Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IXU4yM9nwU6l6GMhBFzIwY9A11w.roa
File: IXU4yM9nwU6l6GMhBFzIwY9A11w.roa (raw, json)
Hash identifier: k5eEwhD8s2/K8vEdO/OYIDlOHxNScJZdZeuE8dibCog=
Subject key identifier: 21:75:38:C8:CF:67:C1:4E:A5:E8:63:21:04:5C:C8:C1:8F:40:D7:5C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0198C67A5CA62C1DE9234B42ACFFB9B9E07C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IXU4yM9nwU6l6GMhBFzIwY9A11w.roa
Signing time: Wed 20 Aug 2025 07:56:04 +0000
ROA not before: Wed 20 Aug 2025 07:56:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 84.32.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7a:5c:a6:2c:1d:e9:23:4b:42:ac:ff:b9:b9:e0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 20 07:56:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=217538c8cf67c14ea5e86321045cc8c18f40d75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:3b:6e:3a:8c:67:ff:0e:00:5b:0e:c7:33:
da:63:db:56:05:13:50:7d:52:2c:59:47:21:23:be:
f3:f2:7a:7b:04:fd:c9:2f:1e:ca:a7:11:7a:68:8e:
93:93:75:09:ca:61:48:1d:40:7c:3c:ac:7c:f4:91:
57:4a:a0:5a:a8:8b:26:79:33:c7:49:d9:3d:6c:61:
b6:dd:89:2e:6a:a7:7e:a9:36:48:26:c1:1a:a9:2b:
5c:5a:fb:39:7e:76:99:f5:25:8d:05:c7:b5:22:a2:
20:dc:b0:2b:43:32:d2:fa:d0:02:b2:80:89:a1:58:
47:13:71:40:2d:14:0d:fb:86:7e:c8:e6:81:84:16:
ed:a6:65:3e:e5:f1:22:f0:6c:d8:8b:04:0a:48:86:
8e:34:ee:c9:a7:d8:04:e2:b6:d1:be:de:61:f0:d0:
36:e5:0a:48:d0:c5:36:45:2e:ba:15:59:f9:90:5a:
9a:28:02:1c:ba:43:10:d2:bd:20:63:cc:12:b8:e2:
46:2a:0a:a3:bb:b9:df:60:10:91:a0:f5:a0:4e:92:
ac:94:94:da:3e:82:b3:7f:c9:9f:cf:dd:84:58:24:
d3:ae:74:82:7f:00:f9:73:c0:a7:88:72:0d:12:25:
82:13:77:48:f5:d7:18:73:eb:f7:be:e0:5d:d9:f3:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:75:38:C8:CF:67:C1:4E:A5:E8:63:21:04:5C:C8:C1:8F:40:D7:5C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IXU4yM9nwU6l6GMhBFzIwY9A11w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.82.0/24
Signature Algorithm: sha256WithRSAEncryption
92:70:bc:d0:2e:cb:56:2a:54:8f:fa:9c:1f:e0:b6:26:e5:1f:
e7:a4:0c:82:71:e8:aa:2e:96:9e:35:a5:40:ff:37:03:5c:5a:
02:96:18:8c:8e:74:1a:76:e6:d4:a3:73:01:a1:0e:4d:85:a5:
05:bb:29:ed:f8:79:75:61:61:99:a2:4a:69:e3:32:8c:fe:7c:
78:56:9e:6c:f2:e2:29:0c:f4:16:50:64:c8:33:aa:cc:df:d2:
62:88:15:71:3e:f0:bd:b5:c6:c7:66:a7:e8:3c:83:d2:f7:01:
0c:f3:84:ae:59:5e:fd:fa:db:a5:f9:4e:f0:21:a9:aa:7c:11:
db:82:db:20:6b:44:c8:5b:eb:46:60:bd:8f:a2:cf:57:8a:82:
da:3a:9b:1f:db:57:55:a4:28:f6:e9:14:3b:e9:ba:91:7b:f7:
2a:6a:06:dc:92:f3:2b:83:a0:9e:9c:54:a9:2f:89:c8:d6:a5:
19:fb:a2:4d:2a:8a:72:f7:df:ed:b9:1c:14:fd:62:c7:e4:6d:
de:66:c7:47:ec:99:6c:1d:67:8a:a7:eb:33:8d:00:c3:f4:a7:
b0:aa:91:55:ac:31:8f:92:59:69:5d:ce:84:43:e8:a0:73:c1:
83:67:20:42:fd:15:74:26:9a:32:9d:48:87:5a:ad:bf:0b:1c:
ea:a8:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:29:54 2025 by rpki-client