Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/R1GLOmkDsdOQU3JmSI6jpWMtr0k.roa
File: R1GLOmkDsdOQU3JmSI6jpWMtr0k.roa (raw, json)
Hash identifier: TobK47r5xeGKINzekYR4rqZ5DBGKz/0D1yzbu2xP0c8=
Subject key identifier: 47:51:8B:3A:69:03:B1:D3:90:53:72:66:48:8E:A3:A5:63:2D:AF:49
Certificate issuer: /CN=3781babac6925271b179817515e06e6a10acf6b4
Certificate serial: 0198510B32AAAD66C652E498A74614505772
Authority key identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/R1GLOmkDsdOQU3JmSI6jpWMtr0k.roa
Signing time: Mon 28 Jul 2025 12:39:04 +0000
ROA not before: Mon 28 Jul 2025 12:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204538
IP address blocks: 185.245.204.0/22 maxlen: 22
212.108.105.0/24 maxlen: 24
2a0d:6a80::/29 maxlen: 29
2a10:10c0::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:0b:32:aa:ad:66:c6:52:e4:98:a7:46:14:50:57:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3781babac6925271b179817515e06e6a10acf6b4
Validity
Not Before: Jul 28 12:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47518b3a6903b1d390537266488ea3a5632daf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:3b:3c:d9:5c:bb:de:e1:64:c9:62:53:5f:
55:1a:51:97:11:c9:76:d2:6a:6e:43:05:8f:7f:c9:
3e:36:22:ca:4a:66:f5:ad:14:27:72:9c:05:df:18:
93:1e:a0:63:6f:af:e8:c6:fd:e5:24:08:9a:ed:55:
b7:be:b4:6f:17:53:d2:14:8d:82:08:c5:53:69:f6:
f0:dd:62:1f:02:a1:5d:2d:80:af:49:ab:d3:9f:b4:
c6:27:85:9b:c8:1b:4b:fe:f9:e2:81:11:90:0a:bb:
9c:33:2d:6a:9f:d8:44:54:60:60:8f:d3:8e:6f:9b:
46:b5:e3:63:56:c0:dc:b9:17:65:ea:76:03:8c:93:
fe:82:27:45:28:55:e9:73:01:cf:c9:41:99:09:09:
0b:0e:c3:74:f7:c6:1e:52:0e:56:84:c1:89:62:ed:
aa:46:31:7b:d5:99:57:a0:83:16:43:d4:05:f2:cb:
5e:a7:6c:95:a9:1a:7a:c9:c4:f4:13:ba:5c:f8:d3:
a8:2d:39:24:4e:e2:f2:57:18:05:73:ee:bb:90:bb:
c7:c9:ad:04:4c:40:d7:67:86:39:34:ef:6e:db:1d:
a4:5d:c5:51:f3:79:e3:64:9b:ca:88:b7:78:cb:a1:
58:6f:2b:cd:b5:62:de:01:78:31:f8:0a:7f:2f:57:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:51:8B:3A:69:03:B1:D3:90:53:72:66:48:8E:A3:A5:63:2D:AF:49
X509v3 Authority Key Identifier:
keyid:37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/R1GLOmkDsdOQU3JmSI6jpWMtr0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.204.0/22
212.108.105.0/24
IPv6:
2a0d:6a80::/29
2a10:10c0::/30
Signature Algorithm: sha256WithRSAEncryption
82:41:ef:bc:0d:2c:3c:7e:7a:01:6a:08:8c:1b:7a:cc:b0:46:
db:13:a6:37:83:4e:66:13:da:e6:66:9e:1b:ff:f7:89:f7:11:
b4:e0:ac:e0:a2:fd:55:9f:94:46:91:c0:e8:3a:d2:a9:77:6a:
65:ba:d5:0e:03:74:d1:69:45:4b:11:f9:29:cd:01:5d:7b:7e:
9b:86:f6:52:39:49:aa:ed:44:48:49:14:45:23:b4:c8:68:af:
4b:ff:cd:27:ef:36:dc:9c:6a:99:58:a8:48:40:87:5b:b3:1d:
13:13:78:f9:b3:55:8c:f1:48:fc:d9:64:86:dc:cb:6a:67:09:
05:ae:47:89:b2:ca:4c:51:9a:c3:7b:e4:74:26:b4:36:70:05:
be:a9:82:1b:c2:73:17:12:b5:46:e2:92:a6:30:b7:e2:b8:47:
3d:bb:a9:34:ff:5c:9b:5c:3e:d8:b2:c0:98:d2:b5:61:a9:65:
24:af:e0:e7:0c:b3:7a:98:aa:84:6f:61:a3:e3:61:37:ec:75:
d3:a6:5c:bc:e4:67:88:5c:23:c6:53:79:9f:97:dc:00:bd:df:
f9:8b:6b:dd:9f:e1:60:3a:e8:5b:de:49:b3:e7:fe:ee:8d:6b:
2d:0c:87:98:a3:24:56:47:4a:3e:ca:b0:12:e4:dd:1e:f2:4f:
b6:f1:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:54 2025 by rpki-client