Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/cxuyRDMfEel2xMdXfA507tWQBuw.roa
File: cxuyRDMfEel2xMdXfA507tWQBuw.roa (raw, json)
Hash identifier: aYQJT5pNCQ74S3OgYSZ2fAV4rTt5FQE1ow7omRFYshk=
Subject key identifier: 73:1B:B2:44:33:1F:11:E9:76:C4:C7:57:7C:0E:74:EE:D5:90:06:EC
Certificate issuer: /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Certificate serial: 0198CB3EC11DAA3AECB2F604E23FC9FFBC4E
Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/cxuyRDMfEel2xMdXfA507tWQBuw.roa
Signing time: Thu 21 Aug 2025 06:09:04 +0000
ROA not before: Thu 21 Aug 2025 06:09:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43196
IP address blocks: 91.194.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:3e:c1:1d:aa:3a:ec:b2:f6:04:e2:3f:c9:ff:bc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Validity
Not Before: Aug 21 06:09:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=731bb244331f11e976c4c7577c0e74eed59006ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:d6:45:68:eb:f7:7a:db:76:a8:d6:70:6e:
cb:c7:75:8f:82:21:64:c0:05:83:0f:b9:59:21:41:
ba:c9:b2:5f:41:97:be:e5:07:cb:c9:78:21:cd:b1:
a2:d1:3d:94:a5:ea:de:af:d8:fa:5c:7e:0d:94:b5:
74:06:a2:22:5f:26:84:69:16:2c:c5:d1:2e:bf:87:
0a:1a:07:01:2d:80:56:a7:7d:7a:83:c3:ac:aa:2b:
72:c0:07:33:4a:11:58:15:1d:0a:a1:33:37:d8:55:
66:bf:80:0d:1e:e4:2a:9c:68:56:67:ad:74:4d:46:
fc:97:c1:c0:0a:8d:fc:94:ca:a2:d1:ab:b7:00:36:
69:d2:67:d5:9b:eb:ac:bc:d2:21:ac:c6:76:44:fe:
85:b5:fc:dd:d3:bc:b4:b4:b0:b3:90:55:4b:6d:a0:
b4:10:3b:6f:49:d0:6f:e7:22:74:78:3a:a6:50:d5:
27:93:eb:2c:6e:b8:58:9a:fb:b7:38:c7:0d:bc:7a:
5c:1c:f1:73:79:65:71:66:85:ab:b7:21:8e:5f:c3:
13:17:ca:c8:3c:56:35:d2:74:00:70:b3:6d:7a:c4:
cc:6c:51:b5:cf:09:65:7d:5c:86:65:d3:e2:48:8a:
b6:8c:29:e3:01:44:c6:a8:8e:3a:0d:b4:23:bc:85:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1B:B2:44:33:1F:11:E9:76:C4:C7:57:7C:0E:74:EE:D5:90:06:EC
X509v3 Authority Key Identifier:
keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/cxuyRDMfEel2xMdXfA507tWQBuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.154.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:f9:9b:ac:21:cf:fa:cf:7e:b7:fa:0b:cb:da:ea:18:58:89:
7a:e5:51:99:42:cd:1f:f2:2d:c7:f0:ba:39:dc:fc:9b:1d:ae:
1c:ad:5a:b9:51:b9:e5:e1:87:02:bf:a5:5f:83:72:f6:69:de:
76:67:6a:47:53:68:ce:94:ad:e5:c3:04:6d:4a:17:61:b7:cd:
bb:c8:a5:44:2c:b8:f6:2e:ac:fc:0d:ee:2a:a8:2a:f7:72:c9:
e5:72:fc:2a:a0:56:0d:bd:cc:95:61:21:ef:a9:66:5c:c7:16:
31:5d:9a:a5:7b:eb:9b:48:c9:80:1f:a9:c3:7c:0b:2d:86:89:
07:59:79:46:fb:41:5d:e4:cb:cd:0e:7e:bb:81:ef:9a:cf:90:
f5:de:19:bb:6f:89:83:0c:85:93:88:86:6d:cf:bc:da:76:c2:
fb:bb:d8:76:87:39:4a:ca:31:ed:0a:6e:b6:d1:9b:f1:05:d8:
f4:a5:28:89:9a:86:d7:46:3d:e2:59:48:1d:01:8b:10:99:7e:
10:f0:27:8c:9b:c7:7a:46:cf:b3:08:30:ae:66:48:70:b2:05:
6d:b3:ae:d0:8f:3c:32:68:1a:c1:f6:92:78:52:9e:b4:72:bb:
98:ea:29:dc:e1:f4:d9:a2:60:0f:77:a3:0b:ac:0b:83:56:54:
93:0d:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:16:33 2025 by rpki-client