Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/0gNekGRhQpWFVl1WvWsnnomrW2M.roa
File: 0gNekGRhQpWFVl1WvWsnnomrW2M.roa (raw, json)
Hash identifier: mhAYTJa9JlLqFNAmxlTIJGa+rpx4qovoVnY2+VJUFkM=
Subject key identifier: D2:03:5E:90:64:61:42:95:85:56:5D:56:BD:6B:27:9E:89:AB:5B:63
Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial: 019824CBB24D68CEEDADF869405BED107D80
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/0gNekGRhQpWFVl1WvWsnnomrW2M.roa
Signing time: Sat 19 Jul 2025 22:26:25 +0000
ROA not before: Sat 19 Jul 2025 22:26:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213673
IP address blocks: 213.165.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:24:cb:b2:4d:68:ce:ed:ad:f8:69:40:5b:ed:10:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Validity
Not Before: Jul 19 22:26:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2035e906461429585565d56bd6b279e89ab5b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:46:f1:05:51:7c:a1:0a:3c:16:4e:6b:8b:
ca:d1:68:15:97:2f:dd:bd:bb:d0:37:f6:7b:14:99:
f6:1c:8e:d7:fd:fe:a1:37:2a:4c:56:20:10:8c:b1:
de:bf:50:20:95:6b:6d:e7:41:aa:10:e7:db:6d:e3:
02:ca:64:a6:3c:6f:a1:9a:f5:fb:6d:f9:c7:77:7f:
20:ff:79:5a:f0:65:19:63:e4:05:29:2b:bc:66:3d:
8b:09:b4:00:0d:16:27:ab:a6:87:b0:bd:fb:28:bb:
f5:7f:52:c4:e4:92:19:d5:47:8d:a3:df:ce:be:64:
16:a3:c8:58:30:2a:b9:b4:33:f0:a7:f4:dd:cc:8d:
74:2d:b4:62:52:cf:e2:c3:1e:7e:29:42:42:c5:57:
59:3a:5c:48:06:e4:95:ee:0a:cd:c7:a6:b3:6a:69:
68:99:10:67:2d:fa:16:87:bd:18:2e:7e:97:e2:dd:
f9:e9:57:56:e4:60:cf:9f:fd:ce:85:b6:4b:92:e0:
82:46:bb:bf:06:25:b1:24:89:09:3d:a4:d1:69:67:
2c:c5:86:2c:f8:9f:34:bb:36:2d:c3:33:d5:d9:af:
8a:ad:08:6f:4e:7f:cc:21:9d:a5:bd:39:5a:56:7d:
9e:18:24:90:3a:df:84:a4:2f:6b:29:b3:5a:27:ed:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:03:5E:90:64:61:42:95:85:56:5D:56:BD:6B:27:9E:89:AB:5B:63
X509v3 Authority Key Identifier:
keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/0gNekGRhQpWFVl1WvWsnnomrW2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.165.53.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a7:4c:d9:44:3c:ee:22:2f:4f:99:a7:3c:29:bc:1a:e3:0b:
e1:10:7f:26:5c:45:8e:79:c6:c3:1f:07:70:3f:09:41:26:a1:
9a:9f:8b:36:c0:b3:d4:e3:71:f6:46:64:28:42:2b:bf:89:54:
df:11:57:ea:7f:9a:fc:f6:61:2a:ba:62:ec:28:6a:4d:79:75:
4d:50:10:0d:c4:27:23:26:e6:a8:89:ec:3b:9e:06:52:c0:d9:
f9:6a:72:57:ed:4b:0e:36:b6:03:83:bb:c5:22:81:e5:07:ae:
c9:28:fd:db:7c:bf:a8:65:b3:c5:2c:0f:3d:d0:4a:54:d3:d0:
5c:3a:0c:49:1b:bd:be:c2:50:a3:1e:27:ea:11:01:75:d7:7f:
08:82:fb:92:b2:cb:36:10:84:99:b7:3e:30:45:99:5b:a3:8f:
e2:74:87:8a:a1:2a:e2:26:06:ad:aa:35:d9:e5:89:30:b0:cc:
82:e3:c3:21:ae:29:52:56:1e:bf:b7:72:14:8c:3b:4b:85:46:
fa:d7:61:58:dd:ea:36:fa:9d:d0:7b:94:3b:0b:24:c4:ad:99:
c4:1b:30:56:bb:5d:5d:b8:17:2e:cf:82:68:be:80:24:33:34:
61:67:ae:7b:45:3a:10:f9:ae:8e:7d:21:67:9a:6a:a4:b6:3b:
a6:24:c4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:50:03 2025 by rpki-client