Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/bcQuDnhHHZusIAuIQ789YDiNxNo.roa
File: bcQuDnhHHZusIAuIQ789YDiNxNo.roa (raw, json)
Hash identifier: w3G1iuGl5LiE+QGJoi9b4t6x84eFcY70zxzHKw/9OQw=
Subject key identifier: 6D:C4:2E:0E:78:47:1D:9B:AC:20:0B:88:43:BF:3D:60:38:8D:C4:DA
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0197E4D2FF410C592FD269C9078048E6569B
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/bcQuDnhHHZusIAuIQ789YDiNxNo.roa
Signing time: Mon 07 Jul 2025 12:18:42 +0000
ROA not before: Mon 07 Jul 2025 12:18:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39216
IP address blocks: 212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
212.126.99.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.103.0/24 maxlen: 24
212.126.104.0/21 maxlen: 21
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/23 maxlen: 23
212.126.108.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:d2:ff:41:0c:59:2f:d2:69:c9:07:80:48:e6:56:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jul 7 12:18:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dc42e0e78471d9bac200b8843bf3d60388dc4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:5a:28:1e:6c:c3:54:d4:ed:04:68:81:2f:
a3:a7:f4:32:2e:8d:87:30:a5:bd:97:b5:86:03:a7:
17:44:80:32:5a:65:b2:11:ed:4a:53:59:33:f1:e8:
56:34:de:26:76:8d:e5:eb:1f:97:5f:a8:31:d9:98:
db:9a:9a:f1:b9:eb:0b:45:5d:ae:b3:e1:a3:d3:50:
be:a7:a4:c7:bb:0c:25:9a:d7:bc:e6:e6:4d:a3:75:
b6:1d:5a:2a:ce:15:b7:98:36:2a:05:73:ee:c8:4d:
04:96:cf:85:55:ad:3d:ae:ce:02:42:e8:c6:a4:04:
4d:15:62:4e:c3:2d:36:a8:07:7c:4d:60:63:e4:4a:
bd:75:b0:ee:cd:65:ef:dc:12:37:63:39:fc:6c:b1:
b0:0b:b8:d0:c3:6a:14:34:5b:55:e2:84:27:9c:3c:
eb:f5:40:79:a9:6b:6b:67:de:16:e3:93:6d:88:76:
23:62:a0:8c:d7:18:4e:96:83:0b:41:da:bd:bd:37:
93:98:06:df:2f:bb:b4:45:09:dc:93:47:77:1e:c3:
65:0a:3f:64:34:ea:f6:22:2d:99:f5:bd:fb:1a:e2:
d2:a2:37:bc:b6:d8:0d:2f:b1:f5:58:2a:66:9c:7c:
06:1c:6a:3d:c6:69:c5:bd:4b:72:af:e8:b3:0c:89:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C4:2E:0E:78:47:1D:9B:AC:20:0B:88:43:BF:3D:60:38:8D:C4:DA
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/bcQuDnhHHZusIAuIQ789YDiNxNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0/20
212.126.115.0/24
212.126.117.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::-2a04:2dc0:19:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:1e::/48
Signature Algorithm: sha256WithRSAEncryption
ab:0a:9c:0c:b4:b2:2a:b7:2b:a6:48:19:cd:9e:19:f7:e1:94:
86:7b:a6:40:bd:77:dc:06:53:5e:fc:7e:1e:cf:44:42:01:2b:
35:86:95:61:29:11:7c:b5:78:c4:7d:18:33:ca:05:8d:f5:a5:
2f:f0:72:34:eb:38:32:e5:83:4c:6e:f9:5c:37:74:c3:ae:08:
7f:2e:93:cd:47:d4:81:9c:a0:f7:d1:5c:de:f2:78:1f:fb:ca:
8e:62:17:6a:1d:00:c3:ff:ff:3c:76:d0:d2:af:e4:59:80:54:
50:7b:9c:2c:9c:1b:15:60:00:4b:41:98:88:0f:df:ce:ae:e5:
fd:fe:0e:ae:71:d2:d2:66:b6:dd:1b:96:58:d4:00:a9:8f:29:
06:99:f6:43:b4:e5:f2:b7:8a:de:36:01:54:bc:cd:3e:0e:41:
f5:d4:40:f8:67:60:8b:79:ab:2d:c2:a8:ef:75:2d:af:ee:fb:
fa:57:6a:f7:9c:3f:d4:af:e7:da:58:2c:ce:d2:59:be:e5:6c:
fd:17:9a:30:d6:e5:9b:9f:bb:f5:f2:3e:55:87:8e:7c:b5:3f:
2c:35:1e:44:22:aa:4b:94:6a:10:35:47:83:5c:ca:02:51:f2:
26:d8:80:4a:5d:e4:96:5b:df:60:82:25:48:26:1f:d1:cd:3f:
e6:f9:4b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:50:57 2025 by rpki-client