Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/sJSYUcMCUg17BnqlwYs35fVPER8.roa
File: sJSYUcMCUg17BnqlwYs35fVPER8.roa (raw, json)
Hash identifier: 9gRhplzjdg6jkptuJyZ84ZaBQDEirkdz8UUElBGHq1E=
Subject key identifier: B0:94:98:51:C3:02:52:0D:7B:06:7A:A5:C1:8B:37:E5:F5:4F:11:1F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019883589F38F5FB70B23BAA640C370DCC1C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/sJSYUcMCUg17BnqlwYs35fVPER8.roa
Signing time: Thu 07 Aug 2025 07:04:39 +0000
ROA not before: Thu 07 Aug 2025 07:04:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214725
IP address blocks: 217.156.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:58:9f:38:f5:fb:70:b2:3b:aa:64:0c:37:0d:cc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 7 07:04:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0949851c302520d7b067aa5c18b37e5f54f111f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:41:f5:4d:88:3c:24:98:b4:75:b4:92:4f:
05:13:73:6f:05:cf:24:7d:94:0a:ad:0a:c5:92:f3:
82:21:e6:4b:53:3c:49:0d:ca:b9:b7:01:a8:86:24:
16:8d:e8:b4:2e:8f:42:36:34:66:4e:a2:ad:6c:84:
a2:13:80:ed:bb:7a:c1:fb:d7:22:2a:76:d3:88:1d:
0b:82:1c:5b:95:44:7b:59:42:de:da:c4:8c:ef:0d:
a8:fe:0c:32:ed:54:4c:de:c6:81:c2:31:90:c5:53:
68:de:03:83:7f:2b:9b:09:25:68:d5:4c:b7:44:3a:
a9:94:44:99:a4:8a:e4:e2:b9:36:93:58:a4:3c:6f:
86:e7:8b:02:a2:aa:3b:73:5f:c1:d4:56:ec:cd:8c:
6b:82:12:c7:b8:8b:ca:1d:48:77:26:db:04:6a:15:
c4:48:4a:4c:85:be:54:29:ed:f8:fa:54:ac:1c:34:
e3:41:5d:4e:0c:c4:f9:f6:ce:ba:fe:54:b5:f8:26:
00:20:ce:ea:e0:56:20:16:06:3b:bd:e8:b4:20:34:
c1:b8:8c:3b:0f:db:44:01:99:3e:bf:21:0f:2b:09:
51:76:89:a6:eb:43:8c:e9:68:58:41:25:c1:db:53:
f5:62:0b:48:0c:98:20:20:b0:2f:2b:f7:d4:69:24:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:94:98:51:C3:02:52:0D:7B:06:7A:A5:C1:8B:37:E5:F5:4F:11:1F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/sJSYUcMCUg17BnqlwYs35fVPER8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.27.0/24
Signature Algorithm: sha256WithRSAEncryption
78:74:ae:88:88:c2:cc:b1:ec:c2:e4:da:b4:8d:62:19:a9:fa:
17:25:62:3e:a6:9d:3d:70:c1:5f:2f:c8:30:da:d9:8c:7f:61:
e1:d4:f3:12:1e:91:b7:45:49:8d:2d:2d:4c:7d:8d:68:c8:a6:
3c:23:e2:07:e0:29:18:4a:ca:43:5b:08:d6:b7:a5:75:21:78:
8a:be:01:5e:a0:67:e1:26:69:ac:4e:5a:82:49:5a:39:2e:89:
a8:14:d9:51:75:d9:1d:19:bf:42:2b:1c:fb:9e:ed:95:cf:ed:
fc:65:8c:a1:ae:fe:6b:c0:82:db:55:3f:96:df:10:b3:3e:8b:
cd:a8:a5:77:ad:5d:42:f0:93:80:53:d5:0e:c1:60:ec:63:e3:
63:da:ed:eb:48:37:a1:57:f5:b4:36:ca:7c:f2:f7:aa:26:4a:
03:46:50:d3:cd:d5:71:fc:0e:9f:a7:c4:f4:f2:f1:51:b2:fc:
fa:9b:7b:35:e0:aa:46:af:1b:c5:c6:91:f6:be:fc:b7:94:14:
4e:21:53:7b:b7:5c:8f:94:9d:61:31:0f:42:a9:4a:2f:2e:2b:
45:3a:93:87:a1:e1:4d:5f:8a:c6:ae:87:1e:c2:81:eb:f3:1c:
b3:5a:79:c6:cb:2a:c2:8b:fd:1a:01:3e:bb:b8:c3:a7:c4:dc:
9c:e0:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:49:24 2025 by rpki-client