Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/R41rs6s-Tc1cDDxqdBI9fOM5Kl0.roa
File: R41rs6s-Tc1cDDxqdBI9fOM5Kl0.roa (raw, json)
Hash identifier: F2a3feWkqTKCmrLKvj4Yvt9DlfYEN9Xj78gy7DRuoA4=
Subject key identifier: 47:8D:6B:B3:AB:3E:4D:CD:5C:0C:3C:6A:74:12:3D:7C:E3:39:2A:5D
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01980A4D347B1FE6C1C7F8184EC6867B76C2
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/R41rs6s-Tc1cDDxqdBI9fOM5Kl0.roa
Signing time: Mon 14 Jul 2025 18:58:08 +0000
ROA not before: Mon 14 Jul 2025 18:58:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211373
IP address blocks: 109.122.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0a:4d:34:7b:1f:e6:c1:c7:f8:18:4e:c6:86:7b:76:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 14 18:58:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=478d6bb3ab3e4dcd5c0c3c6a74123d7ce3392a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:44:a6:75:17:fb:ba:8b:a2:b9:3e:dd:13:
f3:92:08:99:1c:3d:30:c2:82:be:5b:9a:87:38:12:
1a:10:6a:38:e5:c2:23:32:68:32:2d:68:eb:88:6b:
42:f9:f3:99:8c:97:ab:3a:b3:db:94:73:36:d8:98:
16:d2:c9:e3:92:2f:e3:ab:a2:9b:59:61:3e:d4:d6:
76:5b:49:f4:0e:b5:ba:a9:01:6c:59:03:e3:14:56:
2e:46:c0:45:3b:f5:74:5b:1e:7b:a7:fa:db:fe:33:
f0:a4:50:71:e2:5d:31:3a:4f:ae:c6:bd:23:7f:91:
df:68:d0:88:fa:1f:d3:7b:83:6d:29:13:2e:31:39:
43:20:db:41:4f:68:73:7f:92:6e:c3:f8:6d:f8:2c:
d5:fd:d2:a8:93:bb:c2:65:01:17:a7:42:4e:6a:ce:
2a:e3:66:52:05:bf:4b:74:32:a7:ba:55:6f:56:00:
db:69:55:a1:14:b3:d0:42:d8:55:2f:46:d0:2a:29:
54:11:e4:24:ff:ef:28:b6:9a:43:89:42:9a:41:f8:
b1:3e:9c:1f:1d:e4:86:d3:0f:ea:96:a6:4c:44:f0:
fa:05:b3:d7:8c:9d:cd:d4:f5:c1:e1:ff:79:09:35:
00:a7:32:5b:f9:59:72:7d:1a:c6:72:d2:47:55:76:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8D:6B:B3:AB:3E:4D:CD:5C:0C:3C:6A:74:12:3D:7C:E3:39:2A:5D
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/R41rs6s-Tc1cDDxqdBI9fOM5Kl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.23.0/24
Signature Algorithm: sha256WithRSAEncryption
46:23:ba:5a:ab:69:f0:7b:b0:a9:8b:63:17:f5:78:23:ce:31:
4d:0f:08:e0:f5:7f:41:32:41:13:4a:01:80:f8:71:d4:16:e3:
80:88:ff:e1:13:f8:a6:b4:b5:8f:b1:35:c9:26:d7:1e:55:3b:
29:f3:a8:fb:db:81:30:bb:c9:f8:a1:62:e7:83:55:32:ac:d7:
7f:f9:3a:75:40:cd:ad:86:7c:e4:db:05:9c:f0:a9:69:46:c2:
01:50:03:87:0d:97:ce:94:51:7a:ba:ea:5a:7b:5b:08:49:77:
a2:53:6f:0c:81:c8:1b:c5:74:97:91:b5:b7:32:eb:b3:e5:9c:
ff:38:37:16:86:d9:27:b1:20:a4:b2:88:2a:5b:49:0c:a1:4d:
c2:87:4c:b6:9a:83:f8:d8:12:f6:5e:02:5f:c9:59:8c:23:5d:
fd:2e:17:3d:d7:4b:23:ad:f4:4d:3e:a1:12:57:87:1a:2e:16:
db:47:53:85:1e:a1:bb:84:9d:6d:34:82:5f:60:02:33:9b:ce:
a4:04:3b:74:0c:b4:6b:ed:8a:04:97:9a:35:cd:3a:85:a7:fb:
70:39:1c:82:e9:91:ad:41:0c:95:5d:6f:0c:c4:a5:39:7e:c1:
a7:d4:c0:67:bc:c6:41:c7:c0:e6:01:37:a0:7c:1e:96:64:ed:
93:2d:d3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:21 2025 by rpki-client