Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/DUJUsf_8aEBJyZgSgmV9Vwhne5k.roa
File: DUJUsf_8aEBJyZgSgmV9Vwhne5k.roa (raw, json)
Hash identifier: 8XNyxo7dqU3caZB7WQMnNM1LcvoL0TWuICCANY2KZkk=
Subject key identifier: 0D:42:54:B1:FF:FC:68:40:49:C9:98:12:82:65:7D:57:08:67:7B:99
Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial: 0198BD24D4E98CFA7DBA154AAEDB3C917C6E
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/DUJUsf_8aEBJyZgSgmV9Vwhne5k.roa
Signing time: Mon 18 Aug 2025 12:26:04 +0000
ROA not before: Mon 18 Aug 2025 12:26:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214058
IP address blocks: 62.68.78.0/24 maxlen: 24
212.108.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:24:d4:e9:8c:fa:7d:ba:15:4a:ae:db:3c:91:7c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Validity
Not Before: Aug 18 12:26:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d4254b1fffc684049c9981282657d5708677b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:e1:f8:aa:46:1d:7a:53:59:a4:14:8e:d2:
a0:6e:db:83:0a:75:da:0e:41:2f:74:6a:07:37:66:
9e:ac:9d:c2:5c:2a:84:4a:9a:c1:f1:2d:34:56:13:
e6:02:c3:bf:cc:da:48:c9:18:90:76:e5:6d:a2:1b:
75:36:27:75:7d:6c:56:9b:f9:05:32:69:38:79:cc:
de:8d:f0:40:da:03:30:e3:0f:f1:22:1c:52:d3:e0:
dd:7e:6f:f5:f8:d2:f5:02:36:db:93:a9:0e:7a:30:
66:5e:88:b9:f1:fc:ac:b4:91:81:83:2a:c7:3c:a7:
be:d6:62:4a:f7:a3:4c:0f:62:58:9a:1c:64:23:87:
d3:5a:d0:cb:ec:01:e9:2f:c4:dc:08:92:54:32:cc:
86:38:d5:18:99:6b:42:fc:fd:53:18:a7:a1:c3:44:
eb:f2:9b:20:13:30:69:6e:6c:84:98:71:14:8c:cc:
f1:a3:ba:d0:59:10:ad:86:2f:1a:0d:67:c9:7c:84:
0a:ca:1d:bf:6e:9f:a1:98:25:a1:e5:66:83:0d:e0:
ae:c0:e8:ff:04:37:3d:ae:c3:f3:6b:91:55:f2:3d:
07:60:06:aa:ef:7e:5e:12:de:49:90:67:79:43:f1:
4d:aa:a3:50:0a:22:83:bc:3e:1f:42:9d:75:6e:58:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:42:54:B1:FF:FC:68:40:49:C9:98:12:82:65:7D:57:08:67:7B:99
X509v3 Authority Key Identifier:
keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/DUJUsf_8aEBJyZgSgmV9Vwhne5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.78.0/24
212.108.99.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0c:45:d9:30:46:3e:98:dc:8e:bc:48:d0:76:1d:94:91:82:
73:d3:a0:d9:47:c9:93:30:5f:c0:2b:44:7f:e0:59:48:ee:31:
99:fb:ce:97:6a:14:bb:2e:82:a9:ee:4b:82:8b:16:0c:38:8c:
ca:f5:85:b1:81:df:4c:18:a0:46:7a:00:28:da:f9:53:3e:9a:
d5:4c:93:42:49:29:bd:93:8e:f4:02:5e:aa:88:70:e0:d9:50:
e6:9e:7b:8d:b9:b3:fa:b5:44:95:87:50:7b:7b:17:21:79:4c:
a6:ae:b9:49:08:98:db:79:18:f4:8f:6a:fa:de:65:2e:da:3b:
7f:6c:42:c2:69:5a:f3:91:f0:73:2e:6a:f9:b1:81:aa:5d:07:
b8:5c:2f:87:45:fd:45:df:7e:7e:67:9b:d4:74:69:be:e2:88:
c2:f5:2b:bf:2b:b2:62:f6:4f:0f:d6:96:c1:e6:ce:4e:e9:d6:
04:79:bc:e7:26:85:d6:4a:83:96:de:84:2b:6f:10:5a:7b:93:
6a:31:f7:32:81:e0:26:61:01:31:9c:eb:53:28:1c:47:8d:ab:
f6:3a:83:47:8c:76:16:62:da:68:4b:c0:17:ca:94:e5:2a:b2:
3a:63:f6:dc:25:8d:0a:6f:1d:b5:f7:46:c6:a5:90:47:f6:27:
8d:58:c7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:45:38 2025 by rpki-client