Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/0QN5Ofx6WwMbvcTiOoejeiVWFBY.roa
File: 0QN5Ofx6WwMbvcTiOoejeiVWFBY.roa (raw, json)
Hash identifier: k+6IIDKqJuYMt9/EhXM2bPBbRQ5u5Kv99iIIWzz5/2A=
Subject key identifier: D1:03:79:39:FC:7A:5B:03:1B:BD:C4:E2:3A:87:A3:7A:25:56:14:16
Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial: 01983130E8D0849BB10F4C3C19BF8C256D45
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/0QN5Ofx6WwMbvcTiOoejeiVWFBY.roa
Signing time: Tue 22 Jul 2025 08:12:25 +0000
ROA not before: Tue 22 Jul 2025 08:12:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216139
IP address blocks: 178.217.100.0/24 maxlen: 24
178.217.101.0/24 maxlen: 24
217.144.102.0/24 maxlen: 24
2a03:80c0:abba::/48 maxlen: 48
2a03:80c0:face::/48 maxlen: 48
2a03:c980:face::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:30:e8:d0:84:9b:b1:0f:4c:3c:19:bf:8c:25:6d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Validity
Not Before: Jul 22 08:12:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1037939fc7a5b031bbdc4e23a87a37a25561416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:4b:04:ab:64:2f:0e:db:64:41:cc:64:28:
79:7e:32:97:81:c6:70:e0:84:59:7c:4a:d9:9d:b6:
4b:d1:31:46:9f:aa:dd:87:65:e5:34:02:e9:da:2f:
88:45:f1:dd:08:44:ef:d2:32:83:3a:d7:44:d7:24:
31:76:0f:e8:f7:37:55:60:f1:c4:c5:67:f4:90:e0:
29:d6:12:66:03:99:b6:8f:20:b8:ef:58:98:b6:21:
92:06:bc:40:72:de:30:1f:40:18:00:fd:63:43:27:
a7:e3:bb:fc:0e:67:63:78:85:c2:84:ae:d1:7c:98:
a8:eb:54:0a:28:17:8d:d7:bf:73:ff:2f:40:3c:1b:
36:66:70:98:16:c3:0f:76:74:fa:be:0f:61:50:a0:
ab:e4:d2:b4:92:f6:a7:16:8b:c2:e2:a2:42:0e:86:
a3:b5:50:f1:2b:6d:41:50:89:c2:17:3f:50:07:f5:
f3:4e:70:7e:75:b4:a7:68:79:03:90:c5:96:68:22:
c9:25:6c:3e:27:5c:3a:39:46:fc:d1:93:69:31:dc:
b6:86:71:dc:82:80:d6:d3:24:13:93:91:23:c7:a2:
30:60:76:89:08:22:dc:75:a6:de:06:82:73:9b:26:
4c:2a:ca:74:40:6c:be:49:c2:26:f8:79:28:5b:c7:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:79:39:FC:7A:5B:03:1B:BD:C4:E2:3A:87:A3:7A:25:56:14:16
X509v3 Authority Key Identifier:
keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/0QN5Ofx6WwMbvcTiOoejeiVWFBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.100.0/23
217.144.102.0/24
IPv6:
2a03:80c0:abba::/48
2a03:80c0:face::/48
2a03:c980:face::/48
Signature Algorithm: sha256WithRSAEncryption
18:55:9f:ed:15:63:c4:5e:e9:53:a2:30:37:83:41:3c:3b:4b:
db:af:d1:d3:c4:6e:6f:4d:c0:46:e9:32:b6:17:96:72:ac:f4:
d6:b1:6e:b8:34:03:a7:ec:a7:1e:27:05:c3:bf:4d:28:db:d4:
77:79:0b:a2:a0:75:49:a2:79:94:8a:a8:a4:88:36:39:2a:f4:
47:f4:3b:7b:c3:ca:20:1d:36:72:d4:5d:22:85:af:94:0e:47:
2f:2a:6b:40:ea:b0:05:d3:0e:a4:47:a3:a7:f8:f9:2e:e2:bb:
d9:db:9f:ac:1e:af:c5:cb:f4:df:c3:97:fc:29:a0:28:a6:1e:
1c:44:b7:bd:65:9a:e1:58:13:48:45:39:b6:10:4e:7f:ef:c2:
ee:f9:46:3e:af:dc:93:da:5d:5a:0b:87:26:6a:c6:98:a7:40:
a3:02:42:61:1e:67:dc:d6:08:ad:af:a6:5a:00:24:07:67:d5:
23:a4:99:61:11:d0:70:73:ae:64:b4:e2:0d:b1:db:b7:95:c6:
4b:26:32:eb:24:82:12:a8:6a:2d:eb:f0:b3:e3:54:b5:80:20:
d9:f5:1f:d9:b8:25:9d:06:3d:02:40:e6:d6:e9:bd:66:0d:a2:
70:cf:9d:67:48:53:77:9d:03:d5:37:33:1e:cd:9d:d1:b8:8e:
48:1b:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:45:21 2025 by rpki-client