Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/50FkFGOLyfmopdnaqa48A9xZkGI.roa
File: 50FkFGOLyfmopdnaqa48A9xZkGI.roa (raw, json)
Hash identifier: NymXihAbvZbuWpts499zjwPlz9Vp7kp7jyl13Zfny40=
Subject key identifier: E7:41:64:14:63:8B:C9:F9:A8:A5:D9:DA:A9:AE:3C:03:DC:59:90:62
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019809868A08A484FB733A928D622D6B9795
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/50FkFGOLyfmopdnaqa48A9xZkGI.roa
Signing time: Mon 14 Jul 2025 15:21:08 +0000
ROA not before: Mon 14 Jul 2025 15:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213887
IP address blocks: 193.233.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:86:8a:08:a4:84:fb:73:3a:92:8d:62:2d:6b:97:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 14 15:21:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7416414638bc9f9a8a5d9daa9ae3c03dc599062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:50:bb:15:6e:22:94:7b:2c:91:d1:bf:e6:
9d:1b:03:da:32:0d:65:d1:62:d7:46:32:90:34:77:
34:c6:b3:82:0b:3c:8a:dc:e6:39:7e:3f:2c:e9:8f:
2c:a9:ff:cd:54:7a:57:fb:3a:e1:d6:ab:d6:24:fe:
1c:b5:83:03:63:97:13:06:c8:74:8a:ff:9d:66:90:
2c:10:6a:51:46:ec:d3:15:36:08:c3:0e:da:a3:e9:
d3:52:c6:a9:e5:29:59:82:c9:21:a8:5c:22:e3:eb:
44:12:a4:7a:d8:0a:01:67:b2:c1:59:24:6c:99:f3:
5d:ac:a3:81:82:a6:f4:cb:92:4e:8a:2f:e1:ab:df:
3b:45:0a:0f:79:05:25:37:9c:82:70:49:ca:eb:9a:
42:98:94:80:80:49:82:1b:72:fa:03:00:e4:48:b6:
19:f3:64:37:1e:ac:36:bd:cf:34:77:b6:fa:3e:31:
0d:4c:c8:58:10:cc:7e:a6:40:08:00:2b:1d:66:25:
1a:69:ec:60:80:0c:6f:fd:c6:c0:67:f7:59:17:94:
92:42:f6:bc:c3:70:d7:bb:fa:b0:86:df:a7:9b:3c:
17:eb:58:17:51:41:5a:5a:8a:44:c4:19:60:30:2e:
ea:0d:64:aa:92:0d:ea:a0:18:1a:c3:6c:89:f2:6a:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:41:64:14:63:8B:C9:F9:A8:A5:D9:DA:A9:AE:3C:03:DC:59:90:62
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/50FkFGOLyfmopdnaqa48A9xZkGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.134.0/24
Signature Algorithm: sha256WithRSAEncryption
49:54:23:72:40:a3:63:fe:52:4c:26:a3:51:8c:25:11:a8:85:
e5:ba:c5:54:c2:6a:32:c8:0e:18:c4:62:9d:86:2f:31:92:8f:
25:89:23:77:64:44:00:d1:c2:6c:f2:fb:7e:c1:5e:8b:5f:7b:
10:22:16:7c:6a:c6:6d:3b:d4:f2:22:5e:19:ef:92:13:ce:97:
36:55:3e:49:56:ab:b2:00:e2:d8:70:3b:74:43:36:c0:75:f5:
d2:3e:5e:78:c2:7f:11:95:0e:ee:ea:20:c9:9d:8d:0f:ab:80:
a9:52:08:db:9d:a1:89:2e:b1:b9:60:2e:3d:f8:fd:31:e8:38:
72:25:25:14:9c:2e:9f:e6:67:31:76:e9:81:8e:2e:66:b2:a2:
0b:12:a0:ca:d9:77:c3:3d:5e:ec:6d:7f:ee:7d:b3:46:64:c9:
7d:a1:24:e6:5c:69:47:87:ef:9c:77:f9:c9:d0:76:ae:76:fe:
b1:d1:29:ae:52:00:aa:e0:86:50:4d:c8:52:52:76:2a:a1:63:
75:4c:1d:f6:ba:23:c1:af:a3:6d:2b:20:39:a1:cb:74:32:31:
e2:01:74:97:9f:66:fa:7c:15:48:10:92:cb:d7:fd:60:e1:5a:
ef:3d:f5:e8:74:fc:bb:4c:0a:0a:03:f7:48:e0:a5:4c:ce:de:
a2:ec:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:16:43 2025 by rpki-client