Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/bnbO6YG10PCmqlCsmyP50Fd_o4g.roa
File: bnbO6YG10PCmqlCsmyP50Fd_o4g.roa (raw, json)
Hash identifier: FN6GI1Kp7T9KjFIMw11eQNYoSIQT81c+97qaaX9eCCg=
Subject key identifier: 6E:76:CE:E9:81:B5:D0:F0:A6:AA:50:AC:9B:23:F9:D0:57:7F:A3:88
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0198D5C610DC39E918885EB46D6232D9241E
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/bnbO6YG10PCmqlCsmyP50Fd_o4g.roa
Signing time: Sat 23 Aug 2025 07:13:04 +0000
ROA not before: Sat 23 Aug 2025 07:13:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200260
IP address blocks: 31.42.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:c6:10:dc:39:e9:18:88:5e:b4:6d:62:32:d9:24:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Aug 23 07:13:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e76cee981b5d0f0a6aa50ac9b23f9d0577fa388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:8c:09:b4:fe:f8:eb:a0:37:d9:b6:65:36:
fa:1e:63:d0:6d:ad:a0:59:ab:2d:f9:f5:a3:fa:57:
55:cd:0a:8e:55:5a:1a:b3:94:49:a1:f5:2c:19:72:
a2:d9:3b:93:9a:03:57:7a:11:40:af:cf:cf:02:77:
dc:6e:dd:83:82:14:98:d5:09:9a:a8:2f:e7:5d:b2:
9c:a2:47:e1:8f:2b:79:04:bb:f5:5c:c3:a4:99:e1:
9c:ab:42:2d:3a:bc:c1:b8:7f:64:0f:cc:b4:c7:60:
e0:26:fa:41:77:97:db:83:e0:6d:3a:f8:01:f3:1f:
cc:d1:e0:ae:a1:d6:03:3b:0e:03:1e:c3:de:ed:a1:
e6:7d:43:37:59:5b:e6:1f:d0:d4:e3:a0:2c:b7:67:
36:08:52:ae:63:4f:83:f4:b0:1c:b3:30:b8:c4:b6:
8c:e1:33:d8:09:f4:b0:d4:94:77:ff:5c:ea:a3:0b:
a2:8b:3e:8b:6a:4f:69:26:e4:e3:42:4e:0e:74:cd:
71:69:47:75:d0:61:3f:2c:9a:b3:27:99:39:9c:dc:
75:0f:be:d7:28:bc:ab:e2:a0:9a:da:5d:0a:19:18:
66:c1:eb:ba:31:6d:e1:f4:ef:d1:88:fa:2e:fd:22:
74:51:72:2d:ce:1b:53:3f:62:79:e9:d3:98:7e:c3:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:76:CE:E9:81:B5:D0:F0:A6:AA:50:AC:9B:23:F9:D0:57:7F:A3:88
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/bnbO6YG10PCmqlCsmyP50Fd_o4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.122.0/24
Signature Algorithm: sha256WithRSAEncryption
23:84:97:72:2d:56:a1:1c:7c:12:03:55:1f:b9:84:ff:e9:a0:
43:85:c4:0e:40:76:3d:51:b8:27:96:0d:a9:ee:4a:83:f3:ed:
39:20:cd:13:43:85:7f:ef:ff:e4:b5:b5:cc:31:b7:a2:6e:8b:
10:bf:a4:87:44:9d:22:ab:56:41:af:f7:87:08:61:16:2e:4f:
b4:02:71:4a:95:20:56:49:5f:9b:be:56:2a:77:e9:0f:60:25:
ce:7d:39:f1:bb:0b:41:63:4e:d7:15:8b:92:1e:a1:9f:6c:87:
70:56:b5:d9:81:85:7a:d6:81:00:85:ca:04:7f:b5:fa:6f:a2:
2c:a8:23:4a:7e:08:86:da:39:3f:4a:b2:85:00:37:36:21:ab:
b5:e6:c4:00:e7:c3:d8:d4:67:36:0b:e2:c3:62:36:a3:93:41:
4d:9d:24:e1:25:f9:ca:a2:84:f3:2a:0b:21:bd:f9:7a:8a:4e:
04:fd:02:7f:4a:fe:83:c4:6a:10:70:17:43:f1:c9:86:d0:27:
b6:f3:69:49:15:c8:3e:bd:32:dd:5c:22:85:39:fe:04:1d:1e:
fb:fd:d5:b0:11:17:21:f7:54:f1:58:c3:a1:98:b7:e0:5d:a0:
1a:61:0c:9f:d9:ba:55:e7:e7:69:2e:df:30:3f:c6:5f:7c:82:
d0:f0:7f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:01 2025 by rpki-client