Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6kHy1rSLRBeyRna80tpk8gv-kNY.roa
File: 6kHy1rSLRBeyRna80tpk8gv-kNY.roa (raw, json)
Hash identifier: NxVjX4Rh3JqtadzYXtdF0stpzDaRN9qgRJW/Im9iNcM=
Subject key identifier: EA:41:F2:D6:B4:8B:44:17:B2:46:76:BC:D2:DA:64:F2:0B:FE:90:D6
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01992932F883204AA09E120DCCA1177798C5
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6kHy1rSLRBeyRna80tpk8gv-kNY.roa
Signing time: Mon 08 Sep 2025 12:00:30 +0000
ROA not before: Mon 08 Sep 2025 12:00:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213257
IP address blocks: 5.180.107.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:32:f8:83:20:4a:a0:9e:12:0d:cc:a1:17:77:98:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 8 12:00:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea41f2d6b48b4417b24676bcd2da64f20bfe90d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:90:b5:ac:21:99:a9:28:82:e6:95:04:46:
b2:bf:41:c2:a6:c9:3b:56:38:da:54:d9:18:b7:43:
30:82:a6:e2:89:ee:91:21:ad:78:87:6b:63:95:9d:
25:4b:70:bd:b5:93:1b:a5:1f:e1:81:95:7f:aa:e5:
b2:ab:11:85:88:29:a2:c7:2d:8f:81:8d:f2:9c:ce:
75:d7:3d:a4:dc:bc:a8:0d:c4:90:75:d1:09:64:07:
8d:e2:9b:9a:60:29:45:f2:25:3d:85:82:85:ef:e9:
36:f2:ae:5d:3a:b2:60:27:84:0a:26:f1:82:65:38:
73:f7:6e:54:20:2d:7a:5b:81:ed:21:be:ab:1f:32:
99:44:61:1a:41:98:d0:94:04:79:da:38:7d:ee:06:
8e:b1:ba:ed:35:a9:5b:44:40:c2:70:c5:5f:db:b8:
e5:67:04:c2:23:93:b2:fd:42:9f:6a:a8:2a:fe:ab:
d9:42:73:73:a1:cc:06:01:3e:12:9a:bb:3d:2f:3f:
32:bf:54:aa:18:ce:28:63:f6:78:4a:66:86:19:b7:
a2:6a:e5:c8:fa:b0:00:de:ec:28:03:ec:f2:09:c6:
a7:73:a9:d7:08:9b:46:25:f7:24:c2:60:70:30:5c:
fc:7c:b9:a6:c9:f9:82:59:dc:71:5d:77:83:8d:a4:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:41:F2:D6:B4:8B:44:17:B2:46:76:BC:D2:DA:64:F2:0B:FE:90:D6
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6kHy1rSLRBeyRna80tpk8gv-kNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
77.83.202.0/24
194.116.228.0/24
Signature Algorithm: sha256WithRSAEncryption
48:64:0b:92:ee:03:41:f0:a9:76:d2:fa:d6:a0:4e:32:8f:e1:
01:3f:6e:0c:2c:61:a1:ca:38:30:2a:30:40:9a:76:a6:89:40:
9f:be:ba:51:6b:6f:58:3d:95:a4:07:5a:08:22:85:1b:c3:9a:
26:9f:d8:48:0e:eb:c7:fc:bd:b4:92:cf:d6:1f:cd:a6:e8:70:
1b:95:e0:ac:67:67:87:fd:c1:ac:35:82:10:85:fe:23:75:ba:
bc:ea:62:a2:70:d0:aa:27:45:1a:5d:d6:c0:d6:07:dc:af:12:
de:b9:83:6b:27:8e:13:c5:04:b9:66:a0:d3:74:9f:2f:36:48:
49:d6:1c:b6:63:61:25:a4:84:0d:48:96:9c:20:a8:ac:15:6e:
0a:aa:0d:8c:5e:c3:8f:51:74:16:09:e5:fa:2f:9c:8e:41:96:
9e:88:0d:0c:a1:24:2c:d4:bd:50:1c:36:ef:67:2d:91:91:22:
6d:92:56:56:06:4c:cc:3f:91:1a:da:0f:2d:f7:2b:74:51:03:
d5:d0:78:b7:ee:3b:ab:22:d3:6d:1f:5e:c0:06:78:8a:ee:62:
49:b8:81:ad:4c:78:4b:26:22:95:11:61:2e:06:4a:97:14:f8:
5e:56:7c:5c:d4:c3:67:cc:3e:17:bf:20:4a:a0:08:07:bb:99:
02:17:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:49:22 2025 by rpki-client