Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/apWGnYBfT1Uxpar2X_NU5YryOqQ.roa
File: apWGnYBfT1Uxpar2X_NU5YryOqQ.roa (raw, json)
Hash identifier: nf8tNlNJuwCz8vs6Pkl4cw5Ak5kUKthNZfeXItkDTk0=
Subject key identifier: 6A:95:86:9D:80:5F:4F:55:31:A5:AA:F6:5F:F3:54:E5:8A:F2:3A:A4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019861FB80C529963A69C69F4CB35DCC0CFA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/apWGnYBfT1Uxpar2X_NU5YryOqQ.roa
Signing time: Thu 31 Jul 2025 19:35:29 +0000
ROA not before: Thu 31 Jul 2025 19:35:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 64.188.64.0/22 maxlen: 24
77.239.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:fb:80:c5:29:96:3a:69:c6:9f:4c:b3:5d:cc:0c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 19:35:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a95869d805f4f5531a5aaf65ff354e58af23aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:6e:1f:6e:60:85:3b:4a:32:08:52:33:53:
e8:c0:46:3d:47:89:d5:f6:3d:7a:03:66:af:61:5d:
a0:8c:89:ec:73:4e:12:f2:74:1d:74:c4:56:a7:23:
32:40:b1:aa:58:85:c7:c2:1f:cd:9c:52:4b:b6:b3:
af:5c:3c:ad:8c:f1:a7:a3:b7:54:e5:e3:a6:89:cf:
e5:d1:1b:33:b4:1c:15:23:a3:d8:e5:cf:db:bf:d3:
8c:e6:ad:7c:fa:bd:d7:0b:92:cb:dd:69:86:3c:ed:
43:6c:12:2e:09:4a:3e:34:b6:e6:bf:fb:1c:58:53:
96:5d:9e:d5:87:69:55:cc:2d:49:18:a9:d3:99:58:
81:14:be:dd:29:26:63:52:32:25:39:1e:a2:d7:07:
7a:39:3f:c2:58:56:60:94:81:7b:cf:0b:fa:c5:af:
a1:fa:8d:81:79:9e:08:37:f5:b2:2b:72:65:50:2e:
c7:6b:8b:fc:79:01:9e:0f:2e:81:e6:53:81:99:82:
23:c1:b5:90:d5:7b:03:d5:92:b9:49:31:ee:d8:a3:
e8:73:50:9a:44:98:b5:f9:22:b1:fc:6f:99:60:29:
5f:d1:30:ca:c1:fa:7c:f0:d3:15:33:0d:fb:6f:ed:
26:0d:5a:7f:e2:cd:b2:e8:a5:ac:1a:dd:cb:4d:9d:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:86:9D:80:5F:4F:55:31:A5:AA:F6:5F:F3:54:E5:8A:F2:3A:A4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/apWGnYBfT1Uxpar2X_NU5YryOqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.64.0/22
77.239.125.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3d:da:5b:3a:37:2e:27:fc:6b:6c:4b:fb:0e:5b:18:47:1a:
e5:c2:61:48:1e:70:f2:25:e7:7a:25:c8:25:ee:a3:49:b5:2f:
db:8b:b0:06:b5:ad:a0:cf:50:1b:68:f4:7c:b5:f6:5b:a9:df:
84:53:29:9a:53:e5:76:ba:a0:fc:9c:eb:3b:98:36:1c:4c:dd:
49:4f:bc:b0:4f:3c:92:46:23:96:50:a0:3c:87:6a:20:78:63:
9b:10:a9:8b:33:e2:82:93:ec:a5:0f:4a:10:1d:58:6f:c3:1f:
ca:cf:60:f8:fc:c2:ed:5e:2a:0a:03:34:28:e7:6a:7a:59:2f:
f1:35:81:a1:18:42:3e:1e:34:1f:b3:9d:ae:30:53:c6:a5:00:
66:a8:74:f5:c6:23:26:72:21:13:e1:1d:18:9e:03:17:b3:7d:
b7:60:cb:a2:b4:1a:aa:74:88:5e:3c:4d:5f:7f:89:44:7d:25:
d8:3c:a3:f5:35:11:21:cd:18:8c:e8:1d:84:07:04:6e:03:a1:
80:99:f1:1e:a2:54:9e:7f:08:19:c4:93:80:ac:89:24:6a:b1:
d8:b7:65:45:82:42:3b:b7:57:b4:05:ee:d8:81:2f:b4:5c:c7:
4a:5f:7e:80:49:a9:a7:a5:18:b7:4a:6d:79:ac:f3:55:c2:29:
6a:8f:ea:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:46:05 2025 by rpki-client