Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Ts3tZpKchh4M_wOW0_pEeis3hrY.roa
File: Ts3tZpKchh4M_wOW0_pEeis3hrY.roa (raw, json)
Hash identifier: 3knDlQmBaGBUb0KaHPuHXoZZ+Ud897wOUu8146wf8L0=
Subject key identifier: 4E:CD:ED:66:92:9C:86:1E:0C:FF:03:96:D3:FA:44:7A:2B:37:86:B6
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198E1893CE2E651D7A5DD2F48DFB727AE38
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Ts3tZpKchh4M_wOW0_pEeis3hrY.roa
Signing time: Mon 25 Aug 2025 14:02:04 +0000
ROA not before: Mon 25 Aug 2025 14:02:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 188.255.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:89:3c:e2:e6:51:d7:a5:dd:2f:48:df:b7:27:ae:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 25 14:02:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ecded66929c861e0cff0396d3fa447a2b3786b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:ae:92:14:9c:54:47:c6:4a:0c:b4:78:08:
f5:47:38:d4:fa:6d:80:6d:3c:67:aa:7d:18:7e:65:
76:90:d7:76:4b:dd:12:de:c9:6e:3a:d0:3c:84:69:
77:8e:be:08:3d:fc:3e:55:d5:66:de:1f:12:cd:72:
0f:b3:39:f9:ad:4e:e0:51:63:c7:b2:0c:25:fe:fb:
cf:d0:88:ca:78:cb:91:69:30:80:df:da:53:5d:8c:
65:72:d7:51:05:3c:7b:9e:48:f1:f1:c6:bd:04:81:
04:7a:c2:a0:bc:da:af:ac:a6:9c:2a:b7:d8:ff:43:
02:c4:f2:ac:92:af:45:7b:f0:3d:00:f7:97:27:64:
cd:db:3d:68:61:6d:4f:f2:80:66:92:13:2e:92:28:
50:0a:0f:36:b7:6f:f2:0c:0e:27:66:f7:2f:5d:bc:
80:c0:cb:bc:18:1c:4f:26:ca:62:b5:b4:4c:eb:09:
40:07:f1:09:63:7f:f9:09:4d:0b:bd:8a:11:80:d7:
4d:93:0b:01:e9:a0:aa:b9:5e:26:fc:f5:fa:c3:d9:
c3:bb:5c:21:3e:63:47:17:28:17:11:d5:5a:8b:f3:
64:a9:de:29:fa:7f:d7:e0:4c:55:d8:b8:e5:21:c2:
4b:63:58:c6:66:42:a6:ce:f2:ff:fe:81:4a:41:17:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CD:ED:66:92:9C:86:1E:0C:FF:03:96:D3:FA:44:7A:2B:37:86:B6
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Ts3tZpKchh4M_wOW0_pEeis3hrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.140.0/24
Signature Algorithm: sha256WithRSAEncryption
68:79:b1:71:bf:a6:3f:dd:66:80:9a:76:9f:c6:19:0d:75:ef:
c3:b2:ea:c2:fe:1e:92:fc:ba:16:0f:69:d6:40:61:35:a7:9d:
1a:3f:e3:17:29:12:e0:d5:1d:9d:07:36:29:80:a6:48:c7:94:
d1:af:d1:69:21:e5:41:f0:68:64:b9:38:8e:0c:65:e0:ea:33:
b1:e9:8f:fa:63:37:33:90:87:58:e8:7b:1f:5f:63:ed:5d:32:
e4:86:86:04:d4:0a:30:a6:e8:79:08:56:91:02:a0:61:56:61:
94:55:84:ba:41:38:cf:80:44:5e:74:cd:3d:44:d6:6b:95:d7:
5f:a5:1d:b0:54:09:fe:4d:1c:77:90:a7:f2:38:5c:dc:c0:c7:
b3:18:7c:f9:f6:a4:fb:5a:eb:42:d7:b4:66:40:ea:65:4f:70:
a7:5e:11:45:e6:21:89:04:dc:34:ec:9c:04:c3:51:87:8c:5d:
d8:1b:0d:6b:f3:27:d6:0e:4d:89:fb:58:9c:a6:fb:ed:bd:fd:
10:60:66:2c:fc:60:13:75:59:67:08:a9:06:38:72:eb:43:01:
af:b6:23:ae:57:a2:9c:5b:d5:73:38:fd:23:8c:04:44:3c:8c:
fc:46:46:32:ce:3e:f7:7e:de:a0:87:34:99:55:eb:0b:f8:a2:
2b:aa:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:53:58 2025 by rpki-client