Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/vVo5jg2GQAZIqK4h2tPzZS3ji70.roa
File: vVo5jg2GQAZIqK4h2tPzZS3ji70.roa (raw, json)
Hash identifier: VyY0O3FHC/dgFA8HrUMfqDla8B1EBlXwEVoR6qUh5T0=
Subject key identifier: BD:5A:39:8E:0D:86:40:06:48:A8:AE:21:DA:D3:F3:65:2D:E3:8B:BD
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01981F194450CF38699994F8AF6F6841F442
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/vVo5jg2GQAZIqK4h2tPzZS3ji70.roa
Signing time: Fri 18 Jul 2025 19:53:26 +0000
ROA not before: Fri 18 Jul 2025 19:53:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20115
IP address blocks: 194.38.48.0/24 maxlen: 24
194.38.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1f:19:44:50:cf:38:69:99:94:f8:af:6f:68:41:f4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jul 18 19:53:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd5a398e0d86400648a8ae21dad3f3652de38bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:64:6a:0b:aa:ec:84:3a:33:41:03:45:7e:d4:
71:67:92:f9:6e:68:1a:38:10:36:e2:7f:f3:1c:ae:
43:be:a2:9f:e6:b6:0a:78:75:de:96:46:4e:4a:f5:
a1:c0:2d:49:56:ae:58:26:59:2a:fe:2b:96:ad:84:
51:d7:6b:94:06:2d:78:fd:38:67:dc:35:9b:2b:86:
af:be:20:01:23:2c:ea:89:b1:60:f9:da:ec:59:2b:
e1:9f:f3:f7:3e:1f:c5:a3:70:6c:ab:23:96:b3:9f:
e8:02:86:91:50:7c:c9:bf:e5:b3:be:82:36:30:92:
59:ee:be:2d:ac:12:5b:c5:f7:9d:88:6f:c2:25:20:
12:be:2b:76:c3:bc:10:b9:e4:78:27:d8:30:1f:43:
12:25:5e:b3:c3:c9:7c:f9:0f:fb:3a:a4:ae:f9:f4:
e1:c5:0e:7f:1c:bc:b7:97:26:12:23:c9:fb:ad:52:
d5:e7:09:ed:33:08:64:19:a8:2a:09:8d:e4:23:24:
91:ef:9a:57:68:76:6d:8b:b2:e1:d5:af:1e:2f:39:
99:0a:d7:07:3f:ed:1b:3d:e7:87:d0:38:57:04:bc:
ec:84:78:59:19:5a:4c:f3:a8:d6:d7:ca:30:36:b3:
65:09:26:16:4a:55:10:55:5b:25:64:9b:d1:0b:78:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5A:39:8E:0D:86:40:06:48:A8:AE:21:DA:D3:F3:65:2D:E3:8B:BD
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/vVo5jg2GQAZIqK4h2tPzZS3ji70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.48.0/24
194.38.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bf:21:e6:12:d7:4d:29:8e:4f:ce:7c:3c:f5:6f:ca:48:1e:
18:03:f7:c9:60:69:52:42:3e:5f:de:e6:13:b7:d5:a2:14:a7:
88:9d:b4:fa:66:31:9a:6b:07:47:8b:d6:db:9e:f2:7f:78:a1:
8f:b9:68:f1:80:e9:4f:f3:b0:74:ed:04:64:49:47:11:98:61:
77:de:cb:b4:69:15:7f:ec:86:59:40:28:a8:42:27:9b:ca:2b:
28:35:eb:55:43:15:61:a1:c7:3c:21:aa:1e:eb:f1:bb:53:68:
9c:88:db:af:fc:87:ae:1e:a6:3a:1c:16:e4:11:bc:aa:f5:89:
d5:94:22:f2:f9:d4:8d:3d:15:a6:3d:c0:aa:5f:6c:f7:00:2a:
91:42:27:9c:5e:af:38:db:fd:da:d0:5e:01:40:9f:04:45:fd:
e5:39:4e:09:01:66:3b:dd:ad:06:fa:f2:1d:a0:53:ba:9d:df:
da:16:61:ab:72:18:40:b3:db:90:d1:ae:57:08:e1:ec:92:2c:
a9:f0:3d:be:27:9b:97:a4:f6:dd:38:38:0e:e7:21:6d:52:df:
b3:a6:4e:7a:2f:83:50:8b:c9:26:a1:85:c7:25:61:fe:69:99:
4a:9c:3a:8e:c9:45:d0:cf:8d:0e:96:c4:a3:62:48:93:7b:66:
52:3c:bc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:09:23 2025 by rpki-client