Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/czIqi1JTFBnqU1-Xoy9WpWfsNLA.roa
File: czIqi1JTFBnqU1-Xoy9WpWfsNLA.roa (raw, json)
Hash identifier: IEW0KjjrxdIVeOiEzEJ5xNLzQLH13MYJ7dw5cMoL57c=
Subject key identifier: 73:32:2A:8B:52:53:14:19:EA:53:5F:97:A3:2F:56:A5:67:EC:34:B0
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 0197A61C47FA463FDE294C01B84AF7948A4F
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/czIqi1JTFBnqU1-Xoy9WpWfsNLA.roa
Signing time: Wed 25 Jun 2025 08:02:40 +0000
ROA not before: Wed 25 Jun 2025 08:02:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.36.216.0/22 maxlen: 24
194.247.26.0/23 maxlen: 24
2001:67c:2024::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:1c:47:fa:46:3f:de:29:4c:01:b8:4a:f7:94:8a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Jun 25 08:02:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73322a8b52531419ea535f97a32f56a567ec34b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:0e:0f:57:5e:70:9f:fc:be:58:a8:96:84:
36:b4:0a:23:52:1f:cc:97:fd:84:87:b7:a5:9f:36:
fa:c3:46:65:73:b7:49:a4:ac:f9:51:e2:68:2e:c1:
79:45:57:cb:1a:b4:cd:5c:0a:b3:40:cc:4c:91:2c:
e5:51:9d:df:8d:6b:ae:8e:c0:df:ac:ff:66:c2:46:
8d:88:7a:b6:a3:b3:d3:cd:53:2f:e7:25:c5:17:fc:
df:ad:c2:c1:f2:f7:b8:91:39:38:d1:16:a9:42:8b:
80:bd:ab:da:e5:6e:61:24:1a:f1:98:0b:4b:3b:91:
dc:01:0c:56:1c:b3:fe:3b:44:5c:53:0c:f7:98:43:
c1:87:66:e2:11:35:e4:04:b0:2d:b8:08:9c:d3:fc:
44:d7:00:9b:78:06:9c:13:46:68:85:fb:ce:9f:6f:
45:aa:05:89:c6:28:07:f7:f9:6c:e1:b3:c7:8d:53:
77:d1:62:89:c4:aa:b0:10:bb:be:98:95:ae:b5:77:
ec:48:d9:ca:25:d8:4d:a9:68:e4:7e:53:3e:65:fd:
9b:fe:b7:08:be:7f:95:ae:57:a7:e1:ee:31:14:ab:
9c:5e:39:50:11:27:49:f6:59:3e:7b:20:91:2e:a3:
b4:5b:7e:9b:27:17:fc:1d:4f:fc:c1:b9:91:f4:7f:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:32:2A:8B:52:53:14:19:EA:53:5F:97:A3:2F:56:A5:67:EC:34:B0
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/czIqi1JTFBnqU1-Xoy9WpWfsNLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.216.0/22
194.247.26.0/23
IPv6:
2001:67c:2024::/48
Signature Algorithm: sha256WithRSAEncryption
5b:db:a6:0b:a8:5e:13:e3:8f:5a:27:2e:3f:12:86:d5:d8:d0:
66:11:52:e7:06:6c:51:d2:05:10:b1:ec:93:b6:dd:e2:36:97:
d1:5b:bb:51:6b:7d:07:29:18:65:e7:38:61:04:b9:26:1f:23:
fd:e3:e8:be:8e:64:fd:fe:b3:bd:03:a4:54:71:35:da:8a:77:
7c:93:c0:fa:3a:08:26:a0:bd:f2:89:1f:74:a4:f3:73:f5:b5:
84:d1:26:3d:ea:8a:04:de:82:aa:75:60:a8:dc:c3:29:fc:37:
fe:38:a2:a3:fe:fe:95:08:d0:22:43:af:aa:6d:51:5b:03:cc:
ea:ec:9f:e9:68:6e:7a:85:c9:fb:a6:37:b2:cc:c7:c0:64:1c:
89:d5:53:a2:af:b5:a3:da:5a:6c:99:c9:44:53:38:9f:27:3d:
b3:c4:3c:95:ee:4f:03:3e:a3:60:e4:68:8b:bc:a1:79:3d:83:
61:52:af:c2:bf:9a:1a:5e:4f:a0:12:95:4c:b1:ec:1c:2c:14:
e2:e5:4d:17:a1:95:d9:3b:11:ce:84:95:bc:b5:13:9f:b9:b3:
b1:0b:fb:9b:2b:33:1c:96:3f:83:cc:83:d0:94:40:7e:be:66:
7b:af:9d:93:66:f4:a7:d1:d4:6c:f9:ad:7b:d0:57:8a:b6:36:
ac:29:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:38:13 2025 by rpki-client