Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/cPyQ54eHZNRhOo_g5NkIJCYJuFs.roa
File: cPyQ54eHZNRhOo_g5NkIJCYJuFs.roa (raw, json)
Hash identifier: c5YmCvHhLyzqtoi7Yd/RgqKsKk6lvDCNHO1nQEKzWWw=
Subject key identifier: 70:FC:90:E7:87:87:64:D4:61:3A:8F:E0:E4:D9:08:24:26:09:B8:5B
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 01998A19ADFA78D2150061FC77E5C8725247
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/cPyQ54eHZNRhOo_g5NkIJCYJuFs.roa
Signing time: Sat 27 Sep 2025 07:36:02 +0000
ROA not before: Sat 27 Sep 2025 07:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 217.173.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8a:19:ad:fa:78:d2:15:00:61:fc:77:e5:c8:72:52:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Sep 27 07:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70fc90e7878764d4613a8fe0e4d908242609b85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:4a:30:4b:1f:28:1a:6c:1b:4a:ce:ba:84:
1b:a2:6a:10:3d:f7:8a:16:73:e9:6e:48:65:7e:2a:
5c:f6:9b:bb:d9:29:0b:a5:03:33:1d:72:21:64:ba:
ee:77:76:b2:c2:46:24:43:a4:39:49:dd:f2:ab:7b:
7d:fc:f8:ec:df:e0:43:f0:68:31:f0:f0:1f:f4:d2:
17:62:19:3d:ea:67:ce:66:32:5a:18:8d:f3:7d:e8:
a3:87:92:7d:af:f6:90:4e:dd:72:a9:a1:ec:b2:b1:
90:35:5e:0f:e0:ec:15:d3:ce:27:bd:52:34:cf:9e:
4f:28:0c:31:1b:ff:27:4f:ea:df:a5:b4:b1:b0:ec:
14:12:59:d3:90:1c:4f:f3:27:76:b5:d8:68:95:59:
cc:7e:a3:71:4e:a3:60:f8:be:81:40:40:1e:39:01:
0c:72:b8:da:92:92:c5:a6:66:60:52:f4:79:f5:1b:
f8:88:e6:3c:de:ca:c0:79:99:03:e1:4f:a8:96:9e:
3a:b8:02:63:a2:31:04:79:df:e6:4f:f9:38:11:ae:
28:32:3b:7f:da:a0:54:df:9d:e1:c4:7e:5f:83:25:
8c:4f:09:25:ec:f2:65:ad:c5:df:fd:74:dc:74:9a:
ad:ae:8d:c5:d7:51:4c:80:e3:48:1e:b2:a0:63:09:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FC:90:E7:87:87:64:D4:61:3A:8F:E0:E4:D9:08:24:26:09:B8:5B
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/cPyQ54eHZNRhOo_g5NkIJCYJuFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.156.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:78:91:7c:ff:87:f1:4b:1a:71:54:b5:1d:23:54:21:0d:5c:
0c:19:41:1c:3f:ca:33:6f:0a:1a:50:f0:2b:a2:2a:29:92:be:
ec:fc:cf:62:8a:b1:ea:53:0e:c9:72:6d:6b:69:54:28:89:8a:
99:c3:09:40:cd:78:20:40:96:53:cb:b6:e5:7c:96:47:d1:22:
34:5b:f1:a0:0a:79:36:61:bd:d4:f7:2e:20:90:31:d8:19:7c:
7f:39:d8:5d:96:56:b5:c1:0f:c6:b2:ab:09:b6:60:34:23:22:
6d:c7:02:14:e5:3d:c2:b7:f9:ab:91:c7:85:3e:aa:46:ec:5b:
2b:b5:4a:1c:5c:40:89:30:8b:55:3a:2a:62:ba:c7:95:57:37:
03:f3:82:f0:fc:0c:53:39:a3:52:1a:53:f0:f1:40:51:08:16:
87:53:9a:bb:99:23:dd:a9:04:be:78:41:b2:da:59:b4:81:8f:
45:e0:3e:72:39:98:1a:58:67:31:61:9e:24:73:13:12:a2:a3:
50:a4:8a:82:dd:98:ea:e6:fd:1f:67:8e:73:9f:06:f4:bb:eb:
3c:d2:72:98:53:ff:c8:99:20:34:b3:e0:56:5b:28:6c:87:3b:
5b:f5:68:a7:4b:9d:7c:6c:5f:68:95:76:6e:5a:e9:cb:1b:c0:
33:bb:26:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:07 2025 by rpki-client