Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/a9i8eCPzOCR2a7g49i_eP0oTcMg.roa
File: a9i8eCPzOCR2a7g49i_eP0oTcMg.roa (raw, json)
Hash identifier: CLgIXtXHGLkSKlPAdABLQyRziV9nANmmCJ4xG0uixD8=
Subject key identifier: 6B:D8:BC:78:23:F3:38:24:76:6B:B8:38:F6:2F:DE:3F:4A:13:70:C8
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 0198854FEE22BEFC1DDDDAD41BD5CD54D404
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/a9i8eCPzOCR2a7g49i_eP0oTcMg.roa
Signing time: Thu 07 Aug 2025 16:14:24 +0000
ROA not before: Thu 07 Aug 2025 16:14:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47764
IP address blocks: 31.177.104.0/22 maxlen: 22
2a14:25c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:4f:ee:22:be:fc:1d:dd:da:d4:1b:d5:cd:54:d4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Aug 7 16:14:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bd8bc7823f33824766bb838f62fde3f4a1370c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:50:b8:fa:e6:c3:6c:78:b1:ab:70:8b:b8:
f5:22:4e:20:db:95:ee:b5:45:3c:0c:2e:48:16:ff:
b9:00:36:fc:67:80:e8:6a:a6:58:3e:b3:0c:b3:a7:
97:26:66:67:61:a3:19:1f:de:f4:34:71:71:b0:a4:
76:56:ba:ec:f9:01:90:c4:98:a9:f7:be:0b:2f:fa:
0f:15:1e:4d:f7:0b:b2:88:6c:84:00:ef:90:d9:d8:
a0:0e:03:dd:20:27:48:e5:29:f3:c8:ce:ef:f8:c5:
71:57:24:c0:dd:a5:d2:25:c6:2c:ed:60:f9:20:69:
81:57:60:bd:3e:f2:10:dc:03:a7:f2:cc:38:b3:e4:
e4:6e:e6:a6:f2:7a:ec:01:c5:c7:5d:10:99:ee:46:
bd:8b:b5:44:66:92:45:40:00:bc:03:9f:b6:4b:d3:
fe:7b:87:92:8a:78:a2:5f:1f:34:e5:84:ed:b3:2f:
00:51:8f:e2:ad:f0:f7:b3:1a:d7:92:f9:89:76:e5:
cb:98:c5:c7:18:69:55:13:f0:d1:75:15:31:3a:d3:
d9:2d:1e:42:bc:ae:03:ac:5b:41:ed:78:b2:42:8b:
f5:5d:73:a1:16:0e:c3:f3:40:21:d8:d0:9b:46:64:
e8:03:c4:f3:02:59:b5:ee:f0:fe:96:69:ad:82:73:
9a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:BC:78:23:F3:38:24:76:6B:B8:38:F6:2F:DE:3F:4A:13:70:C8
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/a9i8eCPzOCR2a7g49i_eP0oTcMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.104.0/22
IPv6:
2a14:25c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:34:36:79:71:47:d1:b4:08:eb:4b:f6:34:35:8f:40:1a:62:
0e:59:8f:5b:ce:a2:f1:30:f1:78:56:7a:aa:d7:c2:d1:90:8d:
d8:d8:93:30:d9:ca:0b:c2:d9:7a:61:e5:e0:6b:f9:55:2c:6d:
08:60:22:ee:9b:2c:42:22:92:37:5f:11:68:39:56:1e:04:f7:
52:6d:e2:92:40:ef:73:22:20:96:55:cb:82:a7:f5:8b:d6:f4:
30:36:ff:16:33:d0:43:b8:15:51:78:26:3e:b6:e1:61:ba:7d:
7f:28:b0:3a:70:37:2b:d2:c0:99:ba:8b:75:93:a2:1b:1f:05:
2e:6e:b9:6d:16:49:8f:b8:3f:b5:2c:68:3b:51:78:70:d4:98:
df:c9:4b:62:e0:f8:e1:15:e6:63:d0:c9:8c:40:f4:b8:0b:ed:
b5:97:f1:32:00:4a:e0:8c:65:c4:53:c1:c9:a1:fc:b0:71:18:
e0:9e:c3:00:87:a3:2c:80:ab:b1:e1:4b:ad:01:bd:c0:26:79:
ca:2d:b9:79:58:c0:8f:58:a7:dc:66:73:d2:60:05:67:d2:26:
58:6f:3c:98:64:42:80:c1:c4:75:67:dd:f1:88:30:1e:5a:8f:
96:43:43:0c:0a:21:3a:af:7e:8b:31:a5:be:09:75:3e:99:4a:
13:f5:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:32:20 2025 by rpki-client