Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/p3IQt34M_r8DA4ZrzngnzfJHx6I.roa
File: p3IQt34M_r8DA4ZrzngnzfJHx6I.roa (raw, json)
Hash identifier: 0q1woLOhlfNZ/6p3zHEDdhDQt3pJoLquLcV7B+vJL+M=
Subject key identifier: A7:72:10:B7:7E:0C:FE:BF:03:03:86:6B:CE:78:27:CD:F2:47:C7:A2
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 0197F4484EA7543BF10A91AA8230C2E6B05D
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/p3IQt34M_r8DA4ZrzngnzfJHx6I.roa
Signing time: Thu 10 Jul 2025 12:21:08 +0000
ROA not before: Thu 10 Jul 2025 12:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.194.8.0/24 maxlen: 24
185.194.9.0/24 maxlen: 24
185.194.10.0/24 maxlen: 24
185.194.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:48:4e:a7:54:3b:f1:0a:91:aa:82:30:c2:e6:b0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Jul 10 12:21:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a77210b77e0cfebf0303866bce7827cdf247c7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:ec:b9:37:56:46:d6:1f:82:17:e0:a4:c0:
aa:b6:12:81:71:dd:ec:ab:0f:2e:b1:2f:67:6a:60:
ee:a4:f2:00:69:db:19:68:6a:3f:00:6e:e8:e0:13:
b5:a3:03:55:b0:bb:db:92:ea:ee:fe:88:4e:33:87:
43:15:74:fa:b9:d8:43:60:a1:64:f0:0b:f5:07:ca:
3f:5b:e0:e9:01:b9:37:26:e1:79:4f:c3:24:3e:75:
76:2d:52:d6:71:37:e0:78:6e:ac:8a:91:65:fb:f8:
b1:6a:2e:6e:54:9c:75:b2:03:bd:73:1d:f5:67:2a:
8e:b0:70:c2:44:05:c2:01:b5:d3:16:a9:aa:de:73:
5b:fe:ba:03:c8:a1:19:f0:b7:d1:6e:13:bb:00:4e:
08:f0:89:66:9d:09:18:6e:6b:18:37:96:66:74:dc:
83:c0:1d:3e:0c:67:e1:bb:db:6e:02:5c:a5:26:99:
e1:c1:fa:1a:13:f4:21:b3:e4:b4:b3:8b:aa:4f:d9:
2c:0b:da:97:65:9c:f8:23:e8:69:bd:6a:79:00:b3:
65:2b:05:e0:a3:ba:36:c1:01:84:5b:a9:d0:2c:56:
c7:cd:d4:0c:e1:4c:a8:4b:73:93:8a:3c:e4:e8:49:
f8:bf:d5:71:86:5d:08:a6:cd:78:0d:1a:5d:1e:d5:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:10:B7:7E:0C:FE:BF:03:03:86:6B:CE:78:27:CD:F2:47:C7:A2
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/p3IQt34M_r8DA4ZrzngnzfJHx6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
48:87:27:a8:88:65:86:a9:0f:07:88:00:7e:46:cb:fc:bf:25:
70:27:18:ef:b7:d1:06:b6:dc:3b:f6:ea:b9:c5:a8:32:ef:3b:
26:c6:bf:92:08:9e:fe:3e:4a:25:9b:86:47:13:07:a4:79:a3:
0c:e4:d6:68:ac:cb:6b:d9:e0:cd:c2:f6:8d:24:21:5f:5f:34:
77:d9:11:2c:06:15:85:fe:3c:4b:55:53:dd:7d:f1:7d:0d:4f:
fb:f9:71:1d:f2:96:90:fb:f6:dd:5c:2c:0d:37:93:33:3c:98:
d2:f0:cb:07:93:33:ea:c2:b9:c7:47:05:e8:d4:2e:09:87:9f:
8f:06:82:ca:62:76:0a:27:c3:80:c6:3e:a1:c3:04:85:9d:f5:
86:36:9c:16:f4:d3:03:8c:99:b6:82:95:93:63:1e:a1:c2:6e:
51:31:c0:d2:db:dc:ec:48:8d:59:c2:a0:41:44:3f:52:7b:7a:
80:29:06:2a:35:88:d2:02:08:8a:5b:a1:b1:16:c7:1c:cd:f3:
8d:10:67:58:6a:d2:f7:2a:a0:98:99:1b:c9:29:8e:00:70:bc:
9d:a0:2e:7e:5b:9e:f2:0d:f0:2d:34:a2:f7:3c:c4:04:7a:1b:
51:46:32:cd:b8:d8:b9:ee:ef:96:b8:0b:7f:e8:4f:fc:55:ff:
13:73:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:01:15 2025 by rpki-client