Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T28Umxzx42F8ckNOeL-2CSMMrnw.roa
File: T28Umxzx42F8ckNOeL-2CSMMrnw.roa (raw, json)
Hash identifier: eZftAGGLwE/zNIMg79Ma3UQTFyDbbwKTIRcIc4qoHQI=
Subject key identifier: 4F:6F:14:9B:1C:F1:E3:61:7C:72:43:4E:78:BF:B6:09:23:0C:AE:7C
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01989EAB00E5817AC93C06C21254EC6B2E7E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T28Umxzx42F8ckNOeL-2CSMMrnw.roa
Signing time: Tue 12 Aug 2025 14:24:23 +0000
ROA not before: Tue 12 Aug 2025 14:24:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209945
IP address blocks: 5.182.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:ab:00:e5:81:7a:c9:3c:06:c2:12:54:ec:6b:2e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 12 14:24:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f6f149b1cf1e3617c72434e78bfb609230cae7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:4a:fd:b5:b4:99:fe:36:2c:a8:9d:11:35:
ef:4b:a8:4c:96:fe:51:52:5f:c8:bd:6c:c9:f7:50:
d6:7e:68:43:e3:2f:cf:48:d7:7e:7f:28:eb:65:8f:
cc:fd:14:9f:6f:71:3e:dc:17:78:07:4e:94:88:94:
dc:c4:90:d4:be:5e:a9:e5:59:fb:cd:cf:64:c0:74:
b4:f0:36:8a:37:c9:43:9d:7d:60:9e:71:42:ae:ae:
56:b6:d9:94:7e:bd:8d:66:ba:ce:70:81:51:b4:eb:
22:ae:2b:be:03:1e:fb:f0:d1:8c:c3:16:ae:fb:f3:
2d:0d:1b:5e:23:64:d7:54:21:d3:bc:06:4e:30:5b:
cd:14:30:a7:a4:0a:6e:df:b5:d0:99:af:d5:22:77:
fd:03:21:43:3b:46:64:2b:60:20:c9:21:20:9a:ae:
17:7b:16:40:62:34:5e:ae:7d:3e:11:ab:24:7a:e0:
81:96:1f:1d:94:d5:1c:fb:c7:29:73:55:4c:11:56:
71:e3:32:11:a0:5a:15:c4:1f:a2:2a:f4:8b:64:f9:
94:b8:6b:5d:03:61:5f:9a:a2:64:77:4a:f6:09:ee:
60:39:2f:b6:34:e9:4d:34:54:5c:c5:7f:5f:67:15:
47:66:a0:d7:e3:5e:76:9b:e8:d1:d8:c1:a9:32:fa:
e0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6F:14:9B:1C:F1:E3:61:7C:72:43:4E:78:BF:B6:09:23:0C:AE:7C
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T28Umxzx42F8ckNOeL-2CSMMrnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
Signature Algorithm: sha256WithRSAEncryption
71:ae:95:fe:05:f2:b7:28:e1:8c:79:18:c5:f9:2e:d4:13:8a:
02:b0:bc:53:55:d2:7c:04:29:4e:06:65:d7:2b:9c:6e:b9:76:
12:37:c2:9f:3e:8f:d0:35:6d:8e:26:2d:60:fe:f4:3a:cc:6a:
1f:ff:4f:54:b6:7c:28:c7:9a:9b:07:e8:68:98:e5:8e:3b:0c:
da:39:10:98:42:3e:e2:b7:fd:88:0e:55:6f:4c:bc:c7:70:64:
f1:b1:28:3a:d0:64:5e:af:3e:f5:0e:2c:f8:4c:60:46:ba:7b:
94:b2:e1:5b:59:7a:77:9f:ab:d9:1f:71:db:da:3a:33:49:23:
cb:5c:30:fa:f8:f8:b1:e9:ba:e2:91:41:cf:a0:b8:ee:63:08:
e2:bc:a6:b7:67:99:b1:73:21:bc:a6:65:86:9a:56:dc:d2:02:
a8:f4:a3:4d:e4:ef:d3:64:a6:d5:4d:76:43:b3:c8:be:89:8c:
f6:30:e8:fc:3f:38:ec:66:19:24:ec:66:f1:9e:40:5e:a3:fa:
2c:58:0d:04:44:9e:58:4a:b3:40:30:4b:1a:61:bc:57:d6:15:
41:9d:73:53:de:cd:36:03:91:66:82:35:6b:63:fb:94:57:b6:
b1:3f:52:75:7a:5b:28:d7:9f:e5:ee:8e:63:eb:77:d1:99:4a:
db:01:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:05:22 2025 by rpki-client