Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/cfz44yOSQ_0AbF1P2cnaJJgavzc.roa
File: cfz44yOSQ_0AbF1P2cnaJJgavzc.roa (raw, json)
Hash identifier: sb2SGQACNoFJRrfeB1oCMEyMZn4+rl9PS1uiW9uDl/M=
Subject key identifier: 71:FC:F8:E3:23:92:43:FD:00:6C:5D:4F:D9:C9:DA:24:98:1A:BF:37
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01999D8F10517439352657918C3A18417EBA
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/cfz44yOSQ_0AbF1P2cnaJJgavzc.roa
Signing time: Wed 01 Oct 2025 02:17:02 +0000
ROA not before: Wed 01 Oct 2025 02:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60139
IP address blocks: 37.202.15.0/24 maxlen: 24
212.113.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9d:8f:10:51:74:39:35:26:57:91:8c:3a:18:41:7e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Oct 1 02:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71fcf8e3239243fd006c5d4fd9c9da24981abf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:a4:68:85:29:a3:2e:8c:50:1b:55:d3:87:
33:be:6d:c1:38:4a:17:3c:34:06:b0:4b:e5:fa:e4:
11:3f:8a:b7:4b:1d:1e:b1:a9:4a:b6:ae:d4:ee:11:
f7:c6:74:dd:eb:98:f7:f2:c1:76:3a:0c:ce:0d:ff:
97:4c:76:60:7a:97:86:51:ff:16:fe:96:38:46:2a:
a6:ff:b1:16:dd:e3:69:06:8d:86:98:3b:96:e7:4a:
a8:fe:48:3d:48:06:62:2c:e7:12:5d:aa:20:76:63:
b7:21:66:c6:bb:15:c5:97:9e:e7:ce:dd:41:14:71:
91:f5:dd:6e:80:1b:06:5f:c3:1c:ed:6d:41:f2:da:
c1:2d:02:56:1b:ec:54:d7:ff:3f:b2:75:2b:c5:ae:
33:cc:a2:41:ad:2b:f8:51:55:1e:e7:0f:f6:a9:25:
35:2d:01:48:34:bd:49:6a:68:1b:9a:86:da:78:d6:
a1:78:d6:3e:18:08:0d:e4:b4:57:4a:3a:69:a8:b2:
82:2e:51:2e:40:fc:94:87:9d:f4:3f:43:bd:4c:6f:
17:fc:35:e5:a9:48:0e:10:aa:9d:dd:44:50:dd:b2:
a1:f5:cd:6f:d6:24:2d:c4:0d:ab:2f:56:cc:ee:0a:
5f:9e:4a:cc:5e:4e:e4:dc:5f:48:62:7d:35:51:54:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:F8:E3:23:92:43:FD:00:6C:5D:4F:D9:C9:DA:24:98:1A:BF:37
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/cfz44yOSQ_0AbF1P2cnaJJgavzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.15.0/24
212.113.113.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:90:47:f9:ea:2a:0a:eb:cb:c1:ef:da:61:59:da:1b:1e:93:
e4:6b:38:13:81:48:3b:18:27:ee:e9:d2:54:4a:65:71:3d:29:
d4:22:4c:5d:2e:eb:3f:fd:1c:d3:4b:6e:52:85:1c:78:47:93:
e3:46:97:55:0f:0c:09:60:33:85:94:c8:11:36:a2:73:a1:ee:
88:37:cb:93:51:95:88:9c:50:47:41:7e:3b:03:33:1a:f9:bc:
92:24:25:8c:c2:db:8e:bf:4e:45:f5:7f:61:31:47:38:1e:a5:
d4:62:3b:28:f7:93:4d:e2:06:cf:d0:78:aa:03:59:d3:04:a1:
c4:cd:73:51:fe:df:a2:0e:2b:75:df:15:87:f5:ff:0f:be:f1:
1b:32:0e:e5:b6:97:d5:23:1f:ff:d1:33:49:38:40:0e:15:9d:
31:4f:58:20:af:c4:82:08:f6:87:b2:41:80:09:ca:27:94:de:
97:a8:54:b7:e6:c9:e0:1e:13:a2:45:ce:e7:d8:2d:30:d7:c7:
da:dc:d1:df:9c:56:b7:af:f0:6e:54:88:99:f0:3f:4c:11:16:
d0:14:81:a7:ff:d3:c5:73:9a:a0:34:4b:0a:48:95:9b:c1:d3:
29:26:29:1d:46:2c:a8:10:4a:09:b5:02:06:b8:aa:47:f0:04:
8f:6c:2d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:46 2025 by rpki-client