Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/CPiIojjN_hGhtM9o3XpsrEzWNo8.roa
File: CPiIojjN_hGhtM9o3XpsrEzWNo8.roa (raw, json)
Hash identifier: LStwxa+rr7x142c0mGinIBqV/v+geLFxA1eFA03qVbo=
Subject key identifier: 08:F8:88:A2:38:CD:FE:11:A1:B4:CF:68:DD:7A:6C:AC:4C:D6:36:8F
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0198ACD7DBC62429971D15DDB89C85B6F2BA
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/CPiIojjN_hGhtM9o3XpsrEzWNo8.roa
Signing time: Fri 15 Aug 2025 08:28:04 +0000
ROA not before: Fri 15 Aug 2025 08:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.14.38.0/23 maxlen: 23
45.132.25.0/24 maxlen: 24
45.132.27.0/24 maxlen: 24
185.155.54.0/23 maxlen: 24
185.155.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ac:d7:db:c6:24:29:97:1d:15:dd:b8:9c:85:b6:f2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Aug 15 08:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08f888a238cdfe11a1b4cf68dd7a6cac4cd6368f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:7b:26:67:97:af:11:b3:70:37:11:dd:d0:
07:2b:40:ef:f4:18:5d:95:50:c0:d9:c2:dd:6e:9f:
e8:ab:45:66:4a:07:f7:87:cb:b8:38:1e:a6:2a:32:
42:1f:b6:aa:29:48:85:69:44:30:b0:4d:6c:02:b9:
01:1d:65:82:43:99:c0:5b:f8:74:d4:f3:5d:a4:bb:
0a:06:16:75:62:a7:79:b8:de:09:91:0f:e9:80:1d:
a3:a0:c4:6d:54:3b:39:14:c4:50:04:0a:b4:d6:2c:
f1:bf:eb:24:63:d4:0b:3c:18:33:b2:cd:23:48:ab:
2c:fc:bb:65:e1:45:5c:e8:98:f7:dd:7b:76:21:ca:
2a:0c:b3:d9:b7:80:62:ca:0b:33:f8:30:d0:85:a9:
78:52:c2:a5:d8:27:74:f0:cf:d1:67:6f:57:81:7c:
4b:7a:ac:84:c5:78:9f:20:49:4b:da:ab:57:f9:1b:
18:2e:f0:dd:47:12:9d:4c:c5:04:f9:1b:7f:c5:c6:
77:79:a3:ca:b4:8a:22:46:52:b5:1a:fe:be:2b:1f:
78:45:7e:2c:e9:87:06:e7:5a:a7:91:27:17:bf:c7:
73:17:07:21:a8:c1:08:b5:db:8a:51:d6:71:ed:02:
b2:a1:26:6c:de:10:ff:ac:32:e5:26:39:56:0b:85:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F8:88:A2:38:CD:FE:11:A1:B4:CF:68:DD:7A:6C:AC:4C:D6:36:8F
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/CPiIojjN_hGhtM9o3XpsrEzWNo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.38.0/23
45.132.25.0/24
45.132.27.0/24
185.155.54.0/23
Signature Algorithm: sha256WithRSAEncryption
54:da:01:30:48:53:11:0c:e7:0e:05:27:d5:23:08:4c:44:66:
18:1c:8b:e6:60:ff:a1:79:87:69:73:73:48:76:57:e3:20:0e:
4d:7b:c1:35:84:e0:e4:24:6d:c9:4b:65:17:97:5e:fb:90:ca:
97:ac:2d:aa:63:cb:7a:b8:80:93:62:e6:63:08:20:bc:16:d5:
2c:56:cb:61:c1:66:bd:92:41:8b:51:41:8b:6a:04:f0:70:f2:
5c:e9:7e:0e:db:d3:20:65:33:4d:20:20:48:cf:69:b2:71:9e:
60:22:28:00:51:76:93:5e:9e:59:a2:d5:a9:fc:2d:e6:d4:0d:
a1:c7:09:b5:fb:26:48:7c:1c:fc:34:fb:12:43:24:cd:57:01:
ca:c9:7d:ed:b0:c0:04:b8:21:ec:12:2f:6d:1c:fd:b7:f0:b5:
98:c7:00:95:c7:69:93:8a:87:d3:37:b1:ab:e4:31:f5:e1:b5:
7b:64:ae:e5:b2:5c:71:21:5a:80:ef:00:95:c0:c8:09:b8:22:
88:a0:e8:e5:49:42:d1:16:5f:4d:64:12:47:4f:df:05:55:4f:
81:78:e5:5e:a8:90:30:db:82:e4:2e:d7:2e:21:21:d0:88:81:
1b:b5:23:d4:99:51:05:e3:73:5e:5e:0b:fd:fb:06:69:af:c6:
d6:97:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:28 2025 by rpki-client