Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U0S5l_SIcPtVUznfH32QLhF-SfM.roa
File: U0S5l_SIcPtVUznfH32QLhF-SfM.roa (raw, json)
Hash identifier: Fx9BBxeJr2dxOro67n83LJ2l+EyYvOKJF379Qkf2r28=
Subject key identifier: 53:44:B9:97:F4:88:70:FB:55:53:39:DF:1F:7D:90:2E:11:7E:49:F3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019883CDD123ED4040134B6EF58E817EBBD0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U0S5l_SIcPtVUznfH32QLhF-SfM.roa
Signing time: Thu 07 Aug 2025 09:12:40 +0000
ROA not before: Thu 07 Aug 2025 09:12:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 83.219.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:cd:d1:23:ed:40:40:13:4b:6e:f5:8e:81:7e:bb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 7 09:12:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5344b997f48870fb555339df1f7d902e117e49f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:fa:50:b8:0c:e9:dc:05:f2:5c:d1:16:8a:
ed:8a:db:3a:2f:e2:5d:29:35:70:40:7e:6f:ad:a0:
69:ed:1a:ea:6f:f7:73:c1:21:0d:dc:c0:ea:92:66:
c1:a1:e4:c6:e0:4a:c9:3c:11:8c:3e:0b:1c:64:ec:
c2:5a:71:c6:b0:46:85:f6:f0:d2:67:83:7c:07:07:
65:ce:bb:af:b5:2a:c8:0d:1e:ab:90:a6:4e:3e:6f:
e9:c1:c6:67:12:36:ce:03:f6:ac:45:39:ae:04:af:
ff:19:68:d8:56:d7:20:ea:3e:5d:0a:a3:24:4e:6f:
1e:9d:d0:ea:bf:44:55:ce:a7:c0:23:2a:41:76:8e:
4a:3d:1d:8a:b0:c4:f4:75:c4:ac:b0:41:79:c2:ba:
c6:0e:13:77:ad:45:fe:03:69:89:20:8c:e5:7e:81:
2e:66:a0:5f:d0:a7:5a:10:0f:86:26:34:ec:41:d7:
2e:ca:f5:41:18:8c:10:6f:f0:33:4b:16:23:f5:32:
59:b3:a3:bc:96:eb:ca:5a:43:9e:23:e4:e6:e6:e1:
65:1b:a1:b9:db:8f:71:82:e4:21:db:8c:7c:cc:89:
b4:99:62:80:fa:5f:c5:3d:77:84:33:2b:7e:0c:79:
e9:4d:3b:9d:fa:75:55:83:e4:3c:26:4e:ac:01:ae:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:44:B9:97:F4:88:70:FB:55:53:39:DF:1F:7D:90:2E:11:7E:49:F3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U0S5l_SIcPtVUznfH32QLhF-SfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.98.0/24
Signature Algorithm: sha256WithRSAEncryption
01:22:63:fd:4f:cf:bf:b7:22:04:39:80:2d:30:d8:5a:b2:38:
a2:b1:17:70:f1:91:e4:5d:ba:e5:bd:02:20:5c:88:18:09:b0:
34:3b:96:9e:bb:8a:d7:73:d8:61:c3:fc:32:e2:41:70:82:93:
87:c2:db:78:c4:92:a0:21:97:5e:c8:80:12:0a:78:42:12:7c:
2c:a2:20:26:1e:d2:f2:24:de:00:d6:00:fa:01:06:c3:8c:d0:
89:da:29:b7:80:53:44:e5:61:a5:8b:cd:6c:f6:ff:15:6b:76:
49:d5:fa:64:cc:e3:a3:94:0d:a9:0f:90:e3:88:d0:b8:4f:31:
97:4c:d7:f6:27:8d:b4:a5:c9:de:11:02:80:67:b0:6f:1b:49:
9d:d1:78:87:e1:a6:b2:fe:1c:d1:4f:db:a4:b7:e0:14:c5:31:
6a:11:1a:60:6d:5f:39:e0:11:8c:9c:b3:db:1b:bd:ee:5f:24:
94:14:6e:33:3d:eb:fe:93:63:88:b7:4d:4b:a7:cb:9d:83:58:
63:28:70:c9:96:42:96:90:84:9a:df:1c:4c:0c:77:fd:e4:b5:
88:db:6b:a4:e5:bb:2f:d6:2e:d1:10:74:8b:78:51:9c:fd:48:
72:5c:60:44:b7:c5:e3:57:d1:31:24:55:16:b8:f4:76:65:45:
93:44:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:16:18 2025 by rpki-client