Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/banoJlZWTM-p2IkdyiT6CAesZKU.roa
File: banoJlZWTM-p2IkdyiT6CAesZKU.roa (raw, json)
Hash identifier: KNVUyvxmPDx/fjWQORLa0UvJJdQn2KuVCngeDpOcDM8=
Subject key identifier: 6D:A9:E8:26:56:56:4C:CF:A9:D8:89:1D:CA:24:FA:08:07:AC:64:A5
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 0198C29817A67B9A21F5363A0C1885C73403
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/banoJlZWTM-p2IkdyiT6CAesZKU.roa
Signing time: Tue 19 Aug 2025 13:50:04 +0000
ROA not before: Tue 19 Aug 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 195.254.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:98:17:a6:7b:9a:21:f5:36:3a:0c:18:85:c7:34:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Aug 19 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6da9e82656564ccfa9d8891dca24fa0807ac64a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:64:6f:bf:46:bb:1e:87:7b:59:5c:b1:a0:
67:d7:66:10:e9:b7:31:d6:70:72:d1:94:5e:9e:d3:
d3:fd:1b:f3:0e:37:e9:94:95:b3:89:da:14:be:ad:
e2:db:80:12:6c:a3:a4:7c:10:bd:e2:cc:54:c6:59:
0f:5c:5d:f8:10:cc:24:38:9c:e3:dd:ba:fa:10:8f:
a1:f8:e7:22:47:64:ca:b3:e7:23:e3:1a:97:c9:ac:
1c:ca:a1:af:af:0d:b7:1c:4f:23:34:64:8f:39:ba:
e7:d9:1b:cd:e7:82:4c:90:3c:81:66:44:1a:9c:12:
70:e5:4f:5c:a0:5b:46:4f:45:12:c8:c7:eb:06:3f:
21:ca:eb:9a:fe:a8:f9:f6:d2:d1:12:40:2c:16:36:
2a:73:e5:b0:c0:6c:50:8e:f6:56:57:40:97:1b:3c:
4b:bc:68:31:e2:fa:07:d8:5c:c3:bd:d8:dc:04:6f:
30:37:e9:e0:bb:f7:91:91:54:18:8c:4a:c3:2e:b6:
38:4f:5f:cf:ae:51:7a:e8:2b:8e:43:6c:63:cd:ec:
de:5f:80:13:9b:fe:92:3b:12:ec:4d:11:f4:a6:c4:
15:05:76:84:ee:0d:90:58:29:39:d5:6b:94:17:5d:
4c:3b:62:4d:d6:7f:ab:f2:6e:fe:1b:a0:d1:36:f3:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A9:E8:26:56:56:4C:CF:A9:D8:89:1D:CA:24:FA:08:07:AC:64:A5
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/banoJlZWTM-p2IkdyiT6CAesZKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.171.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:07:74:ea:e7:ed:73:b4:7c:8d:74:7e:70:bc:8d:7d:07:4f:
49:b9:b5:0f:bb:81:2c:0e:4f:f3:fb:7e:b7:23:29:ce:8a:3a:
5d:f9:c9:69:13:9d:1e:85:ff:b5:be:eb:85:6c:29:bd:d2:df:
ca:20:9f:7b:b8:48:f2:42:0e:73:3a:c0:12:a9:88:41:10:ff:
b5:c0:c8:19:51:85:1e:31:69:ac:4a:c3:29:55:c6:cc:bf:48:
f7:36:1b:78:9a:4e:fa:25:6c:8f:85:d1:31:bf:67:2a:93:00:
1e:a6:69:e4:c5:f4:b1:16:94:6f:83:3f:0f:be:42:78:40:b4:
19:c2:e7:f9:75:f1:73:3d:28:73:c2:90:c2:84:59:c0:3a:20:
96:d0:3b:3c:af:3b:a6:28:f2:ec:b4:3d:33:c1:cb:9a:33:59:
96:5c:1d:a2:a9:e1:5b:c5:a0:dd:dc:6a:a9:95:c1:0d:83:03:
ae:ee:d9:69:d4:2f:e0:ec:14:e0:17:a0:cf:2c:5d:5c:b2:2c:
ba:50:d7:de:39:a6:9c:d2:40:57:fb:c8:6e:77:70:97:66:41:
8c:63:d2:bf:76:d2:55:f1:0c:1e:1a:82:a1:40:fa:d3:b6:24:
d5:3a:db:db:2f:8e:ab:37:08:f1:5f:98:76:16:de:73:aa:eb:
41:fc:fb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:55:17 2025 by rpki-client