Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Aq7Ns8-C0cUg-cMlhnIAuMUpp28.roa
File: Aq7Ns8-C0cUg-cMlhnIAuMUpp28.roa (raw, json)
Hash identifier: CjzppYsTW8gnMJgGYvXzpKUT3MQaYEFRbO78rUDQ9po=
Subject key identifier: 02:AE:CD:B3:CF:82:D1:C5:20:F9:C3:25:86:72:00:B8:C5:29:A7:6F
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0199C065C16B5F17A04D852D732926AAD72F
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Aq7Ns8-C0cUg-cMlhnIAuMUpp28.roa
Signing time: Tue 07 Oct 2025 20:38:38 +0000
ROA not before: Tue 07 Oct 2025 20:38:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204957
IP address blocks: 185.39.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c0:65:c1:6b:5f:17:a0:4d:85:2d:73:29:26:aa:d7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Oct 7 20:38:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02aecdb3cf82d1c520f9c325867200b8c529a76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9e:b4:02:b6:df:a3:73:90:f0:c7:3a:47:78:
81:72:55:df:7c:bf:97:9c:25:4e:b2:84:c1:0a:e8:
cd:09:2e:95:ed:d4:c6:39:95:ef:80:37:06:84:a5:
03:f1:42:44:0f:ba:57:e3:8d:7a:66:57:58:1a:c5:
42:c4:58:62:79:20:f7:97:0c:ca:51:02:bf:7e:b0:
b4:3a:31:88:de:d0:01:32:1f:0c:57:d3:f5:9b:ee:
b7:1d:04:4e:e6:4a:ef:33:fb:2e:fa:54:76:fa:c1:
13:82:f8:96:4c:ee:22:f5:e2:2f:ac:6d:27:a1:77:
84:00:77:e1:26:41:3c:c5:ed:1c:18:8f:46:66:f6:
93:a3:0b:23:c2:d3:58:31:c2:b6:a4:db:fa:6b:b5:
e1:58:69:8a:73:0d:fd:0e:87:05:5c:02:e7:fa:2a:
c2:90:e3:7e:6a:bf:6d:11:ca:51:9c:16:72:06:5f:
9b:1b:49:4f:35:c2:cd:57:a1:10:ae:e7:e1:d6:eb:
f0:55:7d:1a:02:08:0a:0d:d1:43:ee:49:f5:3a:b9:
c8:21:ce:75:ff:3b:6b:4b:b5:6d:bf:b7:be:58:73:
da:fb:c6:02:1f:21:26:b3:5c:5e:28:fc:a9:07:98:
b3:69:80:b3:f3:d9:38:4b:be:14:96:46:c6:57:95:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AE:CD:B3:CF:82:D1:C5:20:F9:C3:25:86:72:00:B8:C5:29:A7:6F
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Aq7Ns8-C0cUg-cMlhnIAuMUpp28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.17.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0f:84:ea:b1:90:5a:82:9d:b4:8e:74:35:20:99:5d:ee:53:
6a:61:84:bb:e7:0b:b3:8e:4b:97:0f:eb:0c:dc:97:9d:05:6d:
ed:08:9b:60:44:b5:8f:1b:32:ff:6c:80:1e:0c:b1:bf:8a:6c:
3e:1b:98:12:01:0f:c3:7b:48:72:ab:4c:4c:98:62:d9:84:d1:
5f:0a:e3:83:0f:7e:1d:39:48:6b:b2:62:47:77:b2:d0:f9:ee:
32:62:3f:ac:3a:8a:5a:85:3a:d8:d7:71:08:df:f5:93:98:3c:
0e:59:d1:2a:8d:62:64:88:48:32:da:b1:b1:98:89:ef:74:31:
a8:df:e1:0e:24:bd:48:0c:5c:30:1c:6a:2b:d1:b5:6c:51:79:
94:a6:92:60:f2:48:2a:73:6d:8b:e7:fb:29:ca:65:33:03:cc:
5d:19:e0:c9:d2:f4:bb:50:04:5d:2e:bd:1a:57:a3:01:01:30:
65:92:22:ca:87:d6:dc:2c:9f:58:2c:33:90:c2:96:91:6e:2a:
d3:34:b9:c2:31:45:b2:d4:93:c1:36:cf:6a:fd:19:bd:bc:c0:
27:88:0f:98:11:40:a9:5c:f7:cc:d6:57:ef:ed:6b:ab:73:af:
2d:e9:ce:b1:de:04:36:94:b3:5d:85:c7:7b:29:17:44:30:dd:
d4:bf:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:08:55 2025 by rpki-client