Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/cbt5UYBWU90-I4H51A87Oi2DFxY.roa
File: cbt5UYBWU90-I4H51A87Oi2DFxY.roa (raw, json)
Hash identifier: R/br+wwcRat8/3F9xsQ09U7gUTZ1teWxn7R/EhVkOxE=
Subject key identifier: 71:BB:79:51:80:56:53:DD:3E:23:81:F9:D4:0F:3B:3A:2D:83:17:16
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0198BD773A672AEEDFCAE526C4B6BABEF0B4
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/cbt5UYBWU90-I4H51A87Oi2DFxY.roa
Signing time: Mon 18 Aug 2025 13:56:04 +0000
ROA not before: Mon 18 Aug 2025 13:56:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213887
IP address blocks: 178.17.48.0/24 maxlen: 24
178.17.49.0/24 maxlen: 24
178.17.50.0/24 maxlen: 24
178.17.51.0/24 maxlen: 24
178.17.52.0/24 maxlen: 24
178.17.60.0/24 maxlen: 24
178.17.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:77:3a:67:2a:ee:df:ca:e5:26:c4:b6:ba:be:f0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Aug 18 13:56:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71bb7951805653dd3e2381f9d40f3b3a2d831716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:c6:6e:c8:01:25:02:df:4a:37:a0:9c:6d:
8b:1a:e7:b0:7c:03:90:a4:a8:9e:a6:f5:8d:45:75:
3d:18:44:f7:d1:f4:87:5c:a1:e1:b3:da:2a:ab:b6:
2e:98:a4:7d:c1:ff:06:1c:b7:ef:9f:b8:0c:7f:07:
52:96:e5:65:09:6e:38:2f:13:15:f7:b8:07:90:ab:
62:6e:a2:57:dc:26:b2:f5:81:2d:0b:81:8a:98:54:
13:d0:d2:5d:9d:33:d5:b9:f2:09:65:2c:c9:b1:ab:
16:07:f6:53:0e:6e:35:c8:00:68:b1:bc:c4:a9:f9:
35:de:59:69:ac:17:0a:87:4e:fe:ef:ea:97:3e:21:
ef:64:95:d1:d5:18:e8:75:9f:38:39:3b:64:7e:a9:
84:d1:b9:cd:98:9c:64:fa:70:44:35:a0:30:b2:cb:
9b:88:fd:13:c8:e4:16:44:4b:f5:bb:f2:ae:ca:8c:
72:e9:be:ed:3f:cd:9a:56:8e:0e:53:4a:65:2e:c4:
ba:a0:58:01:ad:d9:7b:8f:99:7e:b1:c5:57:86:17:
2d:5c:ba:22:3f:99:2d:86:e2:0f:08:30:07:2f:be:
3e:be:a3:4d:35:13:64:57:29:83:6c:55:64:fd:16:
f8:73:d9:e3:ee:d4:c2:de:ec:55:bf:f9:dd:38:be:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:79:51:80:56:53:DD:3E:23:81:F9:D4:0F:3B:3A:2D:83:17:16
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/cbt5UYBWU90-I4H51A87Oi2DFxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.48.0-178.17.52.255
178.17.60.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:4f:0e:25:88:9e:b3:21:1c:fd:78:c7:87:16:d4:06:9a:79:
5e:6d:79:ad:9f:3e:8f:b7:bb:81:e9:a7:75:2a:92:3b:bc:a1:
8e:4d:a0:cd:6b:ba:a4:d0:56:e5:d8:31:1c:16:a3:21:bd:e9:
74:75:bb:2f:24:12:9a:ae:18:eb:16:ad:13:03:c8:6c:00:43:
bd:0e:6d:9b:3f:23:eb:eb:a3:c1:a2:2e:12:32:71:c9:2b:da:
c6:35:23:94:cd:8a:f7:29:0e:2f:60:e6:33:bf:12:fd:4e:56:
2e:5e:d0:56:af:86:38:84:fd:a5:76:cb:e3:4f:17:a0:1f:c5:
8c:e6:e1:4a:67:b5:e0:5e:7d:24:dc:22:1c:38:12:dc:b8:1b:
90:b2:fc:19:5b:cd:25:a6:45:06:2e:d8:ff:87:b4:60:10:77:
67:ce:c6:01:6d:41:0c:81:fe:aa:81:74:81:92:0e:9f:d1:84:
94:8e:37:5f:37:0c:f7:27:a2:57:50:a0:53:dd:69:4c:b5:b0:
d4:a5:43:41:45:d4:39:6c:4f:ab:f1:f8:6f:da:a6:a6:26:56:
f4:9e:e6:2a:4b:66:fb:c3:16:ea:6c:7b:35:5b:08:4e:0f:ae:
80:e2:66:14:92:0b:98:8d:a6:00:d7:e4:f8:eb:9f:c2:fa:3c:
27:8e:43:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:03:53 2025 by rpki-client