8:09:0c:d5:29:81:79:af:9a:
cc:08:af:70:1a:43:07:85:88:14:e5:d3:ab:eb:34:83:f2:57:
57:68:a6:8b:15:0d:e1:ed:2f:1e:53:2d:78:10:86:c2:8c:3b:
e5:79:0b:71:68:0d:df:f3:b3:a5:a1:44:77:1b:8d:eb:d3:5c:
68:b0:49:4a:ad:cb:88:f9:80:65:00:d6:95:8a:69:b5:2e:a1:
cc:54:7b:70:16:95:12:7f:ce:2a:88:2b:a3:dd:02:0f:4e:f7:
69:e6:55:98:72:b0:eb:07:ec:3c:e9:a3:8c:c4:62:b3:27:9e:
c2:0f:2a:46:13:79:c1:d8:74:8e:28:a7:7c:da:06:34:c8:c0:
df:7b:21:f2:22:e6:2f:f9:32:c1:33:ce:a9:50:ae:2d:d1:bc:
9d:33:93:4f:da:7b:7a:c6:22:36:94:d7:f2:71:a0:83:91:2f:
d8:e7:1d:d4:27:d5:07:8e:f6:d0:bc:b9:d5:9a:40:bb:8d:93:
18:db:57:98:f8:6f:cd:dc:01:81:c8:8e:76:66:3e:b6:23:4c:
b8:7c:94:5f:a0:f8:99:cc:10:51:e4:47:54:21:31:8f:9b:db:
fb:5d:5a:97:3d:18:4a:1c:57:8a:6b:7e:2c:71:78:e7:8d:e6:
3f:f6:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:01 2025 by rpki-client