Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/xryQppWpIpcFk8NV5-ngpcUDS_w.roa
File: xryQppWpIpcFk8NV5-ngpcUDS_w.roa (raw, json)
Hash identifier: PubZYHXCinLfxOxjQhoS1M1l29Nxk5kNDwfS1nWcd9c=
Subject key identifier: C6:BC:90:A6:95:A9:22:97:05:93:C3:55:E7:E9:E0:A5:C5:03:4B:FC
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 01982D457DF084F531342638275C1294FA14
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/xryQppWpIpcFk8NV5-ngpcUDS_w.roa
Signing time: Mon 21 Jul 2025 13:56:25 +0000
ROA not before: Mon 21 Jul 2025 13:56:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 131.188.0.0/16 maxlen: 16
192.44.81.0/24 maxlen: 24
192.44.82.0/23 maxlen: 23
192.44.84.0/22 maxlen: 22
192.44.88.0/23 maxlen: 23
192.44.90.0/24 maxlen: 24
192.129.10.0/23 maxlen: 23
192.129.12.0/23 maxlen: 23
192.129.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:45:7d:f0:84:f5:31:34:26:38:27:5c:12:94:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Jul 21 13:56:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6bc90a695a922970593c355e7e9e0a5c5034bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:81:d8:25:84:41:80:aa:c5:d1:4d:e4:72:
45:09:e0:32:90:9d:28:48:8a:a8:da:09:a2:20:48:
42:1f:40:64:cb:5b:4c:e0:d2:68:d2:17:c9:f0:32:
40:1d:66:e1:8a:8e:e7:03:01:4a:5d:9b:6c:f3:50:
57:e7:c7:2d:99:8a:31:0b:91:ff:1a:57:52:f6:21:
da:8f:7e:81:6e:42:ac:98:23:9c:7f:35:5a:f0:8f:
0e:58:03:09:3f:f6:a7:bb:b2:fc:f8:cc:ab:7a:9d:
49:a9:91:03:be:d5:87:f5:7d:76:20:76:b3:e1:a2:
25:49:ac:2c:e8:01:f4:f9:41:0c:ef:a1:6c:f6:32:
8e:8a:d9:df:2b:26:44:7a:4d:09:58:44:c7:d3:d0:
0c:25:96:a3:b0:4c:12:af:18:49:ea:57:2e:df:91:
76:71:c9:e3:7b:1e:79:32:df:2b:23:ba:71:d4:55:
fc:25:15:b1:1e:95:1c:62:53:ba:e4:da:bf:ce:94:
f1:e2:60:b6:27:bd:2a:e2:d9:1a:02:df:2c:f8:02:
af:aa:4f:fb:98:1f:2e:ed:59:ce:8d:f3:55:d3:65:
81:82:ca:3c:f3:a2:61:d9:b6:f0:7c:20:b0:c6:8d:
a0:76:fb:8a:4d:a3:d2:a2:b5:7a:e2:4b:c6:63:e5:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BC:90:A6:95:A9:22:97:05:93:C3:55:E7:E9:E0:A5:C5:03:4B:FC
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/xryQppWpIpcFk8NV5-ngpcUDS_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.188.0.0/16
192.44.81.0-192.44.90.255
192.129.10.0-192.129.14.255
Signature Algorithm: sha256WithRSAEncryption
6f:5a:37:52:7a:26:4f:ca:2b:39:be:de:64:43:48:13:59:77:
9c:ff:dd:3a:b7:cc:b6:03:66:c7:d0:04:52:69:21:14:b1:c6:
fc:d7:28:49:66:24:ae:93:bc:38:d5:7a:39:91:7f:fb:05:20:
bb:1d:33:ee:13:67:4a:27:34:ab:15:6c:bc:18:f6:61:c0:3e:
78:39:0b:d7:d7:2c:2d:e6:89:ca:b5:08:21:67:e8:5f:51:86:
7b:0e:7e:2d:e2:fb:e2:c1:55:b3:03:4c:02:55:82:6b:49:1f:
c5:ee:cf:3f:47:dc:a9:35:b7:fd:c4:ba:ce:32:99:07:96:0d:
a7:bf:76:f6:5c:79:d8:9c:48:c9:dd:71:f2:4e:0c:a5:40:0a:
5c:0c:79:f1:c6:4e:85:6b:4d:ea:df:ad:cd:9a:0b:7c:9b:7e:
e3:46:40:cb:e6:74:0c:9e:53:11:fa:75:80:e4:f4:35:70:38:
cf:65:60:b9:e8:0e:33:68:41:a3:89:82:63:07:3a:4f:04:04:
de:a8:90:cf:3c:71:cb:e3:1a:bf:39:25:9f:26:56:95:57:7c:
f0:ab:1d:d3:4d:a8:ff:00:15:fa:60:49:6d:7e:e0:d1:1f:62:
5f:d3:b9:18:e1:32:cf:24:8e:eb:1e:fa:7d:77:b5:ff:85:84:
74:db:40:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:29:21 2025 by rpki-client