Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa
File: 1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa (raw, json)
Hash identifier: dsFKxx55TJI4durjTXMUPKnGnFdN9dd8cpckDwK4aTc=
Subject key identifier: F9:D4:A3:D9:F5:89:75:43:BA:6F:3F:6C:73:60:58:54:AE:49:0D:01
Certificate issuer: /CN=ff0732a42328074701142221e3d46a29f296c29c
Certificate serial: 01978943FC6506771D3531D6388F973C5D7D
Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa
Signing time: Thu 19 Jun 2025 17:37:03 +0000
ROA not before: Thu 19 Jun 2025 17:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215668
IP address blocks: 185.196.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:43:fc:65:06:77:1d:35:31:d6:38:8f:97:3c:5d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c
Validity
Not Before: Jun 19 17:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9d4a3d9f5897543ba6f3f6c73605854ae490d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:33:5b:db:17:b4:eb:e1:08:68:55:02:c3:
04:95:2c:e6:1b:df:05:c9:7e:e1:a3:3e:aa:a2:55:
d5:dd:11:ae:a2:e9:ce:d6:1e:be:96:e4:74:3d:61:
2a:eb:46:5d:43:3f:12:d6:59:87:be:f6:58:f8:c7:
01:6a:19:f3:20:ee:30:4b:f2:42:15:4c:4d:2b:31:
50:49:54:63:f1:8e:ed:73:c8:d9:18:78:a8:8c:d0:
3b:02:86:4a:7e:e2:a6:ec:19:41:32:a6:2c:ff:1c:
04:2e:54:d9:f0:d9:31:c9:96:27:90:51:1d:e6:4b:
47:95:95:82:f7:5f:35:59:eb:e4:54:f2:49:c5:eb:
2c:af:fe:df:a7:35:b7:55:93:e0:a9:b9:52:06:0c:
48:7b:27:6d:8b:0d:9f:13:47:96:58:b5:34:4d:a2:
60:0b:5b:b2:7c:41:74:da:f4:80:46:fc:05:1c:62:
a5:14:f0:38:36:78:08:3f:7d:05:b5:f2:5e:b1:56:
dd:c3:aa:49:f7:4a:7a:36:f1:10:fd:77:22:44:8c:
5e:9e:88:3a:5a:ad:f4:c6:69:60:bb:7b:75:2a:05:
75:33:77:30:c9:aa:65:fd:d9:d4:54:15:78:6d:0f:
6d:da:3b:eb:a0:56:e7:5d:d4:d4:f6:06:a6:c9:ba:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:A3:D9:F5:89:75:43:BA:6F:3F:6C:73:60:58:54:AE:49:0D:01
X509v3 Authority Key Identifier:
keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:60:57:77:dd:31:da:b9:56:e8:2c:54:2d:21:80:5d:6e:54:
ca:76:34:18:21:7d:43:47:d6:fc:df:b5:a3:32:2f:4b:96:dc:
84:75:04:1a:38:5d:6b:00:62:22:b6:f4:e3:76:c2:8e:d9:aa:
08:b1:9e:b2:85:42:3a:80:3f:43:b8:3b:83:cf:94:97:29:e3:
87:dc:11:c5:67:2c:bb:42:99:2f:5c:01:02:f3:2e:a8:cb:75:
67:da:ad:57:91:51:dc:24:3e:8d:89:52:91:90:d0:6f:9a:de:
85:99:1f:01:ed:ed:f3:aa:7d:72:7a:ce:4c:38:01:6f:db:9a:
b5:e6:36:78:3e:bb:c3:ab:3e:f1:a3:91:a1:a9:a0:6c:60:c5:
eb:88:56:b7:4b:4e:c5:60:7c:d4:ee:00:37:82:0f:b8:4c:ab:
42:7e:17:5b:a3:fe:17:2d:a6:0d:e9:35:eb:24:e2:c0:19:51:
40:75:c3:32:e7:76:b4:b2:f5:4e:40:46:32:64:ab:0f:a5:99:
c1:2c:c8:4e:2d:4e:11:3d:b7:d6:d7:1a:b4:53:37:78:4a:d2:
1b:31:98:bc:1e:ca:0c:e2:f4:02:7c:e1:7b:92:5d:ac:36:5c:
45:e2:c3:36:b0:f6:5c:36:d8:95:e0:3e:ca:3d:51:64:a2:0f:
5b:22:2c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:08:45 2025 by rpki-client