Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rXHqHnfZFR8h6uZe9kIAxARXSQs.roa
File: rXHqHnfZFR8h6uZe9kIAxARXSQs.roa (raw, json)
Hash identifier: W4gnnAmJ7Fat6kaBIArMUXEUa7XRKiRxqOyP1i6A1d8=
Subject key identifier: AD:71:EA:1E:77:D9:15:1F:21:EA:E6:5E:F6:42:00:C4:04:57:49:0B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198FB9006F2ED359B33C387CE9C77B799D4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rXHqHnfZFR8h6uZe9kIAxARXSQs.roa
Signing time: Sat 30 Aug 2025 15:19:36 +0000
ROA not before: Sat 30 Aug 2025 15:19:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fb:90:06:f2:ed:35:9b:33:c3:87:ce:9c:77:b7:99:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 30 15:19:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad71ea1e77d9151f21eae65ef64200c40457490b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:23:01:9c:14:93:bc:0e:db:2f:4c:c0:a9:
e4:14:f2:45:0f:6c:ca:5a:bd:62:76:24:f0:f6:72:
fa:3e:b9:8a:fc:f9:48:f4:5b:84:00:99:a8:e7:2e:
84:5a:81:d0:73:a3:59:68:8d:18:a4:91:8e:08:52:
e9:e5:7b:5f:f5:8d:f2:e1:b8:73:8b:46:78:9c:2a:
b4:6f:2d:b5:5e:82:52:df:e2:ea:a7:4f:98:4c:77:
54:af:22:44:6d:2d:4f:b4:a2:13:a0:63:e7:07:b8:
24:4e:8b:a0:d8:58:5b:e7:16:87:ee:e2:c0:86:f5:
bd:49:05:e4:cf:6f:71:86:0f:0c:b5:64:65:67:50:
2c:ee:6e:51:4f:4d:10:c1:3e:66:80:6f:97:c1:98:
ce:29:b7:e8:22:b6:6b:39:de:65:d3:c4:bd:14:ef:
36:f3:a5:5d:c9:ab:e4:8d:3e:3a:eb:c4:87:7c:56:
5b:3f:e5:37:0a:e2:c4:78:85:17:f2:16:c1:8e:9e:
70:4a:0b:5f:5a:cc:e1:2d:2f:47:e7:8d:41:0f:16:
73:35:29:a2:54:9f:2b:31:ef:e0:7a:b8:51:fb:fb:
bb:8d:94:82:ec:7e:11:6d:17:ad:b6:7f:6a:4f:11:
ab:e0:85:4f:a0:0f:3f:23:0d:f0:c9:22:a8:37:10:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:EA:1E:77:D9:15:1F:21:EA:E6:5E:F6:42:00:C4:04:57:49:0B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rXHqHnfZFR8h6uZe9kIAxARXSQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f0:e8:2a:00:a1:cd:3a:1c:06:d1:d2:86:13:c9:dd:74:61:
8b:65:10:03:6c:56:86:28:95:6a:45:05:fd:06:6f:0f:18:d4:
a2:88:c7:14:7a:83:73:0c:73:21:c9:8d:01:b0:c3:fa:c7:9a:
da:20:04:de:3a:c8:5c:b3:e4:e6:76:bd:9d:32:61:21:f2:21:
f1:2b:1a:08:87:c0:fd:fd:dc:06:83:07:24:1b:42:6e:3e:eb:
50:55:bb:89:bc:86:41:62:d5:3b:f5:a4:a8:2e:ee:2c:ed:ee:
a8:5c:f9:5a:50:03:84:2e:a6:b7:51:e6:b1:de:86:95:40:1c:
e2:d2:dd:4f:d2:4d:7f:01:f9:83:97:6d:ca:df:69:2d:db:43:
30:d6:6b:a3:6b:ff:ff:58:d4:7f:69:3a:9f:7b:52:58:c9:8d:
b0:cb:8d:ab:48:92:ad:fa:c5:e3:2b:b6:3d:1e:51:b0:08:ef:
23:6d:e4:f5:47:d6:e7:2c:39:4e:fe:b2:c4:4c:2c:43:e7:4b:
40:1a:c2:25:52:8d:6c:cf:51:0a:13:5e:22:28:98:10:2f:cc:
65:44:59:79:49:36:a9:db:08:9c:05:1f:e6:8e:9e:81:19:19:
6e:67:8a:62:07:0f:3f:18:ee:f0:64:9b:ed:15:da:55:8b:24:
46:0c:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 00:10:03 2025 by rpki-client