Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p3dELOo1nEdSrUR3EoXRwLnQlIs.roa
File: p3dELOo1nEdSrUR3EoXRwLnQlIs.roa (raw, json)
Hash identifier: VwBr4rLF0dARhK2mIaTx8wc1Ub2z2t4f4laZQLD58t0=
Subject key identifier: A7:77:44:2C:EA:35:9C:47:52:AD:44:77:12:85:D1:C0:B9:D0:94:8B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01982C2D5A5336C0C6BAD4190509EAE41F58
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p3dELOo1nEdSrUR3EoXRwLnQlIs.roa
Signing time: Mon 21 Jul 2025 08:50:26 +0000
ROA not before: Mon 21 Jul 2025 08:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31490
IP address blocks: 85.217.188.0/24 maxlen: 24
87.121.121.0/24 maxlen: 32
93.123.23.0/24 maxlen: 24
94.156.178.0/24 maxlen: 24
94.156.233.0/24 maxlen: 24
185.219.124.0/24 maxlen: 24
2a00:1728:20::/48 maxlen: 48
2a00:1728:20:100::/56 maxlen: 56
2a00:1728:33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:2d:5a:53:36:c0:c6:ba:d4:19:05:09:ea:e4:1f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 21 08:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a777442cea359c4752ad44771285d1c0b9d0948b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:de:93:3f:59:f1:17:4c:df:e7:89:de:33:
a3:d6:bd:c5:fe:41:f0:9c:0b:37:c4:06:f1:0b:5a:
c3:4c:12:a7:1c:02:23:7a:5c:55:12:3d:19:ab:8a:
ba:d2:f7:bb:88:16:6a:e4:f0:8d:85:37:54:78:48:
a7:4b:31:4f:39:08:5d:bd:46:52:02:84:e3:4e:fc:
dc:96:e9:5f:b5:df:10:ea:02:2b:fc:8d:2f:ad:e0:
c3:3f:c8:4b:1f:e3:9d:25:66:72:ff:69:35:8f:df:
98:f1:5b:e7:4e:bb:24:68:40:67:b8:88:a3:07:a7:
5d:4b:ae:89:ed:33:26:34:61:b9:bd:7c:e0:81:07:
cf:e3:9d:5e:eb:0c:66:a3:6a:62:0d:dc:79:58:87:
f8:69:b4:28:f9:71:29:fa:3a:37:1b:56:b0:6f:70:
81:4f:22:e0:2a:26:49:a7:76:b6:6b:3a:64:84:bd:
68:16:3e:b9:84:f8:89:07:60:19:ea:64:d7:64:2c:
95:8f:37:0d:3c:6d:46:1e:64:29:7b:d9:b9:ad:0c:
95:29:b6:d8:35:5d:6b:c3:3f:33:88:92:92:31:8c:
51:55:6c:99:14:61:e5:bf:93:80:03:28:ce:eb:9a:
b7:e6:22:45:1a:5b:81:6b:27:1d:3e:af:e4:f1:1e:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:77:44:2C:EA:35:9C:47:52:AD:44:77:12:85:D1:C0:B9:D0:94:8B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p3dELOo1nEdSrUR3EoXRwLnQlIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.188.0/24
87.121.121.0/24
93.123.23.0/24
94.156.178.0/24
94.156.233.0/24
185.219.124.0/24
IPv6:
2a00:1728:20::/48
2a00:1728:33::/48
Signature Algorithm: sha256WithRSAEncryption
5e:22:bf:7d:ac:9e:be:d6:00:12:f3:c6:f5:31:13:7b:47:cd:
3d:b6:a8:89:67:cc:c6:ab:d9:b0:a6:d2:d8:f8:7d:1d:0f:64:
70:cd:82:cb:e0:31:54:b5:9e:35:62:f0:f8:3b:c4:50:67:59:
d7:41:62:d4:3c:34:dc:4b:2a:06:ae:75:c8:78:f4:21:07:11:
d0:e2:96:e9:57:e4:ef:f7:f5:88:59:cb:14:ea:ed:33:47:ee:
6d:bf:75:4e:97:de:0c:19:95:9f:c7:99:43:d8:a1:a8:ce:2a:
6b:a6:87:bb:ce:00:1a:d3:92:2d:0d:92:70:91:3b:44:21:b4:
d6:bb:27:10:6a:a9:f1:11:e5:47:02:75:35:87:e9:0d:ae:22:
60:11:67:a9:0a:15:47:0a:01:d1:b9:4a:d0:dd:5a:77:1d:cf:
be:72:2d:6d:d7:f7:83:4e:eb:63:8d:eb:aa:23:37:a8:9a:60:
34:a6:02:a7:36:0b:bb:2e:84:33:1e:ba:17:0d:8d:49:7b:75:
67:57:37:22:7e:37:38:aa:2d:20:df:78:d7:60:36:ee:5d:38:
c4:d0:66:ac:64:30:dc:62:7c:6d:cc:04:cf:ba:83:60:e4:49:
7e:31:76:86:bf:28:15:41:05:13:d8:33:84:0b:68:fe:e3:2d:
ba:c6:f7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:56:54 2025 by rpki-client