Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/tE2-w8GfKCp0rc9wUQGDCMDaXtA.roa
File: tE2-w8GfKCp0rc9wUQGDCMDaXtA.roa (raw, json)
Hash identifier: 2MgwOZTjIHEb4mTC8CdutjmxgqJ5RVv+wXieNgEA//M=
Subject key identifier: B4:4D:BE:C3:C1:9F:28:2A:74:AD:CF:70:51:01:83:08:C0:DA:5E:D0
Certificate issuer: /CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Certificate serial: 0198BCBF60921C97402E03B5994AD2778D5F
Authority key identifier: AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/tE2-w8GfKCp0rc9wUQGDCMDaXtA.roa
Signing time: Mon 18 Aug 2025 10:35:15 +0000
ROA not before: Mon 18 Aug 2025 10:35:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212735
IP address blocks: 193.189.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:bf:60:92:1c:97:40:2e:03:b5:99:4a:d2:77:8d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Validity
Not Before: Aug 18 10:35:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b44dbec3c19f282a74adcf7051018308c0da5ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:81:d0:31:78:b9:4a:e6:88:e3:41:35:91:
5b:4e:1b:4d:36:53:47:23:d1:8b:a2:45:6c:aa:e0:
d1:39:7b:f0:55:32:01:46:87:fe:f1:cb:29:fb:1a:
17:a4:39:59:eb:84:6b:fd:a0:1c:d1:fe:0c:48:2a:
1e:a1:83:1c:be:ab:be:7d:b9:55:3f:32:82:76:38:
0f:d6:9c:f1:82:23:a4:1a:0b:36:d1:cc:50:03:b0:
65:d5:f3:ea:e0:00:a9:00:b0:3c:4d:59:f6:53:97:
a9:2a:89:0a:6f:6b:71:32:34:40:2d:c2:69:99:41:
64:65:05:20:e4:cb:67:87:ff:a7:f6:46:c0:48:56:
6c:3f:1d:d1:8a:fe:fc:80:d2:55:9c:e7:dc:dc:5d:
5a:c8:ba:30:d0:5f:e6:6d:05:49:c6:7e:53:0f:6a:
6f:da:25:37:dc:48:35:1b:9a:63:2a:53:2b:dd:d4:
92:a1:3b:ee:38:8c:cd:75:be:0a:b9:c5:74:16:30:
b5:b9:1c:a4:05:41:da:fd:1b:71:f3:85:70:96:de:
92:8b:77:3d:90:c1:48:45:42:3e:df:3a:b4:ee:95:
10:28:90:28:a5:bd:90:95:d4:ea:c7:87:68:0e:28:
74:12:d9:05:e9:01:f1:8e:b8:f1:90:f9:05:8e:ef:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4D:BE:C3:C1:9F:28:2A:74:AD:CF:70:51:01:83:08:C0:DA:5E:D0
X509v3 Authority Key Identifier:
keyid:AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/tE2-w8GfKCp0rc9wUQGDCMDaXtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.102.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f8:9a:77:5b:1a:60:9e:24:99:66:f1:41:4c:b6:a5:de:60:
c1:7e:ac:4a:86:31:85:e1:98:6a:f4:bb:2e:32:a0:97:fb:f6:
84:fc:2c:34:ad:c4:9f:0e:c8:0a:38:87:8d:d9:a3:4a:39:dd:
0b:28:99:8e:52:78:cf:1b:ad:1c:5d:5d:86:ab:12:58:1d:8c:
99:16:33:69:11:97:d0:4f:3c:09:9e:37:0c:ca:42:bd:4a:b3:
3b:24:19:3d:09:5f:30:b8:0a:e2:7f:6f:d3:a5:23:f7:7e:fb:
be:dd:e6:15:9a:27:9f:2b:3e:23:a9:75:1f:76:6e:92:21:96:
da:8c:e6:d3:41:c1:eb:ed:92:eb:23:1d:cc:a8:f4:80:75:ee:
f9:bd:87:02:74:e4:cf:46:8f:54:c2:d2:24:69:93:63:e4:23:
c2:1c:b3:fd:0f:84:17:84:b4:17:8f:f1:07:34:d8:dd:3b:29:
ee:25:9e:9d:07:10:e5:b5:01:c8:6f:9b:25:e1:18:9a:b2:d6:
85:a7:5f:bf:d1:3e:f8:7a:44:c0:82:f6:0a:f4:1a:6f:11:6d:
eb:49:51:c9:24:13:78:7d:8a:6f:fd:16:17:e8:47:28:db:4f:
9d:41:60:e6:a2:32:8f:38:e0:63:ed:46:da:3f:a7:e5:9b:e2:
21:77:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:13:15 2025 by rpki-client