Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/v827Klwx8U7EDB2WbdLf4CEXliw.roa
File: v827Klwx8U7EDB2WbdLf4CEXliw.roa (raw, json)
Hash identifier: BAU2KXwimUuepAhjPQcMIt+Q0c8KhENCD8ID/skeNjs=
Subject key identifier: BF:CD:BB:2A:5C:31:F1:4E:C4:0C:1D:96:6D:D2:DF:E0:21:17:96:2C
Certificate issuer: /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial: 0198E6E9476358585EDA90B97860617F42DB
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/v827Klwx8U7EDB2WbdLf4CEXliw.roa
Signing time: Tue 26 Aug 2025 15:05:04 +0000
ROA not before: Tue 26 Aug 2025 15:05:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49821
IP address blocks: 194.1.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:e9:47:63:58:58:5e:da:90:b9:78:60:61:7f:42:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Validity
Not Before: Aug 26 15:05:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfcdbb2a5c31f14ec40c1d966dd2dfe02117962c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:bf:02:04:8a:c4:af:97:0c:22:03:d6:a4:
23:6f:d7:02:1e:11:6c:31:cc:72:d1:28:cc:70:be:
6d:56:05:47:7c:10:1a:59:f1:d6:5b:b3:7f:1d:07:
0e:c3:0f:58:d6:27:ee:7f:7a:e7:f1:9a:04:34:26:
85:0b:60:e8:42:42:d2:80:33:b7:4f:00:29:28:8a:
38:3e:02:2f:77:67:da:96:f5:36:a7:13:cb:e1:9f:
62:ca:b9:1a:10:0d:55:7d:ad:6f:e6:78:9c:64:39:
7d:15:65:12:5d:bd:dd:79:20:2c:74:22:5d:7b:bf:
a6:af:4b:68:47:54:a5:48:36:07:04:1e:04:c3:71:
de:f4:c3:bc:f3:74:72:08:c1:88:5f:55:33:e3:5d:
8b:39:c8:65:f1:94:65:c6:de:0f:30:a1:9c:0a:1a:
6d:25:95:69:7d:77:4b:df:34:fa:b4:f8:93:4f:60:
b4:74:51:a6:9a:34:d9:ac:92:74:3d:b3:7f:9a:f0:
a3:41:36:ea:c5:b4:19:4b:4a:af:92:8c:03:fa:d0:
30:a6:86:d7:fc:6a:40:34:8c:bb:a4:33:a6:ce:1a:
02:10:50:43:78:2c:12:82:14:ed:e3:e6:a9:35:59:
b6:1a:cf:d6:85:35:05:29:e1:67:e8:e5:ee:a8:3a:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CD:BB:2A:5C:31:F1:4E:C4:0C:1D:96:6D:D2:DF:E0:21:17:96:2C
X509v3 Authority Key Identifier:
keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/v827Klwx8U7EDB2WbdLf4CEXliw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.232.0/22
Signature Algorithm: sha256WithRSAEncryption
09:66:b4:e5:01:9c:20:cc:b0:95:25:e2:75:9d:62:a7:e4:be:
cd:6d:1f:2b:52:6e:77:43:e2:af:cf:b4:75:bd:8b:6a:37:ba:
74:41:f4:e7:b0:20:44:4b:9f:3f:fe:2f:53:98:73:5f:e6:f9:
fe:36:77:65:86:3c:fa:09:0a:bf:99:18:3e:81:52:46:ef:ea:
53:49:8a:20:7a:74:99:c7:a5:0e:01:19:0e:f8:d1:b7:96:44:
5d:56:cd:f1:d1:7e:0b:39:97:31:fc:aa:c7:fa:06:86:13:0d:
6a:9a:3f:23:f9:20:76:db:65:2a:f5:6e:3e:58:6d:67:e1:e4:
d3:24:72:15:c2:42:79:ef:0d:2f:ba:f0:4a:33:ab:a3:fb:ae:
8c:6e:b2:2e:1b:8b:20:73:e8:fc:c5:14:42:37:c9:ce:a7:ad:
15:03:04:d9:25:b1:7d:a2:2f:56:83:44:8e:a6:57:1d:9b:72:
66:3f:f9:6f:b4:8e:c8:23:44:e2:cb:6b:d4:38:ef:f5:9c:c7:
6d:ee:37:1a:56:d7:ca:b3:46:82:6a:1a:24:57:90:68:fd:52:
91:e4:54:32:dd:9e:a9:66:db:3e:dc:ef:41:ef:e6:18:e8:38:
77:dc:36:e8:49:bc:53:6c:3a:10:d0:70:f5:47:f7:8b:13:e5:
e0:cd:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:54:58 2025 by rpki-client