Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/t_S27jbE28k53wPb8BjCMYnQRo4.roa
File: t_S27jbE28k53wPb8BjCMYnQRo4.roa (raw, json)
Hash identifier: 6FIsv+jDOzfD9s49oJ3R+IPW0lckCRZ799Q4ILAZx8M=
Subject key identifier: B7:F4:B6:EE:36:C4:DB:C9:39:DF:03:DB:F0:18:C2:31:89:D0:46:8E
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 01989DFFD06EB987A33EB0BC7702DB952DCC
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/t_S27jbE28k53wPb8BjCMYnQRo4.roa
Signing time: Tue 12 Aug 2025 11:17:24 +0000
ROA not before: Tue 12 Aug 2025 11:17:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200373
IP address blocks: 193.56.28.0/24 maxlen: 24
2a14:6380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:ff:d0:6e:b9:87:a3:3e:b0:bc:77:02:db:95:2d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Aug 12 11:17:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7f4b6ee36c4dbc939df03dbf018c23189d0468e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:57:e6:9f:a1:fe:34:49:af:ab:af:41:95:
62:59:6d:49:38:d9:3f:6d:4b:65:71:06:65:cf:1a:
ce:22:d6:29:c2:05:08:2b:51:f0:3c:ca:3f:11:10:
47:8b:85:70:0f:26:87:bb:8b:4e:da:42:51:9a:a9:
81:9f:77:96:f3:5c:55:fb:4d:80:9c:26:a6:57:1b:
a6:9d:6f:83:8c:af:a4:a5:41:1b:cd:18:8d:9a:ea:
b2:10:15:62:5c:73:3c:64:47:f2:8e:22:5c:b1:a2:
85:35:44:20:de:1b:ad:96:97:06:e5:e9:05:67:e1:
b4:64:b1:fa:9a:ef:8e:3f:4c:c7:4b:ca:3f:a8:56:
96:bd:dc:b8:ef:00:f5:d4:17:79:18:d5:e1:3a:db:
1d:87:0b:28:b8:e4:9a:cb:55:6d:48:e9:f7:c1:aa:
aa:b8:14:78:15:1f:85:fb:03:57:09:c1:4a:2b:35:
db:b1:7c:a4:38:7a:68:85:11:46:c7:5d:61:6b:fa:
74:4e:86:7e:cf:11:17:47:8e:8c:2d:e6:f9:ca:bb:
d0:ed:c5:85:9c:fb:eb:ff:44:36:3a:32:89:a1:df:
0b:1d:cd:1e:83:f3:31:c3:4d:aa:83:c9:cf:7f:cd:
a0:32:ca:9c:29:2e:e7:fc:22:84:b3:99:14:3c:67:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F4:B6:EE:36:C4:DB:C9:39:DF:03:DB:F0:18:C2:31:89:D0:46:8E
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/t_S27jbE28k53wPb8BjCMYnQRo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.28.0/24
IPv6:
2a14:6380::/29
Signature Algorithm: sha256WithRSAEncryption
8d:e8:46:5f:53:4b:bc:59:cb:97:b9:b7:53:5e:16:ab:39:43:
11:60:68:72:b7:74:31:10:49:40:ec:54:bf:e7:00:84:4a:fb:
c4:2f:41:de:bd:fb:fe:dd:2e:7a:d0:57:bd:27:86:4d:b3:5f:
af:06:a1:24:e5:0a:5e:06:0a:4e:9a:d2:3d:d7:01:9b:9a:2f:
f9:92:3e:ec:39:6d:2d:84:24:e3:56:dd:06:b2:eb:8b:68:ef:
dc:32:53:40:fb:c1:49:c3:ce:7a:e0:20:3b:41:41:50:75:33:
41:f8:ae:fd:06:46:dc:a6:4d:ea:08:f3:df:82:e2:26:c7:a3:
2e:01:f6:8d:7b:9c:51:b9:ae:c1:60:96:3f:31:3d:76:b4:4d:
b3:81:ba:94:69:fe:06:ee:f9:6b:36:2e:f3:cd:8a:6a:5f:0a:
e3:76:1e:24:c8:12:e5:b3:52:3c:d7:d1:a6:47:b1:34:be:e0:
1a:d8:3b:b7:a3:35:40:87:b0:78:b9:d9:32:68:b3:1b:ba:c2:
5a:75:bc:f0:09:37:66:f0:70:00:4f:e7:3e:56:b0:7f:33:6d:
77:24:51:80:cd:65:b2:bc:35:8c:b4:79:fd:f2:a0:3c:4d:22:
a5:6b:fa:bb:fd:cc:19:cb:d0:3d:4a:d2:8e:a0:d0:9a:06:7e:
f3:60:dd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:55:49 2025 by rpki-client