Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/_jCuY0H7p6bIiBFSZYJo7QRa2GM.roa
File: _jCuY0H7p6bIiBFSZYJo7QRa2GM.roa (raw, json)
Hash identifier: TpMghtYoXA8sj9zv0aUbBiasB0uWw4MufaB/nWeBcDs=
Subject key identifier: FE:30:AE:63:41:FB:A7:A6:C8:88:11:52:65:82:68:ED:04:5A:D8:63
Certificate issuer: /CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Certificate serial: 01987E8733F67868DAD821FBB8D1ECC34104
Authority key identifier: 77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/_jCuY0H7p6bIiBFSZYJo7QRa2GM.roa
Signing time: Wed 06 Aug 2025 08:37:26 +0000
ROA not before: Wed 06 Aug 2025 08:37:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216237
IP address blocks: 185.208.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:87:33:f6:78:68:da:d8:21:fb:b8:d1:ec:c3:41:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Validity
Not Before: Aug 6 08:37:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe30ae6341fba7a6c8881152658268ed045ad863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:d5:4e:aa:08:5e:7f:e4:81:f2:21:12:3c:
4c:c8:d3:04:fe:b7:5f:79:d2:c8:c3:b5:5a:b0:95:
ec:da:65:8c:51:79:87:12:0b:21:b7:02:cb:43:be:
51:8e:eb:89:83:0f:08:96:54:b0:30:a6:7f:85:a8:
fb:06:8b:51:ec:e0:06:75:98:c7:4c:d1:ad:07:60:
db:50:c2:9f:71:7d:1c:f9:fb:fb:87:dc:bc:d6:3b:
33:eb:dc:b8:18:a0:68:df:a7:de:a9:11:9b:2e:28:
3d:51:34:0c:5c:24:a2:5e:0d:39:7b:85:f8:0a:2c:
32:e8:67:94:6b:d7:08:49:61:3c:18:66:c2:62:78:
00:c3:9c:08:e4:d4:c2:06:d0:d8:c6:7f:ab:15:f1:
98:2f:40:56:a3:65:cf:66:d3:24:76:e7:53:9c:ed:
b7:b3:66:46:f8:4b:94:15:6e:9d:c4:9c:0c:29:01:
2f:dc:88:04:cf:b2:1f:6a:b9:b8:ad:ba:61:56:8c:
cf:ed:a8:8d:90:93:73:c1:59:78:b9:2d:70:4b:e9:
05:8c:e5:56:72:c0:70:ec:b7:a8:fa:f0:7d:6c:84:
1a:ea:61:63:6b:ec:e0:5e:05:1c:f7:e2:89:8a:25:
89:36:55:ad:47:4d:35:4d:11:f4:62:c0:88:82:78:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:30:AE:63:41:FB:A7:A6:C8:88:11:52:65:82:68:ED:04:5A:D8:63
X509v3 Authority Key Identifier:
keyid:77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/_jCuY0H7p6bIiBFSZYJo7QRa2GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.203.0/24
Signature Algorithm: sha256WithRSAEncryption
65:51:c5:ad:bd:79:69:06:9e:c1:77:0a:d4:68:82:3b:78:2d:
c9:01:5e:9c:2b:ac:31:07:af:09:0d:56:92:fb:89:a8:c6:5a:
e0:50:26:07:46:cd:63:f4:2f:ae:ff:85:23:9a:1a:08:f8:8c:
66:4e:8c:d0:3c:12:dd:0c:c6:92:7b:f9:99:77:27:55:8c:e4:
d5:37:f8:51:90:77:2a:3b:8f:50:c3:2a:3d:78:14:99:82:0d:
2c:d1:63:79:c5:08:df:3c:2b:49:6e:a6:d8:2d:2b:42:91:a6:
c5:42:01:14:81:e9:ca:0e:03:fa:a2:30:f8:7e:24:62:68:26:
65:3a:69:d9:fb:d3:ae:99:a1:13:96:40:44:af:f6:f5:75:f8:
80:35:0c:ee:89:2f:3d:63:60:00:4d:a9:ee:2a:67:24:b1:9a:
f3:f0:25:38:8c:2f:f7:9f:94:13:b8:80:bd:16:e7:cd:55:de:
09:5a:98:75:d9:32:84:a6:de:c8:cf:7c:61:84:3f:6f:26:79:
22:3a:00:97:73:12:77:e8:e9:a8:41:56:1e:82:f1:47:84:6f:
0c:58:7a:eb:a5:40:51:7d:b6:7e:d2:66:f9:11:3d:00:cc:f9:
15:64:68:af:53:94:a7:f5:69:6a:49:85:5e:26:eb:9a:42:df:
67:67:33:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:55:02 2025 by rpki-client