Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/23JWsnJj-jb8Wa8yxWmE89jRhEc.roa
File: 23JWsnJj-jb8Wa8yxWmE89jRhEc.roa (raw, json)
Hash identifier: hyRLz7Lb6AY/XCQzJ69T02ZWEp1ZBMf9ccg5gtbuPtQ=
Subject key identifier: DB:72:56:B2:72:63:FA:36:FC:59:AF:32:C5:69:84:F3:D8:D1:84:47
Certificate issuer: /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial: 01987E56B726074127854EDF0958AEDBD15C
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/23JWsnJj-jb8Wa8yxWmE89jRhEc.roa
Signing time: Wed 06 Aug 2025 07:44:28 +0000
ROA not before: Wed 06 Aug 2025 07:44:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 194.104.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:56:b7:26:07:41:27:85:4e:df:09:58:ae:db:d1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Validity
Not Before: Aug 6 07:44:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db7256b27263fa36fc59af32c56984f3d8d18447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:2e:a6:7d:a8:1e:d9:c8:17:60:62:1f:cc:
4d:dc:af:59:a8:5d:e1:9a:6d:d2:27:ed:0e:8e:4e:
8d:32:e7:6b:96:b4:b9:a5:2f:23:2c:a5:73:27:b3:
16:aa:fb:4a:ce:1d:d2:d0:52:95:8a:bd:63:5b:51:
db:64:2c:e7:b3:1a:93:96:fa:1c:98:3c:22:52:c4:
e9:9c:00:10:a3:c6:d5:d5:b5:65:3c:f1:fd:66:ad:
0f:02:2f:7d:d0:f9:77:81:ec:99:ca:ac:e7:ef:35:
35:61:56:2c:44:b3:e6:36:60:55:cb:40:e1:35:33:
f5:4c:70:3b:6c:7e:05:85:3a:4e:57:43:33:dc:83:
e4:35:49:3c:fe:55:74:bf:77:f7:b9:7f:ef:6a:be:
f8:3f:9f:61:ac:b0:41:b6:ce:ff:a8:fd:50:d6:aa:
3a:78:c6:fc:3d:db:a5:d9:5f:5f:2c:9c:dc:44:9a:
f2:50:a5:9a:db:c0:14:49:f4:8b:b0:22:d0:29:98:
5d:11:c5:5b:0e:11:8e:52:e2:c7:d4:ba:90:ab:6a:
41:28:ff:a1:a9:a3:5f:de:78:b4:51:4f:1d:28:21:
a6:6d:a9:31:6f:2b:b0:c4:b4:d9:1e:5b:e3:7e:95:
61:ef:fa:a5:9d:90:d9:2c:87:e0:30:d5:de:56:80:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:56:B2:72:63:FA:36:FC:59:AF:32:C5:69:84:F3:D8:D1:84:47
X509v3 Authority Key Identifier:
keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/23JWsnJj-jb8Wa8yxWmE89jRhEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.113.0/24
Signature Algorithm: sha256WithRSAEncryption
14:cb:eb:63:11:1f:a4:2b:06:f5:b0:17:76:23:ef:8a:6e:20:
18:b2:58:43:bd:61:ea:2e:96:3e:f9:45:6b:2c:05:51:0e:5e:
fd:bd:e5:f6:79:3f:06:0f:63:33:22:cf:b3:fb:7a:f2:43:06:
7d:21:ca:97:c3:13:15:4a:e5:8d:75:b7:3d:c7:c9:7f:5b:75:
19:6d:25:38:06:68:81:f1:0b:2a:6b:92:42:c2:f2:fc:ad:94:
9c:ac:e9:09:0b:e9:6a:ce:e2:20:a2:d2:cb:75:8a:b3:9a:e6:
bd:ac:2c:30:ee:04:4b:30:be:82:0d:25:30:cb:38:6a:3e:cf:
c1:92:ae:4d:1a:41:f3:7d:16:7b:f1:cd:b3:99:2b:7c:12:18:
28:eb:17:94:ac:c7:4e:89:ae:c2:1c:af:4d:22:29:93:38:e6:
f0:b7:0b:83:7e:12:38:d5:5b:97:5b:16:d6:6e:d9:aa:4f:04:
10:7a:62:2d:ba:32:d1:81:dc:87:50:72:ae:fe:c9:50:93:77:
f0:7d:1a:f8:cd:ba:05:9e:0b:15:26:c4:32:e8:76:b3:45:f9:
77:50:46:17:3d:48:3b:89:1f:6e:9e:db:f1:81:ac:72:14:25:
38:5a:e1:f8:52:fc:c5:7f:e5:b9:2e:25:61:c9:d9:23:02:3b:
cb:0d:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:35 2025 by rpki-client