Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/oidQOFv_T3t4hgPCm6h_UreADsw.roa
File: oidQOFv_T3t4hgPCm6h_UreADsw.roa (raw, json)
Hash identifier: y9QfSR0j2NSF/2jSZyP0tv3TDh1rVPF+ZeadaUNAaYk=
Subject key identifier: A2:27:50:38:5B:FF:4F:7B:78:86:03:C2:9B:A8:7F:52:B7:80:0E:CC
Certificate issuer: /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial: 0197AB8C21203412CE43DD2FC25CEF6BFA0E
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/oidQOFv_T3t4hgPCm6h_UreADsw.roa
Signing time: Thu 26 Jun 2025 09:22:56 +0000
ROA not before: Thu 26 Jun 2025 09:22:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211861
IP address blocks: 193.3.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:8c:21:20:34:12:ce:43:dd:2f:c2:5c:ef:6b:fa:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Validity
Not Before: Jun 26 09:22:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a22750385bff4f7b788603c29ba87f52b7800ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a7:a4:21:26:11:ec:78:46:b6:07:7b:1a:b9:
eb:c9:4a:17:34:24:52:d4:92:f2:c5:58:c3:37:3f:
6c:e3:0a:7a:3c:a1:e1:0c:2a:3f:80:c9:13:7d:7b:
4d:bc:4f:2b:c3:0b:43:8b:2e:60:cf:42:42:88:cd:
84:56:0e:33:31:07:5d:63:e5:7a:8e:26:9c:8c:6b:
0d:af:3c:e6:b1:2d:cf:e3:9a:e0:f3:b0:3b:19:36:
ab:32:76:70:51:a4:26:ee:fd:c4:ef:b1:d6:b9:ec:
51:1b:a2:73:0e:1e:3b:45:85:b5:77:c6:95:7b:90:
9d:c6:bc:7c:c5:91:0d:cc:76:41:1b:03:c5:da:78:
b3:42:4f:ae:9b:7a:6a:88:60:03:a0:c7:95:51:82:
98:9a:53:19:c8:c7:19:91:7b:59:39:7b:0c:1f:cd:
62:cd:f3:30:63:ae:c1:0d:ef:93:cd:9c:e9:61:6d:
2f:2e:70:58:a0:ef:41:05:d9:50:de:e3:6e:2f:43:
15:4d:ca:3d:f6:d1:fc:ba:ea:c2:76:14:20:aa:3b:
c0:35:51:26:af:62:78:26:07:08:c5:df:c2:18:35:
36:ef:36:f3:d8:24:06:98:b9:9b:d8:ec:77:07:ab:
91:c7:fb:ce:1e:d0:98:30:3a:bc:70:a1:78:67:d0:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:50:38:5B:FF:4F:7B:78:86:03:C2:9B:A8:7F:52:B7:80:0E:CC
X509v3 Authority Key Identifier:
keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/oidQOFv_T3t4hgPCm6h_UreADsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.29.0/24
Signature Algorithm: sha256WithRSAEncryption
81:35:50:d5:62:b9:31:da:18:af:fe:a4:cb:89:e6:53:7d:6e:
59:0b:63:81:ed:af:58:ae:2e:1f:1c:42:ba:74:9b:4e:49:3e:
fd:9b:e8:cf:aa:98:4c:23:5e:8d:f3:cb:90:ea:21:d0:90:d4:
b3:18:c0:39:df:13:99:e7:61:1f:43:16:96:bb:28:48:2e:c4:
d1:50:0f:3f:17:1c:6f:f9:97:44:6a:44:f5:70:0a:05:eb:63:
12:64:23:83:dc:c8:1f:a2:0f:da:dd:ad:73:b9:15:e6:fe:73:
65:27:d0:bc:b5:a4:a3:e0:55:2e:b7:0e:ad:69:ac:e5:cb:37:
9e:14:98:4b:70:cd:8e:21:14:38:97:c1:f0:6b:9d:43:6c:e9:
7e:7c:2c:07:e1:81:76:74:bd:0f:d9:08:54:b1:57:92:d9:e9:
27:e0:dc:30:86:9c:9d:58:0a:ca:b9:97:66:37:91:67:e4:31:
7f:65:d4:e6:16:85:b9:7b:a7:ce:a5:6c:c7:20:4c:7e:14:c1:
ad:65:d6:3f:6f:09:1f:06:d4:57:f5:27:c8:8c:c6:dd:44:a0:
19:a2:d7:91:41:43:2f:cf:44:c9:77:d4:fe:88:bf:e7:79:b1:
d8:15:fa:22:9e:00:5d:68:b8:5b:d0:cd:f3:e6:69:b1:79:f3:
52:19:27:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:06:28 2025 by rpki-client