Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IwrsT8CJlfBaLKUWzGc9cTbMCyE.roa
File: IwrsT8CJlfBaLKUWzGc9cTbMCyE.roa (raw, json)
Hash identifier: AVxA/ncnMWHfPd3faPtshUOsjzS5Z6AmWFLDMeoH/3g=
Subject key identifier: 23:0A:EC:4F:C0:89:95:F0:5A:2C:A5:16:CC:67:3D:71:36:CC:0B:21
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01988403F7B6F4E836133C1EA545B88BEE43
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IwrsT8CJlfBaLKUWzGc9cTbMCyE.roa
Signing time: Thu 07 Aug 2025 10:11:49 +0000
ROA not before: Thu 07 Aug 2025 10:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216139
IP address blocks: 193.222.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:03:f7:b6:f4:e8:36:13:3c:1e:a5:45:b8:8b:ee:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 7 10:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=230aec4fc08995f05a2ca516cc673d7136cc0b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:9a:52:28:c4:d2:94:e1:f7:27:6b:7a:d0:
9a:b3:28:85:84:18:15:01:59:bc:8d:65:78:5d:3b:
be:2f:b6:dc:c6:68:87:3e:a4:8f:05:c2:8e:fe:dd:
c6:14:8b:a8:a5:86:58:93:e5:ab:b6:70:9c:dc:74:
67:5e:bc:6c:86:47:06:82:bc:67:01:6a:77:5d:6c:
6c:46:af:d5:47:f0:15:c4:ea:fd:2e:e2:00:6f:8f:
05:2e:37:fe:23:e8:19:d2:95:09:73:45:93:cd:e3:
f2:e3:3f:a7:14:b5:22:32:dd:c7:1e:7c:20:02:9b:
98:1d:92:db:a5:96:8e:d2:8b:f5:cc:ef:cf:e5:ec:
26:f1:3f:3f:df:27:53:bf:8f:38:cc:36:61:74:9e:
25:3c:2a:af:f1:e2:77:c2:0c:ae:b1:c2:6e:63:27:
33:97:5a:31:3f:bc:0f:be:68:32:01:35:12:39:67:
1f:49:31:45:b8:90:db:49:20:57:d6:c4:1e:8c:a9:
9c:83:da:ff:e1:88:43:f2:e0:54:92:a0:b5:d4:f3:
52:0e:e6:e2:7f:c9:da:37:ea:ba:a2:1b:e3:52:77:
7d:a3:32:09:24:d2:d9:b7:50:6a:a4:07:c9:92:3c:
a4:e6:09:12:34:6f:e2:5a:32:1a:e4:71:24:f7:cb:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0A:EC:4F:C0:89:95:F0:5A:2C:A5:16:CC:67:3D:71:36:CC:0B:21
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IwrsT8CJlfBaLKUWzGc9cTbMCyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5b:fc:d8:db:35:7c:f3:7f:3c:32:17:98:b8:fa:43:97:ce:
7a:ee:dd:d3:2a:7b:4d:2b:34:60:5c:8a:f6:8b:4c:03:e4:85:
91:78:b1:c2:b8:92:e7:95:5e:3b:f4:67:36:66:9d:69:4b:a5:
17:96:ae:c2:0e:93:f8:b4:69:a4:87:3e:aa:5a:d8:ea:51:5b:
07:80:1f:c2:7f:0d:63:98:69:4e:e0:9b:dc:72:34:47:d3:24:
b2:a9:f6:0a:c8:44:8c:ac:01:38:f8:31:08:14:1f:cd:eb:dc:
6a:7f:83:df:6e:75:e5:b5:39:43:da:a6:0d:84:d1:29:92:80:
f4:1b:a7:6d:ab:1e:c9:af:6c:97:a2:c2:33:57:4c:92:b0:c4:
9f:7e:04:3e:73:06:ea:12:3e:c7:ff:16:a5:f7:32:0c:62:c5:
e9:1e:10:0e:c5:0d:54:5b:5e:2d:72:1c:ba:e6:10:ea:13:df:
13:75:4e:ac:e7:e3:44:15:dd:e3:86:69:dd:96:72:12:f1:fb:
7b:ef:7e:01:12:b5:ea:72:98:3f:6a:da:8c:e1:46:33:c5:0a:
50:a7:d9:84:59:61:35:36:ad:7f:c1:5f:f6:8c:00:fe:39:2a:
f1:c4:52:5a:bb:e9:73:71:a7:c8:e5:10:b1:63:f3:d4:b5:23:
25:3a:4a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:58:33 2025 by rpki-client