Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/rUh4DcbwxmiGr0JQA0Icrm52_z8.roa
File: rUh4DcbwxmiGr0JQA0Icrm52_z8.roa (raw, json)
Hash identifier: GBNEIwwY6ONvfJd6FABP0xbBemMDaj8bkeb1aCmO4Tk=
Subject key identifier: AD:48:78:0D:C6:F0:C6:68:86:AF:42:50:03:42:1C:AE:6E:76:FF:3F
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 01984C32A88E75A57003EDEE64477C35FA1E
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/rUh4DcbwxmiGr0JQA0Icrm52_z8.roa
Signing time: Sun 27 Jul 2025 14:04:05 +0000
ROA not before: Sun 27 Jul 2025 14:04:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 194.42.47.64/26 maxlen: 26
2001:7f8:162::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:32:a8:8e:75:a5:70:03:ed:ee:64:47:7c:35:fa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Jul 27 14:04:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad48780dc6f0c66886af425003421cae6e76ff3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:3e:ee:9d:99:8f:a6:09:bf:50:be:c9:21:
cd:53:79:58:62:66:b6:6d:58:25:57:a2:f5:38:df:
5a:d7:ff:a0:76:c8:eb:b6:9a:33:b0:b9:e7:de:84:
9a:2d:4d:64:f0:24:50:ff:e2:cb:19:b2:39:6d:9a:
55:b1:58:29:e9:7b:59:51:30:9e:f8:1b:c3:ab:e7:
03:e8:de:71:76:06:14:4d:5a:1d:63:83:66:60:0d:
9b:2d:11:13:11:e5:2c:fe:e0:71:46:89:f5:09:f1:
9e:ae:e6:80:79:51:bf:bb:2e:22:a3:c8:0c:93:3c:
28:b7:25:b1:47:9a:08:04:3a:4b:65:a8:db:93:51:
62:44:9a:70:aa:1c:c2:1a:a3:a7:ce:cf:b0:ec:7d:
bb:7d:06:19:44:3c:07:ac:df:a5:8a:8b:c4:f2:80:
67:a5:2e:91:e9:fc:bb:08:7b:4f:a6:f5:33:1c:cd:
51:c2:d5:8f:b8:da:df:90:80:88:81:9d:5a:2a:b7:
4b:35:17:4d:e1:35:50:77:18:fc:3d:9b:ab:86:47:
48:47:c1:4c:d0:7e:ba:24:cf:7b:29:a6:2d:66:f7:
b1:92:17:cd:ca:16:55:16:99:e7:e5:79:4a:5b:78:
4f:dc:b4:57:83:3a:a5:9f:6e:27:16:3d:90:ff:87:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:48:78:0D:C6:F0:C6:68:86:AF:42:50:03:42:1C:AE:6E:76:FF:3F
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/rUh4DcbwxmiGr0JQA0Icrm52_z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.47.64/26
IPv6:
2001:7f8:162::/48
Signature Algorithm: sha256WithRSAEncryption
43:92:5f:b7:fa:03:68:b3:c5:29:36:e8:c1:e9:59:15:9c:6f:
23:4c:97:6f:ff:28:27:0a:df:45:26:4f:b5:8d:69:e8:99:ed:
15:43:65:08:70:a6:6b:7f:d2:ab:56:49:1a:eb:07:64:10:63:
25:0b:12:5b:ef:f1:24:e5:c7:96:db:3a:38:da:0b:b2:6e:f5:
1a:20:79:fa:12:83:49:99:82:83:96:aa:d8:9d:2e:7a:16:d6:
ab:54:ec:9e:8b:48:db:46:89:cf:f1:49:58:25:0b:71:88:45:
3b:d6:9a:20:a6:5b:a9:76:45:f9:a9:e2:7f:22:55:c0:cb:37:
05:99:96:70:27:80:f6:7d:92:e2:08:9d:5a:82:78:88:bb:0c:
15:39:94:d3:76:b1:e2:2f:39:76:98:21:d4:a1:cd:47:ef:ac:
91:6c:69:97:bf:ff:98:76:96:97:a2:7a:d5:c3:c8:d6:59:8d:
c1:27:9c:c5:eb:94:0b:4e:1a:68:0f:01:e4:98:85:f7:17:12:
13:fa:c7:19:33:34:14:6e:df:71:ce:98:60:c9:8a:0d:b8:b3:
77:4b:c5:d2:d6:4a:2c:a2:a3:9d:19:45:24:77:fa:fc:50:8d:
07:ad:a5:a7:4b:93:b5:6a:92:d7:7e:ba:24:96:89:8c:f7:d3:
0b:4a:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:52:25 2025 by rpki-client