Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/6vpPWF9um25M6oX0zTeF3gom6lU.roa
File: 6vpPWF9um25M6oX0zTeF3gom6lU.roa (raw, json)
Hash identifier: j5SzTMsrcpLe+JWtPh5CUbSG7ignAGsV0q0+GlyKReg=
Subject key identifier: EA:FA:4F:58:5F:6E:9B:6E:4C:EA:85:F4:CD:37:85:DE:0A:26:EA:55
Certificate issuer: /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Certificate serial: 01975DA2C5051A4806FECF20A59C75BAF559
Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/6vpPWF9um25M6oX0zTeF3gom6lU.roa
Signing time: Wed 11 Jun 2025 06:17:17 +0000
ROA not before: Wed 11 Jun 2025 06:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 194.33.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:a2:c5:05:1a:48:06:fe:cf:20:a5:9c:75:ba:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Validity
Not Before: Jun 11 06:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eafa4f585f6e9b6e4cea85f4cd3785de0a26ea55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:33:8d:f2:4c:3b:f2:20:10:de:98:d6:da:
34:8d:5b:17:95:ca:c5:2d:f3:4e:b7:b6:16:d3:4f:
f5:6b:f1:b5:ad:be:1c:0e:3a:69:16:75:97:3c:ab:
5d:9d:ca:56:98:cb:45:65:d4:f3:6f:73:9a:e7:75:
09:a7:46:b5:a3:2a:62:7a:1d:00:5f:fe:84:b7:7b:
2e:1e:9b:11:56:d4:26:7f:72:08:04:cf:ab:81:34:
ae:00:d3:4e:57:ac:1f:8d:51:8b:81:ee:6f:54:0c:
b6:f3:51:12:7f:0a:6e:d0:45:09:ce:c8:de:9e:5f:
46:67:d2:bd:59:54:c1:01:79:97:3a:20:de:3b:1c:
79:2d:70:5c:be:92:b5:93:4c:02:ee:1a:38:c8:4c:
01:16:ae:03:88:6d:78:7b:86:9a:b4:e7:d6:29:7b:
85:4b:29:fa:87:90:8d:c4:24:84:92:0f:6c:54:15:
da:1c:59:12:5c:98:4c:64:c0:fe:d0:14:bd:39:05:
d6:db:22:05:da:bf:5d:1f:ad:35:14:b6:16:67:f2:
ed:d3:bc:9a:7c:52:f5:63:6d:98:a2:4d:48:d8:0c:
d3:fa:f9:11:c6:3e:d5:10:f8:59:a4:19:a1:e7:f6:
f4:1c:32:3d:4f:7e:98:55:a9:1b:3d:fd:8c:f0:a7:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FA:4F:58:5F:6E:9B:6E:4C:EA:85:F4:CD:37:85:DE:0A:26:EA:55
X509v3 Authority Key Identifier:
keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/6vpPWF9um25M6oX0zTeF3gom6lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:fc:95:3b:65:1e:e3:3a:e9:14:b7:1c:da:cb:d5:27:7c:c1:
59:79:cd:77:73:aa:ac:0c:e8:9c:f3:75:5e:98:d0:17:8f:84:
13:97:b0:61:05:9c:08:85:c1:9b:7d:d1:15:cd:f8:0e:fd:77:
b6:d2:10:82:ce:e5:6e:7f:89:f5:5c:86:4f:53:9b:cf:77:6c:
5c:04:6a:0d:19:c8:0d:c8:14:92:cb:0f:dd:8d:1a:7e:b3:f6:
76:93:c2:05:4c:64:e3:35:45:8c:29:76:13:52:0d:98:bb:38:
99:87:bf:5b:9e:b5:de:c0:56:fc:d1:ec:9a:d8:57:71:b0:45:
67:0f:5b:cb:62:b6:ed:83:ec:ea:6f:2c:2d:70:b7:5d:74:fe:
05:e9:f6:f7:be:7d:ee:85:f5:79:22:e9:69:5a:7c:29:a7:20:
48:53:29:23:24:94:67:7c:ee:bb:15:5f:77:6b:3d:ff:05:4e:
9f:42:f7:0d:90:02:17:ef:93:8c:69:99:93:8a:9d:dd:89:77:
ea:ab:8f:b4:eb:85:62:30:18:1c:4b:48:e9:4a:d7:4b:09:98:
fd:8f:c3:1a:2e:79:d4:66:e8:14:13:4c:d8:21:3f:bd:c8:40:
0c:2a:8e:67:ed:80:c3:7b:44:2c:16:50:d6:cb:d7:bb:ef:1b:
64:0f:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:16:46 2025 by rpki-client