Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-UrMUheLELLmTtuG1ONSMLf7Yic.roa
File: 1-UrMUheLELLmTtuG1ONSMLf7Yic.roa (raw, json)
Hash identifier: Ltvlt1C8DLMxtxXA5B488ZMey8q8Rm86Vts1PY9C2IY=
Subject key identifier: F9:4A:CC:52:17:8B:10:B2:E6:4E:DB:86:D4:E3:52:30:B7:FB:62:27
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198B870EB930CAB8579BED27D0BFE8FD502
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-UrMUheLELLmTtuG1ONSMLf7Yic.roa
Signing time: Sun 17 Aug 2025 14:31:04 +0000
ROA not before: Sun 17 Aug 2025 14:31:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 193.8.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b8:70:eb:93:0c:ab:85:79:be:d2:7d:0b:fe:8f:d5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 17 14:31:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f94acc52178b10b2e64edb86d4e35230b7fb6227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5d:20:57:0f:9d:83:31:22:29:05:6a:a4:aa:
16:13:95:2a:ab:4d:f4:51:b6:6d:85:6d:da:15:9b:
27:ab:4c:1b:08:30:a4:e5:05:2e:e8:2b:86:68:ea:
c2:ba:e9:35:1a:90:a3:96:76:fc:67:21:be:ee:13:
28:6c:ce:3e:bc:61:e0:83:8b:4b:4b:d0:99:21:22:
01:0c:20:bc:69:30:a1:e3:c4:29:d2:93:97:2f:0f:
3e:30:ae:56:94:37:9f:40:47:16:88:6d:73:3f:e1:
1c:63:f5:f5:08:64:a6:be:d7:12:59:c8:e3:ab:13:
87:b4:a8:ba:1a:61:61:a3:90:08:ac:4b:9c:29:64:
12:9e:42:66:8e:d8:cb:77:65:75:e3:7f:d6:33:cf:
0d:67:b2:bd:6b:35:e7:32:3a:3b:50:e6:fa:b3:cc:
36:4e:11:be:51:32:51:12:74:d0:c1:e7:d0:79:b9:
e8:1f:71:cb:5a:a7:8a:e1:4a:e5:f2:02:ec:34:17:
99:90:52:4b:ef:23:82:d2:c5:54:65:22:aa:7d:51:
a4:50:12:7d:2c:38:a0:00:12:55:6c:ce:1d:78:3e:
4b:35:18:fd:00:36:63:39:e3:c0:c0:50:c6:4d:ed:
3a:f8:01:c3:d1:dc:17:b5:39:a2:48:68:55:69:29:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4A:CC:52:17:8B:10:B2:E6:4E:DB:86:D4:E3:52:30:B7:FB:62:27
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-UrMUheLELLmTtuG1ONSMLf7Yic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.94.0/24
Signature Algorithm: sha256WithRSAEncryption
53:25:6d:dc:0e:49:34:7c:d0:58:52:32:15:ac:f7:24:51:d8:
04:83:39:f9:56:58:28:3b:1c:bb:c3:36:66:03:48:e5:b8:e9:
56:2d:90:4f:34:2a:75:52:ab:0d:67:b0:5e:a8:be:80:05:ce:
c5:be:e9:dc:b4:5b:ee:49:42:2d:b6:ca:6c:f9:9c:6a:54:2e:
31:85:b9:67:6f:af:90:aa:38:5f:42:d5:64:71:41:8d:7b:6f:
d8:c5:39:57:33:e3:c7:71:b9:ac:14:4c:f3:fc:c6:fd:19:1f:
5c:91:cc:ac:6c:08:1d:b3:35:b1:81:f6:01:41:69:34:24:1e:
ff:36:d2:e5:dd:ed:1e:10:7c:7d:0b:61:bc:7a:1f:b4:f0:15:
db:c5:35:20:83:5e:ac:08:d9:c5:ba:c3:73:4a:c1:9f:b3:2f:
18:0c:38:76:22:7e:1a:0f:13:91:f0:8f:f2:e2:80:d1:5d:ad:
07:03:fb:c6:ff:3f:d7:6e:9c:46:d6:a6:a3:7d:55:94:e1:d7:
39:8d:05:00:ba:e1:52:97:b1:59:71:fd:53:79:e7:74:2e:6f:
75:8d:43:b7:57:00:db:4f:5c:4b:75:2d:6a:5d:34:9f:38:79:
27:5b:72:f2:a5:68:df:0b:9c:f3:40:12:3e:07:d3:be:53:16:
9b:a5:e8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:10 2025 by rpki-client