Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/XRjqskDJfCb5PURI6gE2z-7afCI.roa
File: XRjqskDJfCb5PURI6gE2z-7afCI.roa (raw, json)
Hash identifier: lC6CdL71ZqZQFEg499ebGpokdZd/v2A2IJbWINe+nqc=
Subject key identifier: 5D:18:EA:B2:40:C9:7C:26:F9:3D:44:48:EA:01:36:CF:EE:DA:7C:22
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 0198CE5EEC830CB25BB1400FC99A204F3187
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/XRjqskDJfCb5PURI6gE2z-7afCI.roa
Signing time: Thu 21 Aug 2025 20:43:04 +0000
ROA not before: Thu 21 Aug 2025 20:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 176.65.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:5e:ec:83:0c:b2:5b:b1:40:0f:c9:9a:20:4f:31:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Aug 21 20:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d18eab240c97c26f93d4448ea0136cfeeda7c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:a0:3a:eb:93:3e:5e:14:c2:37:a3:ee:e0:
dc:2f:f6:21:58:ee:a3:85:52:4c:1c:ce:ff:14:50:
3a:d5:4c:ce:90:10:92:bc:f4:4a:be:17:a2:2a:72:
e1:d6:23:25:0c:a1:c7:3a:a8:45:2a:dc:95:67:99:
36:a5:e9:e3:79:78:88:00:e3:be:45:84:c1:d3:bb:
7c:ed:37:31:6b:c7:19:75:88:47:c2:4b:eb:f3:b6:
71:7c:53:d5:0e:bd:14:67:e4:ed:2c:97:6e:7e:fb:
3d:06:5f:7b:50:82:e1:d7:41:58:1d:ea:10:ba:23:
2d:3c:50:9f:4c:e6:04:f5:4f:43:1d:78:59:08:43:
7e:35:57:b6:3d:b8:c5:03:55:2f:c2:68:be:8c:22:
88:a9:3a:7c:33:56:ed:7b:ac:38:6f:71:6e:a8:7b:
e9:2e:8d:19:d3:d0:6b:9b:1a:1c:53:50:b5:34:9e:
b5:cd:cb:5b:0c:7d:77:26:ee:c6:25:41:ce:e2:bb:
a7:2b:1b:04:9b:72:d9:2e:d1:83:66:a3:c2:ae:71:
61:93:cc:6b:58:90:e2:22:88:65:e8:89:9b:b5:01:
c4:d2:58:9e:09:0f:1d:d1:ce:a6:d9:b2:e9:8d:cc:
ec:4c:44:5a:85:4a:28:36:79:c3:21:1b:da:d0:a8:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:18:EA:B2:40:C9:7C:26:F9:3D:44:48:EA:01:36:CF:EE:DA:7C:22
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/XRjqskDJfCb5PURI6gE2z-7afCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ec:ea:1f:d7:a5:9b:23:7d:5a:00:69:34:e0:62:8b:d2:39:
3c:52:d0:4d:c1:a2:7b:50:24:bb:c2:09:dd:ae:f3:67:59:b3:
43:84:fa:ae:94:e7:ff:7c:db:94:ef:b8:bc:1c:cb:5f:33:38:
e7:e6:cf:9f:79:8a:2c:4e:d5:5d:cc:b8:63:79:a6:87:96:e6:
f7:ad:45:23:b2:7f:20:a5:70:a8:30:96:0d:41:5a:37:62:55:
76:8b:58:ca:52:4b:19:14:fa:d9:64:f3:d9:13:bc:d6:3f:94:
0b:72:2a:ff:56:28:c3:c3:ce:d6:f4:4c:20:18:53:a2:1a:91:
08:82:71:78:2f:bf:7a:65:57:7e:6e:dc:bd:e5:92:bf:61:13:
11:3b:33:ae:c6:ba:19:83:92:f8:52:d6:36:c7:04:8d:6b:79:
06:7d:3a:7d:9d:76:18:fc:ac:1e:af:24:6e:7d:8a:9b:dd:21:
1e:29:3b:40:cf:d6:84:41:81:f5:ff:43:b9:04:17:7c:ff:59:
e8:42:2c:94:6a:26:bf:20:76:a0:d5:1f:30:1e:8d:8d:79:20:
af:77:7f:59:7e:36:20:af:0c:79:26:44:4a:eb:fa:d9:1c:c2:
bc:7e:21:86:a3:49:6a:7e:34:49:6f:a3:c1:47:17:b9:13:40:
a2:9c:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:42 2025 by rpki-client