Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/OdJQ9ucOjx55eZ_eL46dI-RF4qw.roa
File: OdJQ9ucOjx55eZ_eL46dI-RF4qw.roa (raw, json)
Hash identifier: 3F8ARNX3fBht3YClKm2Q9MgUMQczvUb3C47SGcMjWTE=
Subject key identifier: 39:D2:50:F6:E7:0E:8F:1E:79:79:9F:DE:2F:8E:9D:23:E4:45:E2:AC
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 0198D299FEC6380B136F43F3E22435A5E7DC
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/OdJQ9ucOjx55eZ_eL46dI-RF4qw.roa
Signing time: Fri 22 Aug 2025 16:26:04 +0000
ROA not before: Fri 22 Aug 2025 16:26:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1004
IP address blocks: 194.88.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d2:99:fe:c6:38:0b:13:6f:43:f3:e2:24:35:a5:e7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Aug 22 16:26:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39d250f6e70e8f1e79799fde2f8e9d23e445e2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:6b:4b:e7:e7:ec:cb:2a:2a:48:07:ca:ad:b9:
99:8f:9b:60:8b:b1:73:3e:75:39:f9:b9:5a:4d:02:
7a:da:65:11:dd:64:c0:fd:04:38:fa:0a:bb:51:12:
1c:dc:f5:59:de:2c:af:37:80:5c:cc:71:eb:e7:8e:
f9:c8:85:85:42:51:6f:8e:94:69:68:03:e6:f5:27:
0c:d3:02:96:a1:56:36:25:a3:5c:a0:36:7b:8b:c5:
39:10:ae:dd:93:53:ac:6d:10:5b:22:89:3c:2f:0f:
fe:4a:87:c2:07:ae:3d:ad:32:83:97:83:d6:98:b2:
9a:3c:0c:79:a0:a4:d6:00:9f:98:87:a7:c8:84:08:
24:4f:de:a8:fe:47:5c:6e:0d:6b:ec:ee:ef:d3:b7:
40:a5:39:fe:58:b5:d3:a7:2c:a4:b2:62:1b:21:52:
99:04:7e:b8:b3:9f:aa:bf:35:e2:70:d9:8b:0a:16:
19:a5:98:97:24:b9:e3:e0:13:a8:b3:f9:08:13:59:
4e:3c:a5:b1:0e:05:18:11:9e:7d:cf:5e:51:80:21:
73:d2:ab:97:e8:a8:af:b2:c8:c4:37:ee:71:67:36:
b9:d4:f5:da:e7:3b:d1:b7:cd:d1:06:3a:7a:1a:d5:
93:5e:cc:47:17:bf:4c:5b:1f:a5:70:b2:fd:8c:d0:
35:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D2:50:F6:E7:0E:8F:1E:79:79:9F:DE:2F:8E:9D:23:E4:45:E2:AC
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/OdJQ9ucOjx55eZ_eL46dI-RF4qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.232.0/24
Signature Algorithm: sha256WithRSAEncryption
94:dc:00:64:46:ec:d5:c9:1c:65:c0:2f:a8:e7:a5:9e:46:b8:
a6:f1:2c:61:91:34:03:f8:24:89:ec:50:8e:77:e6:6c:ce:d8:
98:fb:70:6e:4c:5a:24:99:00:f2:80:20:1d:22:8f:87:b7:55:
19:14:bf:fa:01:a8:ae:c5:88:32:ce:05:33:de:33:d3:60:19:
a8:2c:9e:51:ab:1d:be:6f:79:9c:45:ae:2d:24:64:30:2c:7e:
25:97:c1:85:3c:72:e6:6a:67:bf:a2:50:22:4a:96:da:90:c6:
7d:35:fb:7d:4f:53:a2:cd:4d:29:b4:7c:68:43:45:7e:b4:a8:
84:98:c2:be:1c:33:79:62:bf:08:3c:6e:6c:62:b9:de:aa:6c:
aa:c2:74:4f:89:27:83:8c:9f:41:d4:bb:5b:96:28:97:c2:5b:
38:a3:f0:da:90:4c:a3:0c:2c:73:0f:b0:5b:93:63:6a:49:79:
0c:de:35:27:38:f0:d8:32:39:31:4c:06:ee:9b:e8:18:67:ff:
04:b5:ea:d7:02:76:1e:94:11:3c:72:e1:f0:29:d3:5c:a9:7a:
02:15:ab:eb:88:c1:0b:d3:4c:10:da:9f:96:0f:83:40:71:12:
32:78:27:d0:61:6c:2c:42:02:7a:61:d1:2b:4f:9f:fb:ea:03:
e8:b7:f6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:14:52 2025 by rpki-client