Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/CXxioXubsFD7pT7V3lmEzB9pQwc.roa
File: CXxioXubsFD7pT7V3lmEzB9pQwc.roa (raw, json)
Hash identifier: ZpaZGDCs2iAXuiTvR6LYq4vr8nzKDY5DnZG4F2J5dxQ=
Subject key identifier: 09:7C:62:A1:7B:9B:B0:50:FB:A5:3E:D5:DE:59:84:CC:1F:69:43:07
Certificate issuer: /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial: 0198C32F27C7E76E8D40CFC52894E8278036
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/CXxioXubsFD7pT7V3lmEzB9pQwc.roa
Signing time: Tue 19 Aug 2025 16:35:04 +0000
ROA not before: Tue 19 Aug 2025 16:35:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206719
IP address blocks: 185.162.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c3:2f:27:c7:e7:6e:8d:40:cf:c5:28:94:e8:27:80:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Validity
Not Before: Aug 19 16:35:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=097c62a17b9bb050fba53ed5de5984cc1f694307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:b3:86:c7:b5:09:de:df:b8:24:7e:95:58:
d4:23:3e:82:7a:77:44:98:3c:86:a2:13:09:02:7f:
ff:fd:a0:1a:a4:8e:fc:b5:af:8a:e9:fa:e8:ea:f6:
4d:9b:e8:7b:05:a0:d3:a3:14:84:38:43:7c:2f:b9:
83:16:c3:f4:09:64:28:51:2d:c1:c2:20:ad:6a:f4:
78:91:93:3f:e0:2f:6c:1d:e9:5c:49:32:82:86:97:
ab:10:3a:65:3b:c1:5e:65:2d:60:3e:a2:b0:cc:e4:
f3:96:d0:ae:fa:83:24:f6:3c:58:9f:4a:ee:e4:78:
59:25:50:51:b2:bc:5a:1d:3e:96:c1:a5:46:0b:b4:
21:51:ba:ef:6d:4b:f0:0d:cc:48:fd:8c:a8:c5:68:
ce:7b:82:4b:37:36:cb:7b:48:61:8f:69:93:15:44:
8b:76:7a:a3:fb:ec:76:af:71:a1:b1:9c:bb:bf:61:
76:11:2f:01:3a:83:9d:fa:96:a8:d4:b2:d1:b1:7d:
40:03:74:d8:fe:c7:1f:b0:2e:72:d7:02:45:9b:58:
1b:84:c7:27:8a:64:df:12:c3:61:c7:84:ed:c6:8f:
7a:bc:29:85:76:e4:5a:d8:d8:e0:00:2c:06:6a:be:
b3:c6:6f:b7:c7:5b:7f:ae:90:7f:5e:ff:e2:00:e3:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7C:62:A1:7B:9B:B0:50:FB:A5:3E:D5:DE:59:84:CC:1F:69:43:07
X509v3 Authority Key Identifier:
keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/CXxioXubsFD7pT7V3lmEzB9pQwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.70.0/24
Signature Algorithm: sha256WithRSAEncryption
58:63:d5:c7:69:c0:e5:2a:f0:06:11:9e:22:f1:11:41:f0:65:
a5:ad:e5:01:17:97:77:90:65:0f:96:bf:19:03:a6:48:ab:1c:
be:88:1f:95:4f:12:d5:51:1b:ab:f8:cb:74:f2:b0:8f:91:94:
69:91:79:0d:ae:b4:28:66:8e:9e:b2:f8:74:ba:2a:c1:00:1d:
c0:70:2b:0a:a9:98:35:56:9f:c7:ad:77:b1:a5:b9:e7:3f:d1:
5b:64:bd:75:dc:e7:60:72:b2:89:6c:ec:92:71:ad:f3:43:35:
a8:f5:db:fc:9a:19:79:e2:86:c0:2f:85:f2:98:39:a3:85:39:
ed:00:31:1a:68:30:68:ff:01:fa:ad:25:30:6d:fa:7b:71:80:
09:34:a7:88:4e:da:3d:e8:bc:62:66:0d:a9:2a:ea:2f:9f:c5:
9c:56:8e:2c:20:4f:61:2a:2d:54:ee:17:72:2d:9a:98:c2:4c:
62:58:6d:41:72:51:d2:13:95:bd:fd:73:25:23:c0:7d:40:4c:
bc:dd:ae:5d:a9:bf:9d:b2:01:ce:7c:a6:10:52:27:96:8a:e3:
a2:a1:cc:f4:90:23:82:93:38:cb:16:f5:9a:cf:32:4e:2e:ce:
b3:11:32:b9:eb:fa:3b:cb:4c:53:ea:85:8c:fc:24:6c:f5:1e:
9b:84:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:06:56 2025 by rpki-client