Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/r23feT6NV4gkY4zPASAiQfbYf2Y.roa
File: r23feT6NV4gkY4zPASAiQfbYf2Y.roa (raw, json)
Hash identifier: ReD3jPU9ih7dYlCC9A/HHv2ji9KRX8p8gAkXwzlwEc0=
Subject key identifier: AF:6D:DF:79:3E:8D:57:88:24:63:8C:CF:01:20:22:41:F6:D8:7F:66
Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial: 019975BDE7C8D1C580BEAEA61ECA62D2B95E
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/r23feT6NV4gkY4zPASAiQfbYf2Y.roa
Signing time: Tue 23 Sep 2025 08:43:23 +0000
ROA not before: Tue 23 Sep 2025 08:43:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 80.247.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:75:bd:e7:c8:d1:c5:80:be:ae:a6:1e:ca:62:d2:b9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Validity
Not Before: Sep 23 08:43:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af6ddf793e8d578824638ccf01202241f6d87f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:5f:96:38:9c:f8:97:08:3f:81:2c:b2:41:
84:4d:50:26:a0:c4:c6:74:ae:de:b8:29:53:96:93:
2c:8b:29:5b:2e:dc:43:9b:b6:14:85:a2:6f:30:0e:
5a:7c:15:49:0d:64:c5:cd:59:e1:ae:a9:68:00:b7:
36:06:44:93:77:91:73:97:12:f3:ba:93:c3:af:bd:
c3:b3:dc:0b:8b:62:9a:57:9d:33:ec:3c:29:72:31:
fe:5d:b8:b6:60:2b:ec:05:98:d5:4a:3b:41:80:32:
8b:ef:47:96:2e:9e:89:42:88:4a:03:31:f0:4e:e3:
fa:f6:44:20:7a:7c:25:db:17:c2:8e:06:47:77:96:
04:22:fc:14:e7:1c:8d:7f:e8:2d:9e:4f:d0:79:c9:
e7:c7:2e:8b:a0:61:19:2b:b9:c2:c1:5c:82:a0:e0:
5a:29:86:fd:df:ca:f0:93:5f:ea:ce:46:ca:8a:bd:
a1:95:85:fd:87:e2:b7:73:62:e6:96:d0:16:b4:4d:
e1:a9:2b:bf:aa:43:94:20:7a:af:1c:4b:7f:74:cf:
93:1f:8a:c6:6f:70:fb:a6:0d:b7:48:17:6b:20:c8:
2b:ef:69:e8:e2:bb:12:7d:74:e1:df:26:b3:f8:af:
8a:82:60:ab:d0:4c:01:ab:e1:05:9c:99:a6:0a:47:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6D:DF:79:3E:8D:57:88:24:63:8C:CF:01:20:22:41:F6:D8:7F:66
X509v3 Authority Key Identifier:
keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/r23feT6NV4gkY4zPASAiQfbYf2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:27:cf:2e:42:91:72:44:e7:0d:d6:9a:87:67:05:41:c6:06:
ab:c1:b6:08:6e:f7:7c:e3:c4:91:7b:79:1f:99:4d:a0:99:19:
b8:83:c9:39:70:2b:86:64:61:a6:77:54:0d:a3:bf:23:48:7e:
ba:07:af:ea:07:e8:5b:d4:58:85:f2:bf:ea:f7:15:82:41:f4:
13:0c:e6:6f:2a:af:42:46:5c:bf:07:a0:fe:b9:8d:92:76:09:
74:64:8b:a6:10:48:fb:f8:fe:ca:e5:64:c6:7c:76:21:de:cd:
2c:c0:61:1b:00:40:61:27:26:f0:bc:70:cf:0c:36:7b:d7:0e:
b3:3f:c9:e6:0a:26:79:de:de:ff:7b:ca:1b:d9:d2:73:05:9b:
28:1a:48:f9:6f:5e:67:53:a9:c7:e1:8c:1b:b6:88:bd:44:e3:
1a:75:35:23:34:a2:cd:09:97:31:25:bb:74:91:08:c4:7d:e8:
6a:d3:73:24:d7:95:32:40:41:21:55:a2:f3:01:5d:1a:62:fc:
41:89:86:0b:ca:bc:57:70:57:6e:96:4b:1b:13:05:c7:b4:7e:
63:db:b3:01:15:e8:9c:74:23:91:1f:30:07:c5:eb:05:c1:ec:
48:b8:1b:0e:21:68:eb:6e:23:c3:be:06:7e:ac:11:fe:4a:f3:
ff:ec:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:12 2025 by rpki-client