Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/k8TvgiNHhv0gMh1GPOWO0OlVTqY.roa
File: k8TvgiNHhv0gMh1GPOWO0OlVTqY.roa (raw, json)
Hash identifier: NYQN/yytkqzN4XlRmytmTH29q1AoSwj6G4FODHWQARM=
Subject key identifier: 93:C4:EF:82:23:47:86:FD:20:32:1D:46:3C:E5:8E:D0:E9:55:4E:A6
Certificate issuer: /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial: 01980B4D8D79C785DFD3B2C92F4D16221E30
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/k8TvgiNHhv0gMh1GPOWO0OlVTqY.roa
Signing time: Mon 14 Jul 2025 23:38:08 +0000
ROA not before: Mon 14 Jul 2025 23:38:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197784
IP address blocks: 31.13.8.0/21 maxlen: 21
77.243.152.0/22 maxlen: 22
77.243.152.0/24 maxlen: 24
77.243.153.0/24 maxlen: 24
77.243.154.0/24 maxlen: 24
77.243.155.0/24 maxlen: 24
185.152.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0b:4d:8d:79:c7:85:df:d3:b2:c9:2f:4d:16:22:1e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
Validity
Not Before: Jul 14 23:38:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93c4ef82234786fd20321d463ce58ed0e9554ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:15:b7:4d:02:90:e4:79:8f:4b:55:0f:28:
af:88:57:9e:c0:80:16:e6:4f:27:0e:4b:9d:fd:9a:
85:b0:24:c4:60:37:90:16:9b:b6:e3:9e:2a:02:12:
2f:82:4b:8f:7b:91:45:94:d5:6b:68:49:d0:d1:e5:
43:5a:26:6f:10:0c:97:d5:39:f2:02:8a:bf:a2:65:
91:de:f7:10:4c:1a:4f:32:5f:57:ee:72:73:fe:32:
71:6a:5d:a2:58:a9:c1:15:65:52:59:1f:18:c8:75:
9e:4b:4d:e0:7a:34:e9:12:b0:d5:c9:6e:16:96:9d:
60:84:34:41:61:94:f2:fa:e9:1a:35:05:24:57:14:
83:30:00:5f:06:a9:91:9a:e3:0d:f7:a6:a2:bb:e7:
79:fb:08:9a:ed:b4:f4:49:16:37:1c:28:75:a5:92:
c7:a9:c9:ca:1a:a9:3c:f6:4d:7b:eb:60:a1:29:39:
87:e5:53:59:11:5f:1a:80:3f:de:66:b6:41:9f:1c:
d6:1c:d8:df:87:e6:14:3b:a4:88:97:a1:dd:07:78:
44:e3:bf:44:c5:4d:0c:9e:05:b6:fc:04:59:6d:53:
f5:55:b6:84:1b:a3:cd:34:50:a3:e5:b7:b2:2f:d8:
ea:18:7d:7e:39:c8:84:68:01:85:2b:8b:2f:28:e3:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C4:EF:82:23:47:86:FD:20:32:1D:46:3C:E5:8E:D0:E9:55:4E:A6
X509v3 Authority Key Identifier:
keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/k8TvgiNHhv0gMh1GPOWO0OlVTqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.8.0/21
77.243.152.0/22
185.152.228.0/22
Signature Algorithm: sha256WithRSAEncryption
12:f5:3f:65:59:20:0e:aa:0b:79:19:c9:72:80:77:4f:eb:56:
23:55:e1:a8:a7:6b:9f:00:2c:3e:de:52:c4:eb:e5:bf:cd:ca:
1f:21:39:c3:c3:c8:2d:d8:e1:2f:73:b3:a7:95:90:df:ad:ed:
4d:1a:b1:ff:22:bd:4f:26:c3:7d:69:46:13:1b:7b:7b:c1:36:
1d:6b:34:22:64:5b:70:44:c0:af:d9:0a:b6:02:76:e9:88:ba:
9f:6f:32:b2:4b:03:b5:19:5b:87:ea:65:56:eb:3c:4f:38:09:
71:62:23:6c:6b:ab:75:91:70:2b:89:98:e0:32:b1:8e:aa:80:
76:db:9c:9b:c8:f6:19:85:1f:0b:ce:9b:de:e9:a2:c9:11:98:
6d:22:59:ba:13:86:23:dd:75:df:fc:0b:6c:3a:27:68:6c:fa:
2b:3a:32:c6:29:6e:b6:c4:31:17:5b:f3:72:be:4e:9f:8f:04:
0b:5c:96:12:e6:b4:4d:78:af:d0:ee:a7:61:62:e5:90:c5:e7:
73:e9:27:c7:bf:1e:85:8e:48:e7:b8:32:37:4c:21:f3:e1:73:
e3:d8:53:ec:da:30:f3:45:02:a9:d1:24:41:33:ba:a7:3d:5f:
ef:36:a8:2e:78:09:85:ac:fc:61:bb:76:e3:5b:50:49:db:27:
ae:0b:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:38:48 2025 by rpki-client