Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/XZNvs4P6cEV3kqSeAChYJB2sLl8.roa
File: XZNvs4P6cEV3kqSeAChYJB2sLl8.roa (raw, json)
Hash identifier: g9CiDmAcRp9vEbDCpFa+vtYpHitX7GCMzN75HJigDyc=
Subject key identifier: 5D:93:6F:B3:83:FA:70:45:77:92:A4:9E:00:28:58:24:1D:AC:2E:5F
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 01973A8360DD61421D60FA7710A1CB1C2AF7
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/XZNvs4P6cEV3kqSeAChYJB2sLl8.roa
Signing time: Wed 04 Jun 2025 10:36:17 +0000
ROA not before: Wed 04 Jun 2025 10:36:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207088
IP address blocks: 195.210.96.0/22 maxlen: 22
2a0a:a200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:83:60:dd:61:42:1d:60:fa:77:10:a1:cb:1c:2a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jun 4 10:36:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d936fb383fa70457792a49e002858241dac2e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:3c:c9:c4:a3:c1:1d:46:95:ef:3e:e9:6f:
7d:c5:d8:f8:4c:16:ce:08:56:b4:f4:9c:07:26:ac:
3f:42:d4:24:86:98:68:fa:04:c1:66:eb:db:0c:41:
34:ca:5e:3f:9a:de:58:8a:1d:94:97:24:87:cd:22:
48:16:49:c6:ae:89:a7:89:ef:e1:6b:5c:91:b9:b5:
70:ca:e7:20:dc:50:a1:f2:34:bf:bc:c7:71:c1:93:
27:d7:50:53:76:5a:90:37:57:aa:cd:bb:43:e4:d4:
92:37:ec:6d:be:f7:84:f1:15:a4:81:f2:96:fb:9b:
00:91:a0:21:44:3b:05:fe:f8:67:37:17:73:e9:46:
49:8f:51:b6:01:98:fb:17:00:10:29:70:1c:2b:4c:
8c:33:63:a3:11:25:54:0a:c1:e7:7e:c7:cd:46:48:
53:dd:77:73:f9:41:aa:8c:a4:05:ce:2b:d2:82:18:
da:18:4c:5f:21:f4:32:37:44:76:80:98:7d:1d:16:
47:13:11:37:32:2a:08:50:66:b2:0c:78:17:64:17:
98:c0:06:a4:bf:ab:c6:09:87:15:10:50:27:d8:39:
0a:7e:03:50:11:44:8b:1c:f2:58:f3:50:12:b3:44:
a9:31:70:e0:c3:d9:a5:ff:32:b6:1a:2f:4c:5c:17:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:6F:B3:83:FA:70:45:77:92:A4:9E:00:28:58:24:1D:AC:2E:5F
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/XZNvs4P6cEV3kqSeAChYJB2sLl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.96.0/22
IPv6:
2a0a:a200::/29
Signature Algorithm: sha256WithRSAEncryption
ad:4a:08:70:76:de:9d:6f:a5:6d:a5:f7:9e:04:25:dd:04:7f:
22:91:6b:47:9c:8d:1a:1c:e8:35:d4:2e:f4:43:f9:ff:a2:ef:
79:14:92:11:20:22:1a:d1:02:32:63:6b:0b:40:57:d3:9c:75:
5a:c4:7b:43:54:b7:7d:e6:c9:3d:6c:ec:77:82:e7:96:f2:49:
31:b0:be:0d:dd:cf:88:5f:47:cb:9e:eb:f3:17:80:67:86:be:
0d:83:bc:bc:9e:88:22:d7:b8:5f:c9:97:b5:55:46:6d:a7:35:
bb:c3:74:5b:ca:c6:09:53:a3:e1:23:54:ab:83:98:72:b9:11:
2e:91:4b:fe:23:70:ac:f6:59:01:eb:44:40:c7:f6:f8:c0:03:
9e:8f:37:9a:cb:09:61:e5:90:09:0d:8c:fd:95:c9:e1:88:a2:
f9:11:7f:a6:6f:73:84:44:36:30:ea:40:00:5e:e0:86:7a:52:
cd:dd:b5:4d:b6:1d:9f:10:c1:d2:3b:d2:05:d0:a0:27:b0:a0:
b0:86:c8:22:fd:ef:7c:06:a4:1e:57:e0:47:4e:73:59:45:fb:
58:26:db:e0:19:89:47:9c:73:bb:b9:1d:a8:18:e2:5f:f2:94:
1b:d9:f7:e0:fd:52:67:fa:7c:2f:24:f4:fd:71:c6:a4:55:c4:
15:52:a2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:05:38 2025 by rpki-client