Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/tPUGO6EN7pg8npdgzDta5PAaca4.roa
File: tPUGO6EN7pg8npdgzDta5PAaca4.roa (raw, json)
Hash identifier: Mzau5dFbsS/stxb1CJCbAWZ2z4+PVDKEcNnmESuuzxY=
Subject key identifier: B4:F5:06:3B:A1:0D:EE:98:3C:9E:97:60:CC:3B:5A:E4:F0:1A:71:AE
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0198E65B5E3673CFE5203F526A6959ED3235
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/tPUGO6EN7pg8npdgzDta5PAaca4.roa
Signing time: Tue 26 Aug 2025 12:30:04 +0000
ROA not before: Tue 26 Aug 2025 12:30:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213535
IP address blocks: 107.161.168.0/24 maxlen: 24
107.181.134.0/24 maxlen: 24
155.254.35.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
198.105.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:5b:5e:36:73:cf:e5:20:3f:52:6a:69:59:ed:32:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Aug 26 12:30:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4f5063ba10dee983c9e9760cc3b5ae4f01a71ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:87:6c:80:e1:69:52:40:b9:0d:d7:70:27:
2a:b5:c4:c7:98:b1:33:b5:2c:16:7a:28:58:4a:bf:
61:84:e6:50:ef:5a:4c:3e:4c:2d:11:99:2f:f1:b5:
0d:56:c0:e6:6a:d2:00:64:e1:d3:f1:49:06:0b:28:
a8:de:34:a5:e5:7f:47:87:b6:e3:40:92:4a:50:c9:
f9:62:0f:03:32:d5:60:e1:cc:e7:b9:79:f5:c6:94:
05:87:3c:8a:35:25:80:47:77:2a:2e:63:8c:a1:ce:
89:50:82:9d:9c:be:58:ed:56:1b:35:94:a8:be:24:
4c:8f:78:ca:86:ac:84:fa:5c:cb:94:1a:ae:4d:62:
5c:a2:6a:cd:23:b9:e3:86:97:7f:4c:b0:f9:3f:22:
a7:4a:44:d1:02:5a:e5:f8:53:6b:d6:15:f5:b3:36:
42:c1:15:8f:4b:30:85:72:c1:78:d8:b9:ba:bd:fb:
f5:f8:c3:09:4f:e3:35:98:c6:87:f8:55:13:24:b7:
2e:d9:06:fe:84:06:a6:a7:23:d3:7d:ea:09:39:01:
1a:d8:eb:c6:42:99:13:48:79:49:77:9c:e6:c2:86:
ab:b6:b3:87:8b:82:b0:0c:83:c3:3d:45:e5:57:37:
10:d9:dc:38:aa:ad:2c:34:35:0a:f0:83:9a:50:33:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:06:3B:A1:0D:EE:98:3C:9E:97:60:CC:3B:5A:E4:F0:1A:71:AE
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/tPUGO6EN7pg8npdgzDta5PAaca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.168.0/24
107.181.134.0/24
155.254.35.0/24
162.217.248.0/23
198.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:2b:09:27:ea:b8:57:54:0c:79:05:48:ec:c3:a6:09:d9:87:
e2:98:3c:8e:78:24:79:ee:65:07:fe:fa:e3:21:31:41:b7:57:
57:9f:5c:5a:7d:b6:65:5d:e6:d9:71:61:06:65:6c:e5:cd:c3:
48:e3:35:5d:6a:7a:de:1a:8d:a2:2a:91:e0:8f:78:b9:91:59:
ad:11:9d:f1:5c:dc:37:c5:45:2a:9f:60:6e:5b:da:2b:15:c8:
07:c5:3f:cb:70:df:fe:65:07:4c:16:84:ff:82:3e:72:6f:22:
fb:47:24:fa:4b:fe:71:36:c4:5d:fe:7f:22:97:6d:72:24:07:
eb:a2:07:b3:ad:89:ab:7b:a6:b9:5a:b8:24:00:7b:c6:dc:a3:
54:76:01:f0:a4:7f:e0:1e:ea:ed:43:33:81:a2:84:94:94:48:
a5:27:d2:dc:30:b8:49:3d:48:48:64:2c:08:d6:db:cd:83:19:
5d:75:93:78:7a:ad:f5:27:fe:e4:41:85:91:63:40:d5:35:34:
29:81:ca:6c:4e:01:a7:ab:7e:f2:65:12:6b:c6:db:05:9c:81:
60:ff:be:39:bf:ee:24:43:1c:64:dc:63:02:3b:60:f4:3a:8e:
20:79:c7:fa:67:34:6b:41:b8:73:8d:39:c2:7f:67:6e:1f:3d:
81:a9:56:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:50 2025 by rpki-client