Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1-O322bBLVOWQDNMjFywrUKIxIw0.roa
File: 1-O322bBLVOWQDNMjFywrUKIxIw0.roa (raw, json)
Hash identifier: 7vlxbPUiv3Std38MYSGtKLa+JRa87TkvQmUti3lj/M0=
Subject key identifier: F8:ED:F6:D9:B0:4B:54:E5:90:0C:D3:23:17:2C:2B:50:A2:31:23:0D
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0198CB46FF12F73537B94009CBBD9A19337A
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1-O322bBLVOWQDNMjFywrUKIxIw0.roa
Signing time: Thu 21 Aug 2025 06:18:04 +0000
ROA not before: Thu 21 Aug 2025 06:18:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 92.61.97.0/24 maxlen: 24
92.61.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:46:ff:12:f7:35:37:b9:40:09:cb:bd:9a:19:33:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Aug 21 06:18:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8edf6d9b04b54e5900cd323172c2b50a231230d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:fc:e8:5a:4b:41:9d:a5:32:a5:28:14:3b:
e8:42:d1:7f:50:ce:93:3e:89:8b:c2:8e:a7:7e:c5:
5e:82:6a:a2:dc:eb:2f:60:9f:3e:a2:ca:86:ac:ed:
ef:33:8d:62:c3:5f:73:08:a6:9c:ee:24:5d:87:38:
af:e7:a0:20:e7:5e:db:2c:cd:c7:43:6c:c2:45:3d:
e7:d7:ef:30:89:8d:a6:12:d3:cc:9a:86:c0:64:08:
ef:86:99:f3:2d:b4:49:40:50:a8:44:e5:9e:f9:15:
63:ec:4a:6f:5e:64:6d:1d:1e:91:1d:ad:98:fa:23:
0e:84:6c:42:53:fe:ed:09:6a:ae:f3:5d:7f:24:4a:
09:ef:3f:0c:95:c5:97:08:93:21:32:8b:dd:dd:fb:
c1:ae:3b:5e:75:1a:57:b9:92:42:ce:9e:6b:f7:81:
59:2a:3d:8e:d8:50:60:c7:50:ea:8c:5a:fa:44:9d:
44:e1:40:3e:a8:ff:57:0c:6b:7d:cc:67:fb:f4:c7:
28:71:0f:49:7d:d0:db:05:66:6f:b8:bd:66:c2:ff:
9b:83:ae:d4:31:6f:93:9a:08:90:a1:48:57:c2:87:
2a:ad:10:7e:a9:55:29:29:6d:b3:48:59:d3:00:8a:
ee:91:7b:aa:68:04:74:c6:97:25:f7:2b:73:15:eb:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:ED:F6:D9:B0:4B:54:E5:90:0C:D3:23:17:2C:2B:50:A2:31:23:0D
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1-O322bBLVOWQDNMjFywrUKIxIw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.97.0/24
92.61.108.0/24
Signature Algorithm: sha256WithRSAEncryption
85:30:b4:2b:fe:89:a0:1c:94:3f:2e:cc:22:53:cd:5d:ee:91:
84:4f:99:01:d8:cf:22:bb:c7:a9:ca:45:0e:99:29:bf:7b:35:
c2:ce:4d:6c:c9:c9:3e:26:d9:94:0b:35:d9:fe:9b:83:1c:36:
9a:35:65:84:f7:3c:49:b0:83:ea:44:55:3d:d6:9d:dc:6e:b6:
b6:53:6d:ba:d8:90:bb:bf:b0:d2:d0:99:a8:81:e3:79:14:ab:
ff:95:28:24:c4:35:41:52:8e:89:6a:50:23:71:21:11:27:21:
38:4a:37:6a:2f:ba:d1:e0:5a:db:75:02:0b:3a:8f:21:31:34:
91:8b:df:f4:bb:d4:94:7b:5d:86:62:d4:78:dc:42:14:36:0a:
a0:a1:c2:7a:26:e9:ff:84:df:c8:a2:15:d1:9e:b4:2d:12:97:
2e:2c:13:4d:b0:a6:d4:cc:67:a9:18:59:82:36:6f:00:74:b3:
6d:60:1b:be:77:be:03:c7:47:04:2b:60:87:12:71:aa:a3:0d:
8e:2f:93:34:f5:98:7e:bb:a5:86:c9:10:ce:ce:df:fd:ad:28:
c0:84:cb:f6:be:b0:4f:6e:c6:39:9c:44:04:ff:5f:33:50:99:
22:14:8c:38:81:74:a4:c6:c0:4c:21:61:ed:1d:a7:4a:53:ae:
09:86:50:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:35 2025 by rpki-client