Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/0Xu9MwyoHkfp7GLAOKKRl3-RnUQ.roa
File: 0Xu9MwyoHkfp7GLAOKKRl3-RnUQ.roa (raw, json)
Hash identifier: VyIx7EHEZctcI6C3p3OjyiQ9ZrYWF3YW1EKBVSDH0tQ=
Subject key identifier: D1:7B:BD:33:0C:A8:1E:47:E9:EC:62:C0:38:A2:91:97:7F:91:9D:44
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0198CE664000FE79124702482DE19ADAFAF9
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/0Xu9MwyoHkfp7GLAOKKRl3-RnUQ.roa
Signing time: Thu 21 Aug 2025 20:51:04 +0000
ROA not before: Thu 21 Aug 2025 20:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401783
IP address blocks: 195.216.174.0/24 maxlen: 24
213.182.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:66:40:00:fe:79:12:47:02:48:2d:e1:9a:da:fa:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 21 20:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d17bbd330ca81e47e9ec62c038a291977f919d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:34:87:b5:8c:38:d0:c6:5f:82:fe:b0:e9:
c3:38:1e:3d:27:61:d7:9b:c2:54:27:08:b6:ed:ff:
7d:6b:bf:69:59:7e:24:93:b7:2f:df:64:89:9c:e9:
41:4a:b8:7f:c2:60:be:fd:0c:e6:69:62:63:09:8e:
bf:48:ad:ee:dc:05:2f:e8:47:2b:34:a8:1f:d7:33:
97:68:40:d1:ae:4e:ce:ba:e2:0a:ec:90:3c:94:66:
b5:27:b7:d8:02:4c:22:8d:cd:e8:80:50:e6:44:94:
81:32:b8:47:76:26:c7:5d:02:29:53:19:46:4b:ae:
6b:7f:0a:26:c0:9b:79:b2:60:36:c7:fe:5d:d1:62:
05:7b:3f:73:d1:d2:ae:3b:05:1b:df:60:9c:7c:94:
d8:b9:b0:87:e2:c1:e3:3e:3e:66:bd:bb:62:04:a3:
0e:2a:de:9b:42:b5:1a:89:49:c8:a2:c4:cf:89:9f:
71:d8:58:35:a8:d9:e4:f0:a1:60:be:2a:97:1e:0b:
81:ce:eb:79:ee:c4:84:84:19:c6:72:ae:61:21:5c:
33:6e:bb:b1:59:31:9c:72:93:d9:98:f8:36:62:49:
c2:36:ec:78:21:41:b2:a0:c3:b5:63:93:33:15:06:
8c:d4:37:90:7c:02:35:5b:21:a8:e1:8a:37:26:46:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7B:BD:33:0C:A8:1E:47:E9:EC:62:C0:38:A2:91:97:7F:91:9D:44
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/0Xu9MwyoHkfp7GLAOKKRl3-RnUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.174.0/24
213.182.198.0/24
Signature Algorithm: sha256WithRSAEncryption
38:42:0e:d0:84:ba:60:5b:ec:e3:8e:10:c5:43:99:3a:93:20:
ac:75:2d:81:12:44:16:b8:5b:8c:44:e7:e0:f1:97:89:43:5b:
87:61:47:20:09:c4:ef:24:10:e5:72:3a:cd:79:d6:7d:8c:fd:
23:a7:cf:78:14:3a:ba:e0:99:a6:b5:99:ef:1d:cf:c3:cd:94:
f8:af:78:4a:3f:c8:9d:15:fc:a0:29:37:50:f3:bf:a4:30:f9:
47:8d:ce:76:ab:5d:48:3f:73:45:ae:07:4b:65:4a:7d:4e:82:
6b:58:4d:0b:06:40:b5:96:43:84:0f:c0:e7:cf:81:aa:10:4f:
3b:8c:5e:dd:e9:3d:f9:c8:c5:83:47:8d:45:dc:fc:3c:bc:fd:
b5:cf:07:2d:84:4c:d1:14:58:a9:5f:74:97:32:d8:df:27:26:
4f:2c:f0:31:15:f2:8f:aa:7c:eb:a0:29:e1:10:fc:8c:82:54:
ae:6c:f5:b9:4b:db:9d:5b:62:6e:12:de:3c:39:21:70:3f:fb:
49:8f:48:a1:31:10:36:d5:a8:fe:82:2a:fd:7c:c2:10:52:8f:
9b:39:93:0c:de:83:e9:84:2b:27:32:bc:9a:64:6b:4e:37:15:
fe:7d:4f:e4:6c:32:fc:b3:46:4c:f0:eb:ef:15:7e:5f:ab:11:
bb:38:17:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:35 2025 by rpki-client