Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2ApswBYu7fX1yIJtXZryCYBWwaQ.roa
File: 2ApswBYu7fX1yIJtXZryCYBWwaQ.roa (raw, json)
Hash identifier: FDhO9z7JrkANWBzeZFRlaGZWOaP4f2mJ2tbEaiVqR9Q=
Subject key identifier: D8:0A:6C:C0:16:2E:ED:F5:F5:C8:82:6D:5D:9A:F2:09:80:56:C1:A4
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0198D77C9CDDA5B3B1141A8D6EE13E123E32
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2ApswBYu7fX1yIJtXZryCYBWwaQ.roa
Signing time: Sat 23 Aug 2025 15:12:04 +0000
ROA not before: Sat 23 Aug 2025 15:12:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208137
IP address blocks: 195.211.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Aug 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:7c:9c:dd:a5:b3:b1:14:1a:8d:6e:e1:3e:12:3e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 23 15:12:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d80a6cc0162eedf5f5c8826d5d9af2098056c1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8d:89:ec:69:a0:3d:b1:00:84:de:7f:16:20:
f3:88:b8:55:cb:22:39:41:5e:3d:03:3e:8c:98:c0:
45:a0:f5:66:72:7d:a9:29:06:b6:09:a0:00:04:25:
7c:02:3f:2a:96:dd:10:e0:2f:b6:41:81:0c:e1:c4:
52:20:d1:26:19:44:d0:8d:3d:d4:9c:15:23:f8:ad:
d2:cf:a5:21:f5:5a:83:cd:b9:c6:99:4b:e4:07:1d:
91:0a:34:6d:91:8d:db:3b:12:70:86:48:ef:fc:39:
15:87:8c:94:c1:86:a2:b8:28:e5:93:dc:7d:19:70:
9a:4c:14:16:bb:5b:6c:e5:9a:34:a9:34:4d:f2:e4:
81:24:a2:0b:46:bb:a7:ab:58:9f:ff:2a:5e:2c:c6:
c6:0f:aa:08:81:81:3a:8f:48:92:89:91:be:8c:d7:
b3:5b:22:e4:25:30:36:7d:10:e2:20:b8:3a:64:a8:
b0:e7:80:14:ac:b6:55:02:65:45:a0:43:e0:87:00:
12:88:86:ba:6a:64:59:6d:37:f2:72:19:b7:65:f8:
7b:2f:cd:e5:30:7c:9a:63:52:30:e2:ad:b6:4c:2e:
3a:3e:53:d7:49:2c:83:78:44:a9:e2:b0:19:0f:56:
73:6e:fb:30:35:ac:3f:13:b7:68:5e:be:b8:49:60:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0A:6C:C0:16:2E:ED:F5:F5:C8:82:6D:5D:9A:F2:09:80:56:C1:A4
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2ApswBYu7fX1yIJtXZryCYBWwaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.188.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ff:d0:ca:e2:dd:5f:a2:84:d9:f8:bd:36:f3:c1:b3:7c:af:
7f:c0:43:22:67:0c:c3:6f:30:c2:cf:79:13:9c:27:4a:31:67:
e7:4a:9c:22:a4:83:14:ad:ac:70:54:3d:29:37:65:4e:40:36:
71:30:f1:2e:17:31:74:f5:7e:41:31:6d:66:19:dc:86:94:2f:
1e:3b:75:f1:2d:62:2d:ed:2f:29:0f:5b:2d:a0:f6:87:23:4a:
8a:e0:fd:be:bd:59:f6:2f:c4:08:aa:a2:12:05:e4:b2:95:a2:
2d:91:77:e5:b0:2b:a3:77:61:90:bf:26:05:30:9a:37:09:8b:
32:34:7e:82:b1:ec:5c:81:b2:d9:25:cb:41:cc:34:6f:64:41:
7f:7e:b9:1e:69:61:9b:44:07:60:df:8f:43:b5:0b:52:58:46:
2b:47:ea:89:d3:29:37:ba:f4:e0:93:9a:c7:33:89:37:0b:1e:
a1:6b:11:b0:ec:20:4f:3c:3c:54:d9:a7:36:c1:f3:78:8d:98:
23:38:5b:89:18:e7:30:79:61:7f:86:f2:18:85:c3:38:f5:fb:
8f:ea:94:d0:b6:0a:95:63:02:bb:46:ba:77:cb:78:91:ef:b6:
5a:47:44:95:05:1a:7f:46:25:23:af:b4:42:83:22:57:db:af:
fd:cf:42:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 15:48:48 2025 by rpki-client