Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/XwiE8S6Xf1_tAMitFCIUzPq1fG0.roa
File: XwiE8S6Xf1_tAMitFCIUzPq1fG0.roa (raw, json)
Hash identifier: 6xejqgAp2Pf/qPG/aq/6djEEXiOokTPOsYbpt9TBz9A=
Subject key identifier: 5F:08:84:F1:2E:97:7F:5F:ED:00:C8:AD:14:22:14:CC:FA:B5:7C:6D
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 0197D669B4D9EC5DCE9E057DBED42376529E
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/XwiE8S6Xf1_tAMitFCIUzPq1fG0.roa
Signing time: Fri 04 Jul 2025 17:09:01 +0000
ROA not before: Fri 04 Jul 2025 17:09:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8648
IP address blocks: 195.181.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:69:b4:d9:ec:5d:ce:9e:05:7d:be:d4:23:76:52:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Jul 4 17:09:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f0884f12e977f5fed00c8ad142214ccfab57c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:1f:5a:ad:ac:60:bb:29:fe:6b:02:e8:f5:
b3:a9:df:57:b6:e0:a1:19:43:ac:f5:b0:e8:a3:68:
a2:3f:2d:8f:a8:8c:0f:0f:44:fe:15:32:33:b6:56:
71:7e:1d:7a:bd:d7:d5:a4:a6:0d:29:0f:7f:54:29:
dd:12:65:bb:16:e7:58:68:15:8d:8d:75:aa:f7:93:
5f:fe:84:22:28:34:eb:b8:aa:28:d7:d6:52:04:ca:
8b:a7:85:e4:e5:e9:9f:cc:68:44:54:27:5d:d4:e0:
8a:cb:2d:97:c8:62:e3:52:34:0c:b9:9a:c6:b6:a2:
18:dd:65:64:d6:f9:63:ff:35:71:07:01:43:77:8f:
73:33:b6:9f:94:5e:57:9a:54:e6:b4:e2:ea:28:52:
ac:ba:94:e8:21:cf:1f:45:6c:95:d3:e6:7d:24:61:
dc:ea:4e:11:b3:a6:5e:9f:f4:28:44:6c:a0:c2:72:
9e:8f:b5:f3:de:2c:76:7a:bb:0f:05:fa:7f:4a:5a:
b8:45:ff:d4:72:da:c7:a5:a0:33:e3:72:f9:35:1e:
14:6e:a9:5b:1f:85:94:eb:42:97:51:8a:c2:43:66:
52:d6:a2:98:55:19:4b:85:6c:da:ca:5f:80:21:6b:
c4:f8:a0:7c:90:44:d5:83:ff:99:9a:2e:f8:71:cb:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:08:84:F1:2E:97:7F:5F:ED:00:C8:AD:14:22:14:CC:FA:B5:7C:6D
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/XwiE8S6Xf1_tAMitFCIUzPq1fG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.181.248.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b7:fc:68:1e:ad:ce:0e:dd:90:a6:85:06:00:49:0a:bb:8c:
c9:75:4a:05:68:39:d9:e4:43:50:ac:4c:fe:06:78:3f:f5:13:
c6:4b:02:33:16:3d:6f:7f:d9:90:e5:05:cb:35:c9:f0:31:91:
03:69:c3:75:ef:64:e5:7f:c7:3f:d8:92:73:94:88:14:28:c9:
32:55:31:e9:23:b3:ea:ae:ca:d8:e7:1e:e5:64:6e:a8:0f:46:
38:c5:10:9f:d9:d0:88:97:8f:ca:11:71:9b:11:c6:cc:7c:79:
26:b1:d5:70:3e:b4:82:76:7c:c5:88:7c:90:ee:2e:0e:3c:20:
85:c5:43:35:c6:d6:5d:d9:9c:36:bc:69:0b:c8:3e:ea:7c:36:
27:a6:32:8f:c8:1b:ad:41:b9:b5:ac:36:0f:4b:1c:62:53:c5:
ff:d8:8e:29:6d:7c:13:3e:64:82:dd:c2:0f:14:6b:e5:de:4e:
82:16:91:7b:22:8e:7c:b7:9c:d4:6c:c7:e3:1e:56:80:0e:10:
ac:be:80:22:84:76:be:5a:d8:97:af:ad:7f:88:c9:bc:a2:c5:
4f:8c:ac:1c:3f:25:76:56:67:64:4e:99:0b:cc:27:1a:70:fe:
2c:1b:88:83:48:f4:15:8c:e7:9c:4b:a2:13:6f:5c:2c:b0:25:
1e:05:9b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:26:56 2025 by rpki-client