Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Cv3vnxyQrcUkehMbjcE1dUNHZTs.roa
File: Cv3vnxyQrcUkehMbjcE1dUNHZTs.roa (raw, json)
Hash identifier: w7fOn9pwKaL8nBQdPwYW0MsTvw51A1laD3hxAa81Dh0=
Subject key identifier: 0A:FD:EF:9F:1C:90:AD:C5:24:7A:13:1B:8D:C1:35:75:43:47:65:3B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01987C115E16349AB02795F52A77613792C5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Cv3vnxyQrcUkehMbjcE1dUNHZTs.roa
Signing time: Tue 05 Aug 2025 21:09:29 +0000
ROA not before: Tue 05 Aug 2025 21:09:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51358
IP address blocks: 84.32.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:11:5e:16:34:9a:b0:27:95:f5:2a:77:61:37:92:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 5 21:09:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0afdef9f1c90adc5247a131b8dc135754347653b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:53:cc:2c:80:9c:8c:81:2d:23:3e:ee:10:e1:
be:24:92:31:95:71:91:c0:67:9b:4f:2e:47:fe:59:
af:a1:aa:e1:91:38:6d:dc:f7:78:84:d7:a0:78:8c:
aa:c3:7e:48:d4:35:3b:fc:da:0c:80:32:fd:eb:d3:
1d:f9:3a:ee:c3:84:5a:35:4b:51:7f:0b:80:5a:2e:
6c:99:4a:74:dc:82:5d:65:41:33:13:76:42:04:2d:
d2:85:c6:c4:87:48:c3:a0:0b:a5:90:5b:50:8c:3e:
35:9b:4e:d2:7f:b6:f5:aa:75:1a:b7:ab:99:bc:57:
4f:49:00:63:db:58:bc:ab:6c:ad:f5:d4:8c:59:ef:
ed:43:a7:92:ff:12:f2:9a:ec:95:e8:ad:08:a2:90:
c6:88:58:d6:24:4d:bf:2b:f8:5a:9d:ba:a0:ea:0b:
44:60:0a:05:67:2e:90:05:ad:07:4f:70:10:ff:95:
ce:50:1b:2c:0f:1a:15:dc:64:77:c3:05:2e:12:ad:
fe:e9:52:5e:e4:4d:ee:c6:a5:d8:e9:19:d8:03:c8:
c1:d1:85:56:42:a4:cb:42:2f:45:c2:81:cf:d1:83:
c7:7f:45:5c:f3:98:18:35:6b:ef:06:82:69:2f:40:
3d:e2:24:9c:20:f4:1b:c5:11:38:21:77:15:7c:20:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:EF:9F:1C:90:AD:C5:24:7A:13:1B:8D:C1:35:75:43:47:65:3B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Cv3vnxyQrcUkehMbjcE1dUNHZTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a0:3c:89:cd:7b:00:cf:6b:20:f9:45:ce:94:84:b9:64:ba:
53:16:f2:e4:e7:e5:2f:8b:66:8f:a3:5f:02:8f:86:94:6c:9f:
87:52:2f:6f:91:bf:af:dd:96:f4:6b:39:58:92:61:52:d9:83:
6a:ef:93:c5:d8:2c:1d:62:ae:f0:29:48:e5:44:d4:fb:8b:ec:
fd:b2:6f:00:f5:7c:f7:8f:7c:91:5c:a5:d7:22:dd:eb:10:ae:
ad:ca:91:c8:19:bd:b7:8a:70:0f:e1:e2:3b:d5:1c:a8:6b:12:
94:ce:43:3c:bc:90:5b:9e:77:dc:f6:c6:b8:a0:f0:ca:f5:67:
e2:20:26:5c:82:0d:14:2e:2d:09:3b:85:62:e9:7d:d0:f4:39:
e0:98:c1:7c:c8:c4:5b:1f:d3:71:b0:c5:6a:9f:18:97:12:f7:
00:32:92:7c:9d:84:82:06:d8:a2:a4:cd:7a:e4:15:af:2c:a9:
b5:4b:c6:f0:26:66:3c:4d:cd:17:b4:84:80:44:f7:f0:3d:ec:
0e:32:51:fc:ff:e4:09:d0:5e:01:89:80:19:7b:89:b7:46:b4:
01:70:71:36:c7:52:c9:66:e4:f3:5f:ed:44:94:52:03:18:56:
94:e6:81:c3:df:64:73:40:5b:b5:0e:3b:40:db:c0:e8:ad:d2:
c5:dd:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:39 2025 by rpki-client