Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/19v0BW9D62wRoBFE5ozFJdwOMQA.roa
File: 19v0BW9D62wRoBFE5ozFJdwOMQA.roa (raw, json)
Hash identifier: YMLiN+GeZBDn6zKwSH23wr8pzSjB9vWlcqgXSCgH65E=
Subject key identifier: D7:DB:F4:05:6F:43:EB:6C:11:A0:11:44:E6:8C:C5:25:DC:0E:31:00
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 0197B007FBADFEAC82E9EFC7153FBEBE1271
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/19v0BW9D62wRoBFE5ozFJdwOMQA.roa
Signing time: Fri 27 Jun 2025 06:16:42 +0000
ROA not before: Fri 27 Jun 2025 06:16:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13903
IP address blocks: 193.29.148.0/24 maxlen: 24
193.29.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:07:fb:ad:fe:ac:82:e9:ef:c7:15:3f:be:be:12:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Jun 27 06:16:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7dbf4056f43eb6c11a01144e68cc525dc0e3100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:21:9e:ad:99:48:eb:9f:00:e1:b4:78:3e:
02:f5:02:f3:2e:9f:fe:33:b7:30:64:c8:e4:46:28:
7f:b5:59:8f:79:80:fa:91:04:25:aa:fa:3c:39:33:
f9:9e:4a:ee:22:04:92:54:89:7b:14:e8:ce:e3:d9:
90:3e:cf:10:fd:00:64:4b:c1:7f:4f:91:13:f9:20:
b9:bc:69:84:c3:3c:c6:b7:33:70:f9:74:6c:4f:81:
b7:47:33:b5:52:1e:62:99:8d:ed:c6:cb:73:16:75:
b6:e3:ec:a8:a6:6d:3c:a5:cc:50:c5:9b:cd:b3:66:
07:98:f6:a2:3f:45:ff:d8:4c:cb:f7:b6:12:a0:19:
01:7e:10:42:ce:2b:c0:6a:07:8d:e7:7c:b5:17:61:
f6:8c:33:c9:f2:57:1c:09:6a:22:ad:18:8f:04:b7:
de:b1:83:97:10:ab:c0:ec:bb:92:85:38:fe:62:69:
54:c9:2f:28:36:d1:52:65:84:6a:f9:a3:2e:b1:bb:
e8:71:9f:45:80:cc:a1:3d:c9:04:b3:42:18:7a:e8:
49:54:48:74:e6:41:52:07:bf:1b:22:5b:bf:3a:63:
82:e0:f8:5b:ef:cf:ac:eb:4a:44:ed:d6:79:78:c5:
bc:d5:f1:20:db:26:2a:6a:56:40:77:54:38:fd:e1:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DB:F4:05:6F:43:EB:6C:11:A0:11:44:E6:8C:C5:25:DC:0E:31:00
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/19v0BW9D62wRoBFE5ozFJdwOMQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.148.0/23
Signature Algorithm: sha256WithRSAEncryption
af:04:e6:d8:29:87:5e:a0:9d:6c:2c:c4:0b:05:83:d9:8d:01:
b9:ab:b2:7f:71:e0:7b:75:17:c5:f4:1b:b5:d5:5c:c0:fc:09:
6f:98:47:bf:a0:77:f2:80:37:ec:fd:7a:5d:0f:8b:83:81:c7:
5f:47:ea:7f:34:01:08:5e:b0:00:a1:e2:40:ca:d8:f6:53:eb:
59:c3:c9:3a:a9:ad:a3:0e:c4:2e:c2:e5:e7:71:81:34:fa:d8:
97:36:50:cc:ba:69:0e:3f:e5:0c:6b:31:87:1a:96:3f:fd:51:
ef:26:5b:42:c2:81:62:ca:4e:0a:ec:64:de:26:d7:be:92:ca:
cf:bb:08:a8:89:4a:1c:56:99:08:5e:12:f2:92:26:81:ad:b8:
60:07:6d:63:ae:a7:56:14:57:dc:8b:54:fe:db:c7:98:dc:1b:
27:f2:19:c7:85:9b:29:81:37:14:75:5a:cd:2b:13:4f:24:d0:
ad:0a:86:8c:75:8c:47:ca:2a:ac:7e:61:e5:c4:59:be:f4:9e:
ed:ec:69:90:51:c3:45:77:b5:f8:68:2c:e9:2f:85:f3:f6:6d:
ab:2d:0c:ac:d8:54:cb:d3:1b:12:8f:93:20:87:67:48:78:7c:
d8:44:c3:e4:b9:bd:eb:e2:4f:c8:a9:c9:34:90:61:9e:80:9d:
be:d2:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:19:10 2025 by rpki-client