Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/mE6yFeuzO-nzY9pS66wpwQCUg8E.roa
File: mE6yFeuzO-nzY9pS66wpwQCUg8E.roa (raw, json)
Hash identifier: YCnB+tkjfNHoeRQGOj+1+8VYXKg5WUOmudI6eZeTMzg=
Subject key identifier: 98:4E:B2:15:EB:B3:3B:E9:F3:63:DA:52:EB:AC:29:C1:00:94:83:C1
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0197CA3DE1E1172513F6E9D517B85DA7981C
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/mE6yFeuzO-nzY9pS66wpwQCUg8E.roa
Signing time: Wed 02 Jul 2025 08:25:42 +0000
ROA not before: Wed 02 Jul 2025 08:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 109.122.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:3d:e1:e1:17:25:13:f6:e9:d5:17:b8:5d:a7:98:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 2 08:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=984eb215ebb33be9f363da52ebac29c1009483c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:ac:83:cb:f7:b1:f3:e4:a1:4b:69:db:00:
e5:ca:f2:1e:10:6b:63:45:4b:67:0b:52:b8:fa:3d:
39:a2:c1:6d:85:e9:06:f1:d1:4f:07:2b:9e:fa:fc:
15:9a:82:bf:cb:04:25:23:b3:94:20:2e:27:3d:97:
a8:d1:f5:5a:28:2d:78:cc:81:26:7c:3e:b2:5b:60:
73:e3:53:77:b3:ab:2c:70:04:14:08:78:4e:03:68:
70:7b:ac:8d:7e:f5:a7:37:31:30:bb:ec:88:0e:d3:
46:a7:1e:d9:fd:99:e3:69:1c:7b:2a:a9:a4:48:91:
f4:3d:56:f9:51:2c:d5:be:63:97:a5:10:05:bd:5f:
91:fc:b6:27:26:cf:ae:f6:01:d2:c1:bf:b1:10:69:
b6:2c:9a:dc:65:64:ba:63:c8:4f:c0:bf:ed:0e:ed:
85:c2:10:93:33:86:18:90:11:52:16:f3:7d:e3:45:
3b:e0:ea:de:2c:11:22:4a:f7:e4:3e:ce:03:83:19:
13:b8:6d:f9:01:bb:36:6b:08:d9:8e:bc:a7:11:dc:
e8:3b:0d:88:c0:10:0d:f0:4d:e4:36:77:9c:16:1e:
c4:27:60:c3:40:3a:d4:f6:bf:91:85:12:68:f7:7d:
f3:f2:d3:eb:ba:7a:0b:88:eb:c8:a6:ef:67:ad:fb:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4E:B2:15:EB:B3:3B:E9:F3:63:DA:52:EB:AC:29:C1:00:94:83:C1
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/mE6yFeuzO-nzY9pS66wpwQCUg8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.252.0/24
Signature Algorithm: sha256WithRSAEncryption
86:93:5b:6c:91:c0:08:50:01:6b:ca:8f:5e:3a:f7:26:f0:c7:
e6:ba:32:fe:e1:64:a5:32:ea:1a:f5:81:6f:2a:aa:99:ea:46:
2a:5c:7c:ce:2d:1d:f1:22:58:50:8d:e3:79:79:76:3e:40:11:
c2:91:98:35:89:05:bf:7f:b8:29:e9:a8:97:45:aa:77:0a:82:
0e:67:1c:5a:65:3d:39:b6:ef:49:68:4e:1d:2c:95:2c:dc:1e:
41:c0:90:84:c9:c2:7a:d8:3c:e5:8f:74:5f:a0:4c:d6:a4:a1:
7b:96:b2:b7:b6:68:8b:c3:6e:03:44:a1:20:18:ca:aa:76:c6:
0e:54:19:87:15:e2:31:26:d6:8e:8f:7b:e2:d3:ee:17:ab:3c:
44:46:30:d0:22:29:6f:e5:87:dd:de:75:62:c2:5d:5b:2a:56:
06:aa:a3:c2:b7:e0:b2:24:04:5e:3a:fd:25:72:f4:1e:cd:78:
b4:5e:0c:4a:e5:25:60:cf:c4:95:e5:fe:9f:36:4b:76:ab:31:
96:64:e3:1e:89:64:d4:58:d5:6c:bb:bf:44:6b:ff:8b:a1:2a:
8a:5b:0e:25:ab:87:bd:09:83:b6:15:a2:91:32:2d:59:32:33:
20:10:c1:ad:10:e9:60:12:bc:b3:28:37:d4:77:0c:b1:95:0f:
eb:5f:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 01:59:49 2025 by rpki-client