Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/dv3-UDRo-QCoPMwkT3OMYFFbOg8.roa
File: dv3-UDRo-QCoPMwkT3OMYFFbOg8.roa (raw, json)
Hash identifier: pBj1g6kNC1lCzmrnByXYXnQfvQx7VuBxAQQxYeHelao=
Subject key identifier: 76:FD:FE:50:34:68:F9:00:A8:3C:CC:24:4F:73:8C:60:51:5B:3A:0F
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 0197FEAEAAC9D894F4BA3AF5C3CA69E0EAC5
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/dv3-UDRo-QCoPMwkT3OMYFFbOg8.roa
Signing time: Sat 12 Jul 2025 12:49:09 +0000
ROA not before: Sat 12 Jul 2025 12:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47216
IP address blocks: 87.248.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:ae:aa:c9:d8:94:f4:ba:3a:f5:c3:ca:69:e0:ea:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 12 12:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76fdfe503468f900a83ccc244f738c60515b3a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:79:0e:c4:9f:07:ef:ca:30:bf:a3:90:c0:
84:8c:40:fe:91:99:3b:4a:bc:2a:99:ea:ff:20:8e:
c7:f2:44:7a:f7:62:2e:24:ba:7e:25:9e:11:bc:cf:
da:e2:e8:22:86:a1:c6:6c:da:3e:10:67:62:b4:7b:
13:dc:20:b7:64:de:8c:44:32:52:ce:05:74:a7:c3:
54:c5:da:d1:15:57:55:c8:2d:8e:58:67:25:8a:3e:
37:13:4c:80:18:88:48:22:fd:03:f1:95:a7:50:06:
51:5c:cf:26:26:2f:d8:7b:99:9a:f1:6e:ac:58:47:
5c:b0:98:5d:3e:05:a3:c9:39:8a:38:44:0a:0f:17:
6a:00:47:c2:76:cf:42:5d:15:28:38:39:e2:2f:65:
bf:c8:91:f9:cc:1c:13:2f:dc:5f:f9:66:4e:e8:34:
d6:86:de:1c:3a:34:91:72:60:f8:d1:eb:d4:32:75:
dd:23:f2:e3:ae:21:d4:43:6d:dd:78:c1:6f:f4:7b:
eb:db:33:cd:2c:ed:77:de:27:48:97:ec:8b:a1:30:
a2:1a:b6:90:f8:a5:17:c8:6d:ea:2d:29:6d:94:7b:
27:70:eb:98:36:c4:a6:33:1a:50:7c:d8:0e:8f:17:
b4:d7:82:57:53:f0:13:32:45:fe:ca:4b:af:23:c5:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FD:FE:50:34:68:F9:00:A8:3C:CC:24:4F:73:8C:60:51:5B:3A:0F
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/dv3-UDRo-QCoPMwkT3OMYFFbOg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:51:52:0e:cc:d6:47:c5:d6:32:ad:01:b2:95:29:11:85:39:
32:b3:77:9f:5a:c1:6a:3a:fc:c9:d5:66:55:a9:ce:e1:b7:0c:
a9:79:a7:5f:62:7a:be:a1:21:81:38:6a:57:04:6c:9a:de:bd:
5f:b0:b1:b8:c4:a2:96:3c:7f:c7:93:f3:8a:de:50:fb:67:81:
f9:8f:aa:36:3a:aa:b6:30:98:10:c5:ff:1e:6d:36:ab:73:6d:
bf:e0:03:93:3d:a1:5b:a3:5b:83:ab:97:87:49:47:96:ed:7f:
12:88:d9:33:c3:f2:f5:f6:6d:c5:9c:55:e5:c1:98:6f:0d:03:
da:f9:f1:54:06:d6:e2:6d:c9:c4:50:86:dc:27:cc:d4:39:f0:
81:30:65:56:45:b6:b2:e0:e5:b5:b4:8e:17:74:14:2e:d3:13:
9f:cc:24:64:a9:38:76:a6:23:88:28:ea:a9:bb:4d:62:bd:97:
c5:dd:fd:26:f6:7d:01:b9:ea:67:e6:91:09:35:f2:ff:9b:1f:
77:39:25:a1:d2:f2:54:b0:6a:3c:79:6d:12:cd:38:ea:be:58:
d6:12:33:7e:34:66:3a:12:71:9c:96:bf:3c:f0:cf:1a:f6:f4:
dc:4e:97:25:af:d6:c0:9d:b3:eb:7d:a9:3c:14:14:bd:d3:ca:
fb:87:4f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:15:14 2025 by rpki-client