Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/3JTYWxWXMUlyPsFripSkK_Nau3I.roa
File: 3JTYWxWXMUlyPsFripSkK_Nau3I.roa (raw, json)
Hash identifier: 3iZejOLP/U36oAL4EhiLvzfSygmN4+3PwFZ1oA/5JkY=
Subject key identifier: DC:94:D8:5B:15:97:31:49:72:3E:C1:6B:8A:94:A4:2B:F3:5A:BB:72
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0196D33382651B01A74E80A162F45C629F09
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/3JTYWxWXMUlyPsFripSkK_Nau3I.roa
Signing time: Thu 15 May 2025 09:08:10 +0000
ROA not before: Thu 15 May 2025 09:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49199
IP address blocks: 62.76.74.0/23 maxlen: 24
62.76.96.0/23 maxlen: 24
193.232.161.0/24 maxlen: 24
193.232.169.0/24 maxlen: 24
193.232.183.0/24 maxlen: 24
194.190.11.0/24 maxlen: 24
194.226.34.0/23 maxlen: 24
194.226.137.0/24 maxlen: 24
195.19.10.0/23 maxlen: 24
195.208.16.0/24 maxlen: 24
195.208.220.0/23 maxlen: 24
195.209.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:33:82:65:1b:01:a7:4e:80:a1:62:f4:5c:62:9f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: May 15 09:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc94d85b15973149723ec16b8a94a42bf35abb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:e7:2b:b6:bb:cf:39:ef:8f:86:55:e9:9d:
7c:b9:06:67:df:43:fe:f4:90:e1:05:77:9f:32:76:
8c:1e:ab:2b:e5:4a:48:58:d5:30:c7:5f:4a:c6:02:
ec:d2:56:a7:ac:ea:a1:3d:e7:bb:8d:f1:5c:b1:fe:
f2:6b:c3:43:91:7e:5d:9e:d0:6d:22:9c:e0:01:a8:
c8:3e:99:d7:63:92:9e:cc:65:de:4a:93:ca:cd:d1:
5a:73:c7:d9:5c:37:07:ff:02:92:42:c0:8d:8c:f0:
3f:45:ed:28:79:28:52:5b:b9:51:50:02:76:fd:f4:
e0:1c:aa:3f:85:e6:c5:48:04:80:b0:85:72:09:ff:
b9:a8:75:13:d9:0f:8b:e5:0b:01:a4:56:c5:2d:ff:
9a:84:80:5e:28:e6:44:4d:f8:0a:6e:22:e6:38:98:
01:3a:a0:07:49:3d:12:9b:9a:cb:e2:24:05:6c:69:
d5:05:65:d4:1e:78:b5:4c:10:37:79:78:c7:b6:b5:
94:e8:a3:8e:6a:9a:c7:91:88:49:32:5c:70:51:90:
75:8c:d3:50:64:ea:e3:9e:c0:c7:cc:c6:14:22:fb:
d8:bb:e7:b7:f9:90:40:c5:d4:de:2f:b8:01:46:f3:
6b:49:dd:0c:1b:50:bf:75:f6:08:ee:fb:0d:c0:6f:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:94:D8:5B:15:97:31:49:72:3E:C1:6B:8A:94:A4:2B:F3:5A:BB:72
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/3JTYWxWXMUlyPsFripSkK_Nau3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.74.0/23
62.76.96.0/23
193.232.161.0/24
193.232.169.0/24
193.232.183.0/24
194.190.11.0/24
194.226.34.0/23
194.226.137.0/24
195.19.10.0/23
195.208.16.0/24
195.208.220.0/23
195.209.136.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c3:6d:69:b9:17:74:9b:75:82:97:58:7d:6f:1a:66:1c:39:
fd:e3:b5:ce:22:b2:99:a9:bb:8f:4d:77:06:60:b4:86:a0:45:
91:14:7a:9d:b4:97:9f:ae:09:30:7d:24:4a:c5:4e:47:e5:3f:
5c:e1:0b:cf:18:57:6a:b6:d4:a5:02:d8:7d:e7:b7:60:da:19:
6e:30:60:7e:03:f1:58:82:a7:73:c5:8c:1a:5f:1c:d8:2a:87:
54:c8:7b:21:98:a2:ee:ea:1c:90:fd:a4:cd:e3:b1:ea:2d:82:
28:7e:e3:ac:20:b0:76:d7:1e:9f:e7:43:c6:08:e4:fe:01:19:
a2:36:47:c2:26:f5:3a:6d:12:e5:a3:8e:8d:b9:e8:f4:e4:23:
69:c8:1b:9f:cc:bb:1a:c3:6b:a7:ed:60:9b:8b:7d:30:a4:18:
48:c1:cc:13:5f:dc:f8:74:4f:fd:57:18:0b:38:22:da:7d:e1:
bf:42:44:bf:09:24:53:d4:50:b0:26:2c:ad:16:d2:f0:3f:3e:
7c:12:cc:6f:f1:24:29:4d:8d:6f:f3:7a:ad:7c:39:9d:97:cc:
0d:3e:41:a4:d2:6f:b5:30:81:e6:aa:db:7b:c1:89:96:f7:3c:
75:8e:91:99:7d:11:6c:79:8e:d2:4c:ef:e7:6d:9d:95:46:b1:
e8:8f:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:29:30 2025 by rpki-client