Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/o-k703YStiAy5KUZuCIku-Gb1VI.roa
File: o-k703YStiAy5KUZuCIku-Gb1VI.roa (raw, json)
Hash identifier: HdUF/e0Ve/16Io5tSSce+LiQN66lprLkSnrx4lYGkbk=
Subject key identifier: A3:E9:3B:D3:76:12:B6:20:32:E4:A5:19:B8:22:24:BB:E1:9B:D5:52
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0197B652661C71053CAE8D1C52C98AC99298
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/o-k703YStiAy5KUZuCIku-Gb1VI.roa
Signing time: Sat 28 Jun 2025 11:35:42 +0000
ROA not before: Sat 28 Jun 2025 11:35:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211881
IP address blocks: 94.183.149.0/24 maxlen: 24
94.183.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:52:66:1c:71:05:3c:ae:8d:1c:52:c9:8a:c9:92:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jun 28 11:35:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3e93bd37612b62032e4a519b82224bbe19bd552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:d5:35:e2:c7:5c:b5:af:61:98:4c:68:7b:
1f:e8:f1:69:10:03:c2:16:19:dc:55:9a:d4:10:0f:
03:8d:81:16:33:99:58:86:2b:95:00:1d:bf:52:06:
98:ef:f7:fd:44:91:2e:f8:2d:a3:71:55:14:da:31:
cb:8d:75:35:ce:d1:d5:f5:78:7b:a4:f2:25:cf:af:
9c:f3:93:f6:62:49:54:b8:5c:9a:90:04:e3:fd:6d:
5d:ae:ae:8b:e3:e0:44:da:e8:83:79:57:f1:ff:c9:
24:f0:bf:73:54:5b:6c:1f:29:9e:2e:b7:26:f5:1a:
c2:3a:c6:21:04:6b:bd:7b:c8:c3:c0:a4:10:e2:8f:
b3:5e:69:74:e1:fd:07:5f:0e:fb:8f:49:9a:b1:92:
2a:96:63:69:64:d1:e1:b8:2d:a3:c0:88:ef:13:c6:
77:70:bf:89:0c:d9:c3:5a:77:b0:4c:d6:95:38:9b:
80:b2:54:23:b8:28:f4:9a:19:56:0f:a5:f9:b4:e9:
37:86:fd:17:de:15:31:67:b5:2e:5a:f0:b8:30:94:
a1:bc:99:74:87:e5:a1:2e:f3:fc:04:f7:39:c7:ad:
7c:df:26:8d:97:23:8a:be:e9:56:6d:87:df:ac:fb:
a4:34:f0:41:db:2c:f3:ef:bc:ed:b5:3c:f0:09:e1:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:3B:D3:76:12:B6:20:32:E4:A5:19:B8:22:24:BB:E1:9B:D5:52
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/o-k703YStiAy5KUZuCIku-Gb1VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.149.0/24
94.183.233.0/24
Signature Algorithm: sha256WithRSAEncryption
95:8d:de:da:9b:79:3c:94:77:95:f4:ea:cb:90:6a:37:b3:0c:
27:d3:2a:99:ad:e0:01:08:06:87:ef:c6:21:36:e4:1e:65:f7:
8f:fd:29:68:54:9f:ce:41:71:71:3a:14:a1:56:08:43:10:56:
e5:4e:a5:5f:8b:95:12:a1:54:25:3e:29:e9:b1:be:d0:d5:bc:
a7:ff:f2:eb:54:79:76:59:f6:49:3b:c3:d9:64:4a:6c:db:bc:
60:46:ef:89:34:f5:1e:09:41:fe:cb:9c:64:a4:53:75:84:1e:
ac:99:96:0b:43:a7:10:a2:fe:a5:5d:fa:f2:81:db:34:d1:fb:
96:09:0a:4f:6d:ef:86:ee:d2:2c:00:92:57:21:24:b0:8c:89:
49:94:28:17:3e:49:75:5d:1c:a0:4d:2a:1a:ee:12:56:d8:bb:
c0:35:d7:16:0c:be:9a:3f:b4:5c:06:f0:ea:88:e0:04:45:67:
cb:6b:98:70:bb:03:60:ac:9c:2c:99:f6:e3:44:f1:ec:50:7f:
a9:5b:f6:91:e6:ac:a2:9c:d4:3c:6c:5b:28:08:b1:bc:9f:e4:
b7:83:41:59:74:ad:26:cc:b2:73:9e:58:72:b5:a5:7b:6d:9b:
4f:47:ef:e6:c3:b5:6a:6f:44:73:ab:6a:33:38:fb:9b:58:bb:
3f:81:56:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:19:19 2025 by rpki-client