Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/jHuaR39fBtfoSm7eKI-uPlXtnO0.roa
File: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (raw, json)
Hash identifier: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=
Subject key identifier: 8C:7B:9A:47:7F:5F:06:D7:E8:4A:6E:DE:28:8F:AE:3E:55:ED:9C:ED
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 0197CE62FAB34E2B4012E549B603A2B031C4
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/jHuaR39fBtfoSm7eKI-uPlXtnO0.roa
Signing time: Thu 03 Jul 2025 03:44:42 +0000
ROA not before: Thu 03 Jul 2025 03:44:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4637
IP address blocks: 146.101.0.0/16 maxlen: 24
146.101.64.0/24 maxlen: 24
146.101.65.0/24 maxlen: 24
154.8.0.0/19 maxlen: 24
154.8.32.0/20 maxlen: 24
154.32.0.0/16 maxlen: 24
193.82.96.0/19 maxlen: 24
193.82.96.0/24 maxlen: 24
193.82.108.0/24 maxlen: 24
193.82.128.0/19 maxlen: 24
193.82.159.0/24 maxlen: 24
193.82.192.0/19 maxlen: 24
193.117.32.0/19 maxlen: 24
195.152.0.0/15 maxlen: 24
195.153.19.0/24 maxlen: 24
195.153.74.0/24 maxlen: 24
195.153.108.0/22 maxlen: 22
195.153.124.0/24 maxlen: 24
195.153.216.0/24 maxlen: 24
195.153.217.0/24 maxlen: 24
217.151.32.0/20 maxlen: 24
2a02:1620::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:62:fa:b3:4e:2b:40:12:e5:49:b6:03:a2:b0:31:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jul 3 03:44:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c7b9a477f5f06d7e84a6ede288fae3e55ed9ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:b4:e6:b9:61:ad:0f:61:ce:76:c3:47:aa:
bf:1a:b0:44:8d:2f:4c:fc:9c:36:35:90:c7:88:1d:
d6:98:fe:23:73:c7:a2:cc:cf:12:01:03:75:1a:13:
17:c3:2f:72:56:d9:cc:a7:f9:65:07:ee:c8:ce:a5:
98:0a:19:9f:ce:b9:7c:45:c5:0c:d2:fe:0f:41:a8:
9d:c5:3f:1e:c0:7d:d9:1c:65:55:e8:fa:6f:26:1a:
9a:f9:11:33:a6:0d:1c:63:cc:b9:89:2e:99:09:71:
1c:71:c5:78:50:c4:aa:4d:0f:14:c2:d1:13:90:4e:
a7:c5:cd:06:fe:32:81:dd:a3:8c:d8:89:84:b7:b5:
64:45:32:2b:9a:60:2d:3b:5b:83:76:70:22:d7:f7:
ef:a0:42:a7:48:c6:1d:50:72:3d:87:3f:47:b9:95:
e9:63:d6:c9:f7:46:41:96:53:c9:74:47:5e:79:7a:
25:be:fd:f8:41:f9:9a:03:00:11:c8:a9:02:03:53:
15:5a:43:a4:92:0e:81:89:24:21:5e:10:83:7a:ab:
41:b7:cb:3c:79:58:20:06:c1:b0:4c:8e:a9:39:58:
2f:36:69:51:60:c6:2e:ad:23:d8:2d:28:b2:04:6d:
65:4f:04:8d:4e:06:55:61:3d:cd:58:67:b7:a1:9b:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:9A:47:7F:5F:06:D7:E8:4A:6E:DE:28:8F:AE:3E:55:ED:9C:ED
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/jHuaR39fBtfoSm7eKI-uPlXtnO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.101.0.0/16
154.8.0.0-154.8.47.255
154.32.0.0/16
193.82.96.0-193.82.159.255
193.82.192.0/19
193.117.32.0/19
195.152.0.0/15
217.151.32.0/20
IPv6:
2a02:1620::/32
Signature Algorithm: sha256WithRSAEncryption
4d:b3:94:f0:6d:42:fd:75:03:be:b5:d8:14:5c:33:f5:45:ee:
51:c7:8b:34:e5:97:c6:52:8a:14:3c:61:90:fe:d4:e3:fe:08:
1e:6a:5a:0c:0c:08:ef:dc:57:18:70:38:01:5b:ed:ea:74:d5:
21:f9:6e:2d:2d:93:57:97:d0:ca:57:21:31:51:f9:4b:cc:a1:
56:cd:1b:ce:31:3b:ec:0d:2e:4e:0b:35:d1:a9:05:27:9f:f4:
bb:a1:93:13:93:80:9a:81:74:6b:6c:bc:0a:35:1e:ef:bc:5f:
1b:92:03:5a:5a:9b:71:f3:74:a9:f8:03:80:e2:1e:8a:5e:e8:
8d:c6:ed:75:74:77:47:aa:25:b9:e2:30:d1:ab:a7:60:59:50:
bf:d4:3d:de:22:a2:6e:c0:90:b7:69:fb:82:19:72:eb:0b:d7:
f0:0b:53:ad:90:2f:63:20:1f:66:6c:22:c4:24:e3:d3:1b:c1:
ed:7e:ed:2c:0e:b4:01:61:f9:5f:9a:1e:5b:74:66:af:77:f8:
22:30:6a:c1:53:f0:b8:bb:cb:e4:54:1a:8c:fa:fb:a0:6a:63:
b4:fd:fd:b0:42:e4:8c:3f:1a:fe:7a:35:06:0e:47:7c:ae:d0:
81:25:ab:7d:61:4a:19:f8:62:10:1d:c4:9e:4c:db:11:9d:fe:
ab:d7:3d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:00:12 2025 by rpki-client