Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/tJ3XiLuUDAM3_2vr_bejczODR68.roa
File: tJ3XiLuUDAM3_2vr_bejczODR68.roa (raw, json)
Hash identifier: NrXcw6at8G0qg9c5a5tjN4wif0eNk3CNDAZCjm9jqh8=
Subject key identifier: B4:9D:D7:88:BB:94:0C:03:37:FF:6B:EB:FD:B7:A3:73:33:83:47:AF
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 01985B72C844A6C09CA2FE61B799C95BD59F
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/tJ3XiLuUDAM3_2vr_bejczODR68.roa
Signing time: Wed 30 Jul 2025 13:08:25 +0000
ROA not before: Wed 30 Jul 2025 13:08:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 92.42.207.0/24 maxlen: 24
2a10:ed40::/48 maxlen: 48
2a10:ed40:1::/48 maxlen: 48
2a10:ed40:2::/48 maxlen: 48
2a10:ed40:3::/48 maxlen: 48
2a10:ed40:4::/48 maxlen: 48
2a10:ed40:5::/48 maxlen: 48
2a10:ed40:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:72:c8:44:a6:c0:9c:a2:fe:61:b7:99:c9:5b:d5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Jul 30 13:08:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b49dd788bb940c0337ff6bebfdb7a373338347af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:02:db:d3:a2:60:01:5c:15:4c:0e:0f:5d:
4e:a5:f1:7f:3a:76:cf:2d:63:2f:ae:83:9d:ba:69:
41:7c:f8:5d:14:21:48:03:81:71:ac:b5:9f:22:bf:
3b:45:ea:19:ed:15:22:b6:68:98:0e:c2:7f:f1:27:
57:0d:3d:2c:68:36:90:65:c0:4a:85:ef:76:35:c8:
56:82:b7:12:d8:47:32:81:90:62:8a:e8:46:84:aa:
b1:92:07:03:98:2a:0b:ce:6a:4d:70:2f:a5:93:93:
ce:27:72:a9:33:b6:50:13:00:5d:13:75:bc:6c:6a:
d5:94:10:83:5e:7e:76:cf:ca:c8:b8:39:ff:87:69:
73:d0:f9:30:3c:02:54:08:25:09:1d:a4:0f:00:fd:
86:26:30:b5:59:06:f2:0e:5a:af:7e:eb:d7:30:54:
5b:ca:31:6f:20:49:fc:86:3a:ec:c5:a8:00:da:31:
d4:92:b4:1f:21:a6:a2:dc:96:e3:c6:90:8e:b7:9e:
f7:c2:e8:57:70:b5:0b:92:fd:d9:17:e0:83:c7:cf:
d1:d7:2f:3a:15:98:11:db:9e:a7:76:6e:08:03:ff:
3b:72:29:75:81:e2:3f:c5:09:cd:12:1d:42:d2:40:
1a:21:b9:60:4c:03:15:53:cc:11:36:d0:0f:7f:f8:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9D:D7:88:BB:94:0C:03:37:FF:6B:EB:FD:B7:A3:73:33:83:47:AF
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/tJ3XiLuUDAM3_2vr_bejczODR68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.207.0/24
IPv6:
2a10:ed40::-2a10:ed40:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
18:31:c9:ef:05:9f:9d:be:9f:b6:28:dd:b5:f8:a5:78:74:ee:
94:b5:52:19:99:d4:b4:fa:92:1b:a0:21:07:ff:6c:a5:d7:41:
d5:c0:7f:4b:f5:cc:c2:9b:4c:bc:39:87:fb:24:6d:26:f7:d6:
aa:36:59:c9:58:a4:bf:1f:8b:27:37:e8:b5:94:73:2c:bc:18:
36:ad:69:db:11:23:7b:c8:74:f2:d1:01:d7:56:9e:82:56:a8:
bc:73:fe:87:11:5d:95:8f:96:b6:1a:6f:11:e4:5f:63:2a:f8:
50:52:9b:c0:41:6e:b9:ee:84:32:3c:00:f5:5b:f4:5b:4b:ce:
aa:19:4e:53:d4:6b:8a:e3:77:48:08:59:cb:7d:be:b2:52:88:
e1:5e:17:a0:be:c8:e5:49:8f:00:ee:52:fb:3e:77:7e:2b:6c:
05:ea:9b:b7:9f:bd:e6:69:58:c3:a3:57:67:c6:cf:b4:a3:17:
33:a6:95:22:43:a4:a1:56:9e:0e:b6:d2:e2:b0:8e:5e:4d:94:
03:c1:86:97:e0:3e:8f:fc:4e:bc:db:61:58:9d:0a:a2:cd:b1:
6f:b8:c2:7b:70:23:18:c6:eb:55:56:73:6a:73:a5:5c:af:a3:
75:b0:39:98:9c:d4:6e:ec:77:c5:31:8f:9f:26:9a:1d:f9:77:
3e:bb:4c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:29 2025 by rpki-client