Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/ckN51ugpQaovcqL7-uk8cWmLqXg.roa
File: ckN51ugpQaovcqL7-uk8cWmLqXg.roa (raw, json)
Hash identifier: AbepzMs/Oj4qVnFocQGvyMM251EH9U8v0u27S4AwMCM=
Subject key identifier: 72:43:79:D6:E8:29:41:AA:2F:72:A2:FB:FA:E9:3C:71:69:8B:A9:78
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0198A909BC7B966B6CCDF59F032546AE2AB0
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/ckN51ugpQaovcqL7-uk8cWmLqXg.roa
Signing time: Thu 14 Aug 2025 14:44:04 +0000
ROA not before: Thu 14 Aug 2025 14:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146813
IP address blocks: 82.206.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a9:09:bc:7b:96:6b:6c:cd:f5:9f:03:25:46:ae:2a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Aug 14 14:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=724379d6e82941aa2f72a2fbfae93c71698ba978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:1b:82:3e:08:94:56:a3:94:02:37:91:a5:
27:1a:ea:26:52:f6:79:c8:74:38:60:23:56:11:08:
40:9b:d9:84:4e:0f:9c:4c:ec:a9:92:8d:f6:a8:eb:
45:60:cc:ea:b4:50:36:83:ce:dc:72:58:71:67:28:
d8:c7:a9:29:ce:a1:dd:e3:16:69:67:36:b9:fb:61:
fd:60:fa:15:b5:4d:06:4a:ce:02:24:ee:d9:96:b3:
23:5d:c0:d0:f9:7e:db:7b:22:80:a0:7e:c9:89:1f:
62:46:d3:2e:8a:89:6c:86:d7:43:ec:2a:77:76:44:
eb:a9:e5:86:a2:28:03:12:02:29:95:52:78:1d:5a:
50:6b:c3:3a:bb:99:aa:37:df:be:61:96:78:42:ef:
c1:4b:4f:ae:e0:34:6d:32:8b:6a:0f:cd:ae:a3:ef:
72:dd:da:b3:ed:ca:57:e1:c2:b0:da:82:49:93:60:
02:3e:df:99:ac:a3:5b:fe:4c:29:80:86:65:84:62:
ff:83:a8:64:b1:72:85:71:a2:ed:6f:79:45:24:9c:
31:3d:f2:73:0f:b1:3e:71:ca:28:b8:e7:77:b0:00:
93:7d:70:f3:ab:8a:db:0d:1f:06:39:a5:52:e4:2d:
83:43:3c:30:f1:70:e0:4e:2b:7c:65:11:87:94:36:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:43:79:D6:E8:29:41:AA:2F:72:A2:FB:FA:E9:3C:71:69:8B:A9:78
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/ckN51ugpQaovcqL7-uk8cWmLqXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.108.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a0:00:d5:79:01:d4:22:d1:91:44:d1:04:9b:01:c6:45:20:
84:cc:41:76:9e:d2:97:29:22:ad:58:5b:da:50:2e:b8:44:db:
d0:1c:7b:d1:ec:83:59:b4:47:f8:ea:4e:8a:07:12:0c:fb:b1:
86:35:f7:20:9f:32:d3:75:45:45:8d:5d:dc:97:73:78:61:05:
b4:3e:3a:d9:b2:82:35:f7:ec:3b:f5:9b:fc:4a:03:5c:92:10:
50:76:ed:8f:68:2c:cc:28:b2:c0:8f:82:20:25:5c:09:2c:37:
c5:24:d2:01:7c:5c:a3:33:60:d6:9a:20:0e:17:b7:dc:0a:db:
55:74:f4:80:35:6c:dd:54:83:8c:8a:90:39:c5:54:48:63:b8:
79:9b:be:9e:2a:bf:c9:08:2c:00:52:83:28:73:2e:11:a1:35:
a9:3a:9b:ad:25:18:a3:bb:53:60:2c:dd:1e:35:58:df:b8:6b:
72:5e:35:c3:31:f6:e9:f5:60:e7:f5:55:47:ed:82:1c:10:e5:
05:32:87:e4:16:48:0a:27:34:1d:a1:7a:9a:0c:cb:b7:11:33:
55:34:4b:aa:a4:92:5d:a7:ac:9e:12:e5:39:10:7f:52:af:f7:
d5:0f:34:77:ec:58:6e:75:16:8c:91:90:0d:e5:a3:b6:ba:2d:
ec:da:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:18:16 2025 by rpki-client