Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/dao1cG3vnE7rGAo2Y51KFZp8PVU.roa
File: dao1cG3vnE7rGAo2Y51KFZp8PVU.roa (raw, json)
Hash identifier: 5/aRHB3lfX+ZQYKg/KSy5iu5q1uBKpY3aPgv+U+JjrM=
Subject key identifier: 75:AA:35:70:6D:EF:9C:4E:EB:18:0A:36:63:9D:4A:15:9A:7C:3D:55
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01981835A5C35CA2C059FC71430C665EF638
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/dao1cG3vnE7rGAo2Y51KFZp8PVU.roa
Signing time: Thu 17 Jul 2025 11:47:05 +0000
ROA not before: Thu 17 Jul 2025 11:47:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42694
IP address blocks: 193.221.211.0/24 maxlen: 24
2a13:5800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:35:a5:c3:5c:a2:c0:59:fc:71:43:0c:66:5e:f6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 17 11:47:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75aa35706def9c4eeb180a36639d4a159a7c3d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:13:9e:c9:55:7b:e9:1f:94:c7:68:6e:e8:
df:46:de:cf:54:6f:95:57:36:45:7f:9d:46:c4:54:
67:f8:17:34:b2:37:d8:c1:08:45:0b:79:e7:54:57:
70:17:db:12:33:45:98:97:04:e1:ca:0c:88:ea:c3:
fa:ac:5c:3b:74:f3:f7:8c:18:de:e2:29:64:27:8b:
3b:ed:67:81:9b:6c:d4:b1:c2:f3:20:70:d4:c6:6f:
09:b6:85:31:bc:d5:ca:ae:56:e0:2f:07:6d:1e:ce:
25:42:fc:55:a4:bd:b2:55:e2:eb:07:7d:7b:7a:b1:
90:a7:68:70:9c:47:a0:52:73:a5:43:a0:ad:fa:cb:
89:ec:00:dc:f1:fb:83:9a:56:ff:15:09:1f:19:81:
d6:b7:83:74:2d:32:72:a4:a1:db:eb:cd:87:e7:f7:
d3:41:44:f4:00:2c:eb:06:a6:aa:b2:0f:f9:39:28:
87:66:d4:08:4f:3e:0f:a6:cb:3d:c8:b2:ba:38:12:
4d:44:7b:93:ad:37:cc:37:dd:93:f6:b1:d7:44:fa:
0c:51:69:db:00:fc:bf:c8:65:44:3e:be:2f:81:3f:
8b:a7:1e:64:1b:04:42:35:9e:67:51:b8:09:95:04:
5c:70:bd:1a:0f:9d:50:95:87:27:fd:73:c8:8d:8f:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AA:35:70:6D:EF:9C:4E:EB:18:0A:36:63:9D:4A:15:9A:7C:3D:55
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/dao1cG3vnE7rGAo2Y51KFZp8PVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.211.0/24
IPv6:
2a13:5800::/29
Signature Algorithm: sha256WithRSAEncryption
40:27:2c:98:31:1f:85:82:8a:28:33:5c:20:d2:d3:5a:cc:b4:
67:31:83:2c:7d:99:ed:08:78:28:d3:5f:4a:46:4e:9c:e9:3e:
83:6a:06:cc:e3:df:be:ea:ea:3d:38:71:5a:07:60:03:97:4a:
50:34:40:26:f8:94:36:e3:68:70:fd:a7:f6:c9:0d:57:ae:b0:
ed:f0:66:a8:76:de:e7:8b:68:1b:06:4b:57:ce:ad:c9:5b:6c:
0e:37:8a:53:4e:12:9d:c2:24:65:b1:87:fb:33:b0:89:0e:08:
9b:2c:78:fa:cb:89:75:c2:5f:92:f8:72:03:b5:0d:f3:4e:67:
e8:2a:93:94:89:0b:f7:45:1d:2a:66:ed:82:f7:60:56:80:4c:
5e:28:5d:7f:18:bf:3a:91:a4:9d:2d:c5:4f:f2:a8:d3:42:15:
32:2a:a5:ba:5c:4d:3d:44:3a:cb:f2:06:66:b9:9a:5a:c9:2d:
23:df:5a:e1:23:9d:d8:d3:07:3a:83:5c:4b:25:1e:98:d2:01:
4e:3b:9c:02:6f:d4:f2:c3:c1:fe:fa:a4:3b:30:7a:2b:ac:52:
95:9c:2a:2d:15:44:31:b7:75:8e:16:60:95:9a:ff:6f:00:33:
c5:f2:90:82:9f:55:57:22:8b:70:23:5d:94:1b:b3:d8:75:04:
5b:0c:80:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 22:40:58 2025 by rpki-client