Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/TH3AhVbNZPfpfze9jk4P8EYhJRk.roa
File: TH3AhVbNZPfpfze9jk4P8EYhJRk.roa (raw, json)
Hash identifier: CvDuj4p8KBdrmQoz9VsmO+AYAN5CIQ+jW9RXbyF9x5g=
Subject key identifier: 4C:7D:C0:85:56:CD:64:F7:E9:7F:37:BD:8E:4E:0F:F0:46:21:25:19
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 0197FEAEACFEDD758523706F1860D38C4E34
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/TH3AhVbNZPfpfze9jk4P8EYhJRk.roa
Signing time: Sat 12 Jul 2025 12:49:09 +0000
ROA not before: Sat 12 Jul 2025 12:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201949
IP address blocks: 87.248.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:ae:ac:fe:dd:75:85:23:70:6f:18:60:d3:8c:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 12 12:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c7dc08556cd64f7e97f37bd8e4e0ff046212519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:48:1e:e6:d0:3a:47:d5:b5:87:d1:f2:ce:80:
93:19:67:75:1d:b4:65:d6:a4:91:5c:37:33:f3:de:
5e:f4:24:eb:f0:34:c5:9b:f4:0f:c5:a2:2e:e0:94:
fa:1f:01:61:ce:3b:b2:e6:28:12:e4:f3:ad:de:1c:
3a:de:c0:b2:f8:f7:52:7b:f9:a3:12:ef:6d:a7:bd:
36:cf:b7:a6:b6:57:4c:e1:40:a2:a6:ea:69:b5:3d:
52:b6:09:56:ae:a0:5f:ee:c2:39:5d:4b:6e:3f:1b:
c3:5a:73:cc:57:a2:9b:1e:ee:b7:b6:12:9f:98:51:
4d:13:09:27:b2:45:64:e5:fc:b5:8d:70:db:25:d5:
e6:07:d7:8b:f4:36:dd:b4:dd:25:f8:1d:1b:9b:45:
f5:16:4c:7d:68:3b:f6:f8:b0:5b:74:0d:7c:2d:a0:
e1:a3:75:48:dd:79:2b:30:78:9e:c7:9c:a4:22:1b:
94:a5:58:47:58:4a:4e:8a:09:a3:ce:5a:17:4d:8a:
a4:10:9f:8b:12:e6:95:b6:e8:87:5c:4f:5b:6c:24:
48:bf:79:e4:2b:e1:bf:51:62:34:5f:26:bd:c0:1f:
57:dc:82:7a:71:42:86:ba:d3:f8:2f:10:d6:c0:64:
a9:36:cd:5f:b5:d4:6f:56:2d:ca:8f:1f:46:dd:76:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:C0:85:56:CD:64:F7:E9:7F:37:BD:8E:4E:0F:F0:46:21:25:19
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/TH3AhVbNZPfpfze9jk4P8EYhJRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:67:54:52:ba:4e:60:e7:bc:23:6c:6b:8e:9e:6e:44:7a:e8:
b9:43:38:c3:83:80:ef:68:08:a7:f0:be:dd:b4:18:49:b5:f3:
7b:4e:40:46:f5:1a:6f:b1:80:71:e2:35:b5:e7:98:b0:1e:0f:
1f:84:0c:d1:b4:77:a2:2b:5b:ca:45:5c:26:ee:58:b1:51:19:
d4:27:e9:e4:c5:62:50:6f:db:72:d2:99:74:6a:62:47:35:85:
7e:ed:f7:b7:6a:39:4d:02:61:9e:97:a1:74:b8:09:5a:a3:60:
3e:d6:1e:08:b3:ac:de:ce:e6:78:ea:72:ad:a5:f6:1e:c4:5b:
06:8f:f6:77:b1:20:ae:1f:3f:24:11:b0:25:34:a8:25:ae:dc:
4a:53:55:05:c4:9a:98:e1:46:e6:ef:0b:63:29:68:9f:2f:d4:
6b:e6:7a:0a:cb:9a:63:77:a4:74:57:b0:11:b7:33:c9:91:10:
5d:89:33:8c:7c:8d:56:d2:85:41:ae:0f:e7:34:b2:6c:1a:b5:
63:02:11:0f:87:06:a5:9c:73:f8:9a:39:d2:c1:10:3e:db:ce:
3a:60:16:f9:2b:58:a4:b8:12:bf:17:1f:f9:c6:4c:31:fd:5b:
24:32:cc:b2:d2:e5:b5:99:b1:6f:04:71:8f:24:75:f6:65:33:
47:cf:ae:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:05 2025 by rpki-client