Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/9GbyiyLxtXV_BgJp4WTM5Fv9u7o.roa
File: 9GbyiyLxtXV_BgJp4WTM5Fv9u7o.roa (raw, json)
Hash identifier: Oph3EY1I7qKANoza6w+PZiQdqIJHyMeGx03HDQGfB8E=
Subject key identifier: F4:66:F2:8B:22:F1:B5:75:7F:06:02:69:E1:64:CC:E4:5B:FD:BB:BA
Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial: 0198984C7AEEA2FE2DD47D698CF2C870E6F1
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/9GbyiyLxtXV_BgJp4WTM5Fv9u7o.roa
Signing time: Mon 11 Aug 2025 08:43:25 +0000
ROA not before: Mon 11 Aug 2025 08:43:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56797
IP address blocks: 213.174.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:4c:7a:ee:a2:fe:2d:d4:7d:69:8c:f2:c8:70:e6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Validity
Not Before: Aug 11 08:43:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f466f28b22f1b5757f060269e164cce45bfdbbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:36:c4:39:ca:87:9d:ad:d1:a7:55:bf:11:1e:
4d:b2:18:fa:66:c5:2d:ad:31:dd:8e:dc:7b:15:9d:
d6:1e:a6:b0:7c:9b:1c:ef:3b:35:33:e5:4c:96:f9:
0d:1c:30:c9:cc:59:00:dc:a9:13:21:5a:20:52:5e:
48:f5:73:02:0e:59:b9:93:78:bb:20:37:bf:cd:0b:
b5:87:c2:1c:c7:9e:21:dd:14:29:c1:9f:af:8b:d4:
d1:e4:05:69:4b:10:57:77:56:97:3f:78:96:52:64:
2e:11:c9:32:e9:4e:4b:7c:92:8d:22:ca:23:45:f6:
25:3f:ec:d9:fe:f8:a5:36:b3:32:09:67:cb:bb:53:
cb:56:62:22:c9:83:5b:c4:a9:b4:5f:fd:66:3d:a8:
09:b6:25:ea:60:01:b3:40:6a:01:cd:c7:07:d6:3a:
d8:74:c7:08:ce:d5:e6:7c:f8:fd:ab:31:ec:0a:c8:
87:a6:fd:e5:80:9a:84:3f:ec:6a:4d:c9:ba:32:a7:
16:23:a0:6a:cd:a5:0a:c5:39:c3:82:e9:c6:b2:15:
aa:cf:93:19:31:4d:c7:8a:28:ab:31:ff:b7:a9:eb:
95:28:21:48:66:75:6e:54:8b:d2:7f:40:7c:99:31:
02:b4:8e:30:e5:33:00:10:2b:20:ad:4a:18:72:5b:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:66:F2:8B:22:F1:B5:75:7F:06:02:69:E1:64:CC:E4:5B:FD:BB:BA
X509v3 Authority Key Identifier:
keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/9GbyiyLxtXV_BgJp4WTM5Fv9u7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.174.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:bf:8d:4f:46:5d:82:e6:e2:f1:7e:da:73:9f:17:df:81:0e:
ae:5f:60:bf:f8:97:b0:b8:10:a0:90:e1:35:23:af:9a:9f:91:
cc:35:c6:56:a2:44:2d:6a:8c:ed:43:2a:ad:41:3f:2d:b8:db:
f3:74:bd:5e:a2:7a:8e:f1:92:ad:90:2e:7e:f8:c8:e5:f1:67:
77:d4:a9:0b:25:a0:7d:14:c6:57:f7:df:fb:a9:0d:0e:19:f2:
ae:e6:9c:a7:fa:d0:58:29:b4:c0:21:27:97:2d:40:ad:f4:a5:
ca:9e:01:e4:34:ed:b8:0f:9f:c3:d5:bc:06:c3:96:80:de:a6:
42:95:e2:81:1e:7c:91:fa:af:7c:0e:03:56:03:45:e4:02:b7:
f8:28:ba:b0:c0:c8:3f:88:16:64:1e:fa:0b:82:2a:87:d2:44:
30:7a:33:22:1f:97:cd:1b:97:d3:81:df:c1:83:18:5b:e6:df:
01:45:b6:ac:20:39:cd:f5:c6:0d:0a:be:0a:ef:f4:03:5b:8f:
22:7d:85:40:35:23:48:37:b2:75:25:10:f2:a6:3b:a0:4b:e8:
9d:ed:bd:72:2d:c4:be:af:c7:84:8b:17:ce:9c:68:63:f4:bb:
ee:06:38:52:4a:5f:70:d2:fc:7a:10:4b:e3:8c:cc:22:a5:7e:
e6:03:d0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 10:29:36 2025 by rpki-client