Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/z7W3TUvqijog7YZlWKivHA46PmQ.roa
File: z7W3TUvqijog7YZlWKivHA46PmQ.roa (raw, json)
Hash identifier: kTcny8oC+rTfPkunskzrLQdKnQw4CfTUYLfFlqjng3Q=
Subject key identifier: CF:B5:B7:4D:4B:EA:8A:3A:20:ED:86:65:58:A8:AF:1C:0E:3A:3E:64
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01986250DD5583054640C298F4C21C6E7D28
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/z7W3TUvqijog7YZlWKivHA46PmQ.roa
Signing time: Thu 31 Jul 2025 21:08:43 +0000
ROA not before: Thu 31 Jul 2025 21:08:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213520
IP address blocks: 64.188.68.0/22 maxlen: 24
64.188.74.0/24 maxlen: 24
64.188.104.0/22 maxlen: 24
193.23.197.0/24 maxlen: 24
193.23.210.0/23 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:62:50:dd:55:83:05:46:40:c2:98:f4:c2:1c:6e:7d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 21:08:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfb5b74d4bea8a3a20ed866558a8af1c0e3a3e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:9f:9e:88:7e:c2:61:3a:b6:b4:aa:12:75:
5b:5f:e6:c0:ff:db:9e:a4:79:87:56:97:e9:e4:fe:
54:bc:13:a2:74:1f:91:39:ad:d1:43:ff:94:1f:be:
99:61:6c:b2:84:af:dd:e3:6e:c4:b1:88:51:a0:00:
cb:ec:16:18:44:85:61:20:3d:49:3b:b0:7e:00:c4:
11:39:12:e0:75:de:75:8c:24:4b:15:d3:f7:e9:fc:
5e:39:31:1d:3b:75:9c:f7:68:11:2e:10:39:94:e5:
de:e8:b5:ca:d3:48:b9:3e:61:c8:a4:13:d5:d4:ed:
96:e1:13:53:32:f0:1d:92:ee:e9:2c:93:37:b7:2a:
9a:96:74:f4:c1:e5:40:83:d4:50:47:a9:f6:e7:7f:
92:a6:31:13:6d:8b:52:12:96:67:17:39:1c:87:5e:
9e:f4:2c:d0:96:7c:18:58:57:12:98:18:e2:ec:11:
65:3b:ed:15:00:39:10:3c:d0:42:0c:58:c7:49:82:
1b:fd:a5:74:82:28:63:e5:4f:8b:5d:62:be:40:9d:
c4:7b:4f:b9:93:22:42:0e:a2:db:70:15:09:ef:d7:
34:72:e6:c5:7d:db:58:a5:4f:36:bd:14:b7:ca:f1:
1a:cb:5c:cd:0a:0e:f5:99:e7:7a:28:7f:0a:b7:2f:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B5:B7:4D:4B:EA:8A:3A:20:ED:86:65:58:A8:AF:1C:0E:3A:3E:64
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/z7W3TUvqijog7YZlWKivHA46PmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.68.0/22
64.188.74.0/24
64.188.104.0/22
193.23.197.0/24
193.23.210.0/23
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
92:8e:eb:26:7d:31:eb:b1:94:10:48:6c:05:aa:9d:34:ff:7c:
fe:14:7f:fd:cc:d1:3d:8b:cd:75:fe:26:ab:4c:dc:4c:27:8c:
f4:10:a7:10:09:03:5c:ca:4f:fb:b4:c3:b9:1b:74:53:98:4b:
d6:70:17:d4:a4:56:a0:90:33:bb:6d:2d:94:b5:15:e0:f6:5b:
76:42:ba:0b:9a:9b:de:09:45:53:ca:d5:9c:34:27:0c:16:57:
dd:a2:bc:ac:f9:8e:ff:3e:51:cb:22:a8:ab:52:26:41:fe:93:
25:15:00:13:97:f9:bd:3c:f0:77:06:09:13:43:62:ea:b3:56:
fc:18:f0:39:9e:1c:a0:33:b8:13:52:e8:e6:a7:96:4c:72:a9:
2a:59:84:d9:9e:7c:83:22:89:71:24:fb:e1:87:5d:a1:8a:51:
95:5b:05:5a:a2:27:57:53:38:df:2a:e8:ac:34:40:72:6f:83:
7a:7e:dd:c6:59:cf:c6:4c:e3:20:b2:e3:e1:72:bb:4f:4c:2c:
b8:22:bf:e9:dd:5a:2b:41:b6:a7:0e:c9:77:66:06:1c:40:26:
94:1a:a4:7e:e3:a9:96:74:af:e9:74:4a:bd:59:c6:8e:e0:b3:
40:1f:1d:3a:aa:b1:30:91:4a:83:89:60:c6:91:58:39:a5:7e:
bb:a6:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:30 2025 by rpki-client