Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/zKcHHqm6nAgqTE-C4TiY0X7SueI.roa
File: zKcHHqm6nAgqTE-C4TiY0X7SueI.roa (raw, json)
Hash identifier: iZfl8ZghJZguA4a9LNsQfxENOVNQqLvAQQCUSQMWqeU=
Subject key identifier: CC:A7:07:1E:A9:BA:9C:08:2A:4C:4F:82:E1:38:98:D1:7E:D2:B9:E2
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0197A90B0AF182331BB394DF5598B92C5592
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/zKcHHqm6nAgqTE-C4TiY0X7SueI.roa
Signing time: Wed 25 Jun 2025 21:42:42 +0000
ROA not before: Wed 25 Jun 2025 21:42:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 138.124.2.0/24 maxlen: 24
138.124.3.0/24 maxlen: 24
138.124.4.0/24 maxlen: 24
138.124.10.0/24 maxlen: 24
138.124.15.0/24 maxlen: 24
138.124.16.0/24 maxlen: 24
138.124.19.0/24 maxlen: 24
138.124.20.0/24 maxlen: 24
138.124.30.0/24 maxlen: 24
138.124.31.0/24 maxlen: 24
138.124.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a9:0b:0a:f1:82:33:1b:b3:94:df:55:98:b9:2c:55:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jun 25 21:42:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cca7071ea9ba9c082a4c4f82e13898d17ed2b9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:e7:92:d6:5d:6e:c9:34:e6:8d:41:f7:43:
38:3b:a1:40:a5:74:c5:78:9f:82:ef:b9:ca:bd:3b:
c9:e4:8c:44:6c:db:a5:c0:e7:75:e0:56:21:64:40:
e6:6d:7a:67:0b:76:28:20:5e:5d:e8:01:ee:31:d0:
51:c2:97:96:6e:4f:90:0b:3c:9f:cc:10:bd:78:33:
64:d2:95:8b:d0:7d:ef:65:07:3a:77:8e:f5:54:e8:
d8:2e:f9:d3:c7:f4:4d:99:7c:ec:bf:70:27:39:dc:
65:4c:80:f8:32:14:86:91:ef:28:f9:ac:d2:2b:b5:
36:a0:83:9d:7b:64:64:d4:25:f7:a3:5e:35:cd:54:
78:89:c7:38:a5:b8:f7:55:33:87:2d:b2:79:e3:0b:
12:f5:75:9e:5b:b9:13:a4:1a:61:01:89:c1:1e:6e:
96:26:e6:28:c9:49:26:27:16:e6:73:e4:05:98:85:
83:e5:a9:7a:93:93:de:c3:4d:cb:e3:d8:41:8a:74:
48:6c:e5:fe:d2:b9:d5:18:90:0a:6f:da:6a:d4:09:
b0:82:18:01:2c:d1:56:49:8f:b9:50:80:90:4f:bd:
68:7e:8d:02:9c:e3:91:90:f9:e6:03:22:a5:46:03:
2a:82:bd:6b:f9:af:29:b0:9a:d2:1d:70:14:74:e8:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:07:1E:A9:BA:9C:08:2A:4C:4F:82:E1:38:98:D1:7E:D2:B9:E2
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/zKcHHqm6nAgqTE-C4TiY0X7SueI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.2.0-138.124.4.255
138.124.10.0/24
138.124.15.0-138.124.16.255
138.124.19.0-138.124.20.255
138.124.30.0/23
138.124.125.0/24
Signature Algorithm: sha256WithRSAEncryption
86:43:b4:19:fa:e1:d4:f7:fc:74:e3:9a:a2:f1:e3:6b:83:af:
cb:53:7c:98:56:32:90:c1:bf:30:f6:89:7d:24:4e:04:89:d2:
c5:8b:4d:ea:c0:34:20:00:7b:f8:a1:99:eb:0c:3d:4f:78:a1:
79:7f:38:d3:40:61:26:7c:30:e3:f6:ab:ff:3c:a0:f0:da:6e:
f4:d4:4a:78:95:dc:28:13:1f:a8:17:c2:4f:65:27:a1:38:89:
62:89:9b:b2:78:fa:12:69:16:7c:74:f6:a9:e0:22:ea:fc:da:
dd:64:7f:2a:79:88:a2:03:c8:fd:b7:90:cb:9b:87:a8:0f:23:
ae:86:bc:54:2a:05:6f:3d:d1:d1:0a:e3:cf:54:58:ea:3d:88:
36:e6:08:62:e3:13:ba:ec:14:09:1a:24:8b:ea:c7:47:ec:bf:
8b:da:59:c6:77:f6:95:eb:1a:ca:c8:95:65:8f:76:10:50:8c:
48:4b:93:c7:c3:2c:2e:0b:e3:75:d7:f0:71:26:dc:5b:eb:7b:
cf:1f:76:10:16:d5:d4:11:68:a7:81:86:17:86:34:40:d7:d5:
ff:d1:24:25:80:8a:9e:a0:a7:2c:2a:20:7b:c9:58:93:31:61:
3d:5a:fe:07:87:8f:fa:34:4c:76:c2:22:c6:e6:1b:23:cf:4e:
ee:8f:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:41:48 2025 by rpki-client