Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/CJ8dZ4RsiVMxaoxMHwLVmMK9lmw.roa
File: CJ8dZ4RsiVMxaoxMHwLVmMK9lmw.roa (raw, json)
Hash identifier: S7N+gVHwACVy8nmycXIYsNxLPAS1mGp6Ez+7FPiXmIo=
Subject key identifier: 08:9F:1D:67:84:6C:89:53:31:6A:8C:4C:1F:02:D5:98:C2:BD:96:6C
Certificate issuer: /CN=495e500149ce8d71b9604b589e0c32fea07a98b8
Certificate serial: 0198C64971D089AAD6C6DB88C99092A70DC3
Authority key identifier: 49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/CJ8dZ4RsiVMxaoxMHwLVmMK9lmw.roa
Signing time: Wed 20 Aug 2025 07:02:38 +0000
ROA not before: Wed 20 Aug 2025 07:02:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 195.182.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:71:d0:89:aa:d6:c6:db:88:c9:90:92:a7:0d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=495e500149ce8d71b9604b589e0c32fea07a98b8
Validity
Not Before: Aug 20 07:02:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=089f1d67846c8953316a8c4c1f02d598c2bd966c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:71:22:82:72:da:fc:09:d7:13:63:9f:e8:
4c:fb:d7:88:bc:c5:fe:85:39:62:7a:9c:65:ca:b3:
0e:64:03:bd:5a:37:8d:cb:12:a4:3e:43:9d:63:40:
a9:b3:5b:3b:8c:9e:3c:f8:78:07:2c:4a:83:9f:48:
e9:ac:db:13:c5:99:bb:61:ad:4a:47:a3:b6:2c:9d:
e1:73:68:99:62:8d:12:09:75:46:d9:ee:52:22:05:
ce:ab:ed:a5:a6:5c:3a:62:24:2d:34:42:36:74:d0:
d3:d4:c4:ea:7b:b0:92:6f:59:5b:a5:65:00:eb:95:
6d:5b:ab:c2:cd:30:27:ca:ec:62:98:89:e1:fd:c5:
eb:16:24:8a:3f:5b:31:b8:53:ad:06:0d:8c:05:62:
1d:b9:3b:2f:78:11:95:fa:3a:e5:4f:21:5a:b9:06:
7c:9c:22:ff:a0:30:e3:b1:48:e0:11:6a:a4:0a:e2:
44:9e:1e:88:74:e6:55:63:7b:8c:dc:7f:3f:4a:ed:
12:35:13:af:04:fb:78:0b:d6:8d:9c:88:70:cc:f3:
ef:77:ea:aa:28:58:bc:d0:5f:93:c0:3c:97:73:c0:
b8:ad:13:74:f1:12:eb:7d:f2:ff:3f:ec:70:63:0b:
5c:19:0c:c7:01:c9:24:e9:80:69:07:04:4a:f4:48:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:1D:67:84:6C:89:53:31:6A:8C:4C:1F:02:D5:98:C2:BD:96:6C
X509v3 Authority Key Identifier:
keyid:49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/CJ8dZ4RsiVMxaoxMHwLVmMK9lmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b4:28:fa:8e:61:cd:f5:f6:33:cd:ac:2f:1d:18:63:3e:93:
52:27:0e:ba:07:41:da:e9:d8:cd:62:36:b9:9e:ba:72:6b:07:
75:1d:e6:9a:8e:2f:f5:b8:4b:72:7d:0a:b3:b1:f0:a8:57:4c:
ee:f0:4b:d5:53:6d:e1:c8:f5:1d:57:68:5d:ec:19:95:6d:7e:
25:ad:03:c8:1a:47:f2:43:40:20:2a:a0:29:8c:dc:07:06:d9:
d4:18:20:eb:e4:d4:d5:e0:a5:6b:e3:59:56:5d:67:ea:66:af:
96:cc:21:6e:6e:6f:93:d1:20:b6:f9:0c:5a:ea:f8:d9:06:39:
4d:8f:27:1d:e5:44:62:af:d9:95:d1:d4:d2:28:1b:e9:6e:72:
d7:14:d2:e7:08:5b:b1:ab:d3:e3:f0:b3:94:6c:6c:17:d7:74:
4c:51:bf:6e:46:f4:bb:d1:e9:cd:ba:7a:00:06:9f:a0:f2:08:
f9:2f:50:a1:a3:20:68:bc:c6:e0:b9:61:94:73:8a:6a:86:86:
b5:11:26:50:e4:8f:86:d2:4b:d2:30:83:c2:bf:ea:d1:3b:2a:
08:22:0b:f4:a7:e2:4d:d2:d1:5a:78:95:99:29:62:f5:a7:cc:
5a:fc:5f:f4:97:2b:bd:60:11:8d:0d:ed:db:03:d4:01:29:26:
bf:37:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:36:59 2025 by rpki-client