Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/CqyAVWGwUYFXk3xLCbAbOd-2w64.roa
File: CqyAVWGwUYFXk3xLCbAbOd-2w64.roa (raw, json)
Hash identifier: 9le//z+aFU9uWnp3Sn0UvoQZVhblLhWFcW8v/Wf8MNc=
Subject key identifier: 0A:AC:80:55:61:B0:51:81:57:93:7C:4B:09:B0:1B:39:DF:B6:C3:AE
Certificate issuer: /CN=02b562878696e6283c4df814a38b735c500caf8b
Certificate serial: 0198932E58295DF500EA38290F1BD496B331
Authority key identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/CqyAVWGwUYFXk3xLCbAbOd-2w64.roa
Signing time: Sun 10 Aug 2025 08:52:24 +0000
ROA not before: Sun 10 Aug 2025 08:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 193.177.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:2e:58:29:5d:f5:00:ea:38:29:0f:1b:d4:96:b3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b562878696e6283c4df814a38b735c500caf8b
Validity
Not Before: Aug 10 08:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0aac805561b0518157937c4b09b01b39dfb6c3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:69:25:6b:7d:c0:51:d4:c9:26:b1:0d:2b:
67:e7:09:c2:e9:10:f5:cd:13:d9:7d:42:69:e5:7f:
1f:52:84:12:99:d8:24:9e:fe:a5:31:c6:15:48:c9:
8f:16:77:01:76:98:c6:92:4f:3e:83:35:ac:b6:1b:
58:19:62:94:c3:7c:52:36:fe:ac:d8:00:1f:f2:30:
c7:48:dc:e7:d9:14:9a:e0:3f:19:c3:08:3b:73:18:
9a:01:42:e6:34:d8:69:90:02:9b:d6:0f:1e:9b:d3:
cc:0a:10:e8:84:d1:dd:4c:d2:4f:77:6c:68:4a:44:
13:78:0d:b9:b5:99:d1:b6:d1:9b:59:f2:67:61:55:
12:f1:c3:27:db:f4:f5:26:51:f7:b2:f8:ac:c7:34:
f3:15:d0:48:43:1e:e2:c7:b3:5c:5c:25:82:97:a6:
22:bd:f1:3e:23:f3:df:2e:8c:02:bf:b6:14:0e:b5:
8e:af:cd:4b:02:33:35:e8:07:79:a7:cb:aa:06:89:
51:f4:e6:c8:d0:f7:62:f7:fd:13:f8:61:85:a8:d1:
4b:4d:2f:59:52:aa:92:c0:e7:14:2d:7a:80:bd:a7:
05:4c:58:c2:96:a2:01:26:f1:21:48:c8:ed:77:04:
03:6f:a2:28:b9:55:ce:8b:3f:af:de:6b:ff:b2:d8:
1d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AC:80:55:61:B0:51:81:57:93:7C:4B:09:B0:1B:39:DF:B6:C3:AE
X509v3 Authority Key Identifier:
keyid:02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/CqyAVWGwUYFXk3xLCbAbOd-2w64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.241.0/24
Signature Algorithm: sha256WithRSAEncryption
85:85:4e:3d:ba:f0:b8:21:20:54:cf:26:ad:2e:2c:62:64:9e:
c6:bf:4e:11:02:6d:52:8a:84:c7:30:1b:6e:c0:06:bf:fa:6b:
2e:5f:7a:f0:1f:ce:fa:a2:22:25:31:bf:76:a2:3f:38:9a:30:
f9:c8:fd:bd:df:ef:e2:f8:39:c7:0e:6b:65:c4:e0:3f:da:c3:
ab:ef:2d:fe:c9:86:e3:75:38:f0:fe:e7:63:f7:9a:57:48:b4:
78:a7:84:4f:36:65:09:f1:c2:3f:fa:c4:76:2a:4e:35:01:51:
24:56:7b:d6:30:8b:c6:a4:98:d7:9a:7e:f1:9d:44:a7:50:1b:
6e:fe:2a:9e:f5:c2:fe:f1:79:bb:2a:36:4a:59:39:8c:20:8d:
63:3f:df:a0:e8:15:e6:b5:de:95:e1:98:94:33:d8:02:dd:48:
2c:ec:86:79:b5:23:ac:0b:48:a5:7f:d0:d7:07:ae:2d:66:e7:
c7:a7:26:98:5a:75:01:08:4f:6f:b1:a1:27:36:9d:ad:93:09:
a7:1c:03:36:68:d1:b4:98:83:e3:80:88:80:50:c0:38:af:87:
99:d7:9d:0c:f3:d8:d6:7e:6e:c6:37:0b:97:cd:ca:c0:e9:b0:
90:81:5c:26:98:3f:aa:c6:11:27:dc:25:07:22:1f:5a:c6:e1:
aa:af:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:16 2025 by rpki-client