Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/fC3AtSHj4uWnRNCJOJWyffnxb_c.roa
File: fC3AtSHj4uWnRNCJOJWyffnxb_c.roa (raw, json)
Hash identifier: k4yZxxd7Kbg9gUH1VtnIM62vxLC45Jz4VtvfU0eH3rQ=
Subject key identifier: 7C:2D:C0:B5:21:E3:E2:E5:A7:44:D0:89:38:95:B2:7D:F9:F1:6F:F7
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0198A231BA4CE97436192BC0556E79205BEC
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/fC3AtSHj4uWnRNCJOJWyffnxb_c.roa
Signing time: Wed 13 Aug 2025 06:50:24 +0000
ROA not before: Wed 13 Aug 2025 06:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 141.226.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:31:ba:4c:e9:74:36:19:2b:c0:55:6e:79:20:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 13 06:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c2dc0b521e3e2e5a744d0893895b27df9f16ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:e9:a8:13:16:5f:0b:23:83:dd:1e:07:e4:
d0:0e:fa:56:98:bf:e0:a8:21:b1:28:99:8d:6e:74:
92:d8:76:3b:4e:1d:24:5d:fb:fc:ec:53:fc:9d:a1:
88:18:6e:4c:6e:f7:92:ec:e4:a4:60:70:4b:4d:15:
b0:8b:5f:25:31:5b:ce:c4:0a:44:2a:dc:9e:87:79:
a2:52:ec:9e:d5:e6:d6:db:89:de:15:d7:78:ff:47:
2e:85:ba:a1:df:58:34:48:4b:20:17:8e:b0:f1:83:
e4:b0:3b:a4:82:2b:b3:d6:1c:7f:ca:68:ec:b5:0a:
c3:71:fa:6e:3c:2e:c4:4c:f2:5d:e4:dd:e5:59:08:
27:a2:6e:e2:b3:c8:65:9a:81:a5:7d:81:98:20:80:
a0:54:76:d3:b4:7d:ac:c3:82:39:2a:93:4f:bb:f3:
e4:64:ed:c2:e7:57:fa:1c:ad:2e:e1:31:6e:84:e4:
3b:d7:11:49:07:7d:77:7f:56:16:86:1b:ac:63:05:
30:23:41:fb:83:95:bb:83:e2:66:f0:b8:17:43:4a:
07:06:f8:6f:d9:72:41:18:f3:32:5e:89:6b:fe:6d:
4e:24:c4:9d:bd:aa:82:dc:d6:1e:49:e5:c3:b4:c7:
eb:55:ba:47:0a:ca:b7:94:42:96:b0:7e:21:cc:8d:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2D:C0:B5:21:E3:E2:E5:A7:44:D0:89:38:95:B2:7D:F9:F1:6F:F7
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/fC3AtSHj4uWnRNCJOJWyffnxb_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:bd:cf:d9:68:44:e3:d9:71:da:53:c5:4f:9a:b3:a0:d4:03:
ca:34:47:f5:88:0f:47:16:06:b4:e9:22:c4:8d:1e:5e:b9:0f:
6f:06:5c:23:49:29:cf:5c:5b:9f:78:c4:b6:f9:0c:b4:db:03:
df:b4:c3:2c:92:93:1c:36:9c:39:a2:90:47:b5:66:9b:b4:da:
65:d2:a6:df:ec:68:44:43:bc:b5:eb:2c:f9:45:6d:31:c5:79:
ca:5d:da:ea:6a:12:9c:5f:46:0d:80:c2:f2:6e:04:46:60:a1:
af:01:34:fc:bc:b7:70:08:9c:cb:90:4f:3a:e5:1e:c6:75:82:
dc:b5:32:d4:48:7b:9f:4e:2c:e2:56:57:9b:5e:60:9b:61:e4:
d2:72:09:49:ed:6d:e4:7f:71:d5:62:a7:ca:5e:c8:3a:db:54:
3b:0b:08:f6:d7:de:77:0f:a7:53:cc:1c:c9:9e:d0:2d:3e:50:
45:76:d5:84:d2:82:f7:8f:96:b8:91:ad:ac:89:83:d3:fb:f1:
d8:b6:35:5f:20:c1:9f:d3:98:77:82:b8:f1:12:6a:0c:e2:91:
40:87:45:e3:db:63:c4:91:c2:a8:df:75:91:10:b7:f2:8a:75:
8c:e2:09:2a:4b:6d:fb:72:3d:a9:5a:e5:f1:cf:b1:1e:05:f3:
40:07:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:03:24 2025 by rpki-client