Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6IICr4lMVMsvtn9b4MRikMRKWKE.roa
File: 6IICr4lMVMsvtn9b4MRikMRKWKE.roa (raw, json)
Hash identifier: eRdF+3nhnwOdQL7JTywZTALj/SDCKL8GpuA0SWazvqM=
Subject key identifier: E8:82:02:AF:89:4C:54:CB:2F:B6:7F:5B:E0:C4:62:90:C4:4A:58:A1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01989916F4B1E120E792C36F94C2C8B653E9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6IICr4lMVMsvtn9b4MRikMRKWKE.roa
Signing time: Mon 11 Aug 2025 12:24:34 +0000
ROA not before: Mon 11 Aug 2025 12:24:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207483
IP address blocks: 194.87.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:16:f4:b1:e1:20:e7:92:c3:6f:94:c2:c8:b6:53:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 11 12:24:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e88202af894c54cb2fb67f5be0c46290c44a58a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:1d:9f:2b:6e:9d:85:cd:90:7b:e8:0d:07:
c4:e9:ca:74:03:3a:47:f3:1b:37:d2:01:54:1b:fd:
ef:c2:8c:ad:93:fb:85:3f:12:c8:2a:a1:70:31:ec:
90:38:d0:ea:ca:11:19:4d:5b:40:f1:d8:47:4d:89:
c2:20:19:42:fb:73:8d:12:fa:1a:c2:47:2e:da:78:
d1:9a:15:50:76:c7:e6:a4:49:cb:6b:a5:74:70:48:
0e:59:53:4a:0b:20:da:3d:5e:d3:ae:26:e7:a7:76:
79:59:2c:ab:80:1a:b6:e7:7f:3b:6a:bc:04:99:06:
fd:54:2d:12:3f:9b:4f:36:44:0b:24:1d:21:02:60:
a5:db:68:a3:7d:aa:8e:ab:dd:83:ac:2d:2b:df:8e:
1d:5f:bc:6a:e4:9c:be:fb:6a:df:fd:d0:9e:9d:54:
a9:a5:60:f7:3b:4c:d7:09:86:53:cb:0c:f1:01:c6:
63:89:9d:71:de:d3:d6:36:20:cf:9e:f8:d4:9c:96:
07:e7:7d:96:7f:10:dd:9a:24:e8:ab:f6:4c:ac:16:
9b:fe:5c:86:7e:cf:e4:6c:40:2a:f4:3c:ae:d7:e6:
34:d1:a2:90:d4:b6:15:6b:38:4e:e6:b7:6f:fd:13:
11:fb:60:83:2d:48:66:9b:83:d1:f5:24:85:aa:ee:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:82:02:AF:89:4C:54:CB:2F:B6:7F:5B:E0:C4:62:90:C4:4A:58:A1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6IICr4lMVMsvtn9b4MRikMRKWKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fa:47:87:1b:37:4b:14:8e:f9:f1:b6:34:55:6e:ea:a1:e3:
45:2f:27:06:fd:1e:9e:38:aa:c3:c3:9b:a6:d1:73:70:22:f3:
b1:5a:5e:45:ba:69:0b:c0:21:7a:d2:2f:5d:09:95:f1:0b:c1:
8e:a2:f4:bc:5c:99:ee:3a:8f:e1:87:34:2a:05:7d:8c:71:bc:
42:88:d1:fa:99:c6:ec:59:ec:a3:8a:cc:df:16:c1:24:64:a0:
4b:a0:ca:12:04:68:69:45:93:2e:5b:c3:56:ba:4e:5b:51:7f:
c9:b4:c0:3b:1d:73:e2:bc:a3:e9:d4:af:65:59:2d:76:88:58:
1a:f9:a1:90:47:d9:2f:7a:78:61:b1:1e:7d:a1:1c:3e:a2:3e:
1c:ec:f2:9f:4a:b0:24:8a:a0:a5:f5:2d:2c:c4:59:27:23:83:
f1:e0:17:2b:55:3e:c5:be:42:6f:e0:3c:c2:4e:f4:0a:d7:ce:
83:c9:60:f2:b4:52:d2:47:bf:60:bd:a0:a5:25:b1:21:14:6f:
41:d5:cf:ef:be:18:24:77:4d:28:68:0e:08:09:43:70:ca:56:
a5:35:81:0d:28:50:79:c0:28:5a:dd:75:8a:34:e1:d5:5f:1b:
87:ea:a9:75:13:aa:7e:78:e6:57:ca:39:7b:5f:bf:12:68:91:
e8:62:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:43 2025 by rpki-client