Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa
File: r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa (raw, json)
Hash identifier: ABN+n8WXzNyvhNn0KAYr1OZE1UelVHRBMWhRAYF1K1Q=
Subject key identifier: AF:94:43:09:95:6B:8D:CB:36:EB:33:76:C0:9E:68:3D:9C:D6:72:B1
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 0197EE12087FC3CE4D74844D7239F198B84A
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa
Signing time: Wed 09 Jul 2025 07:24:08 +0000
ROA not before: Wed 09 Jul 2025 07:24:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51369
IP address blocks: 82.194.244.0/22 maxlen: 24
89.188.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:12:08:7f:c3:ce:4d:74:84:4d:72:39:f1:98:b8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jul 9 07:24:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af944309956b8dcb36eb3376c09e683d9cd672b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:d1:c4:4a:79:27:b8:7b:92:9e:b2:76:16:
66:62:95:ce:6f:c6:41:fd:0a:48:36:46:28:75:ab:
76:0e:6d:14:67:37:de:9b:74:68:4d:04:13:26:d3:
da:72:99:b5:df:1d:c3:26:f6:38:56:65:a7:81:27:
e7:5e:0f:0d:41:f7:e7:7a:16:a3:3d:a0:8b:c1:a9:
d0:b0:40:ac:40:ad:54:59:c8:61:4e:64:80:7d:ed:
00:43:cd:d2:2f:51:9d:5e:39:d6:0c:43:2c:aa:32:
78:c3:5f:e0:d0:b1:42:cb:cd:7c:d3:3d:a2:a6:24:
91:62:2e:c8:6f:85:b1:39:60:18:59:2b:a4:56:e0:
90:a1:e0:cf:d4:f3:b8:16:e8:4e:4c:90:f4:da:14:
d9:ef:3a:11:92:5e:d5:e6:a7:cc:b3:da:c3:9c:ec:
81:e5:5e:bc:f9:9a:ed:c0:d8:7e:b1:01:7a:67:f7:
79:85:f3:e3:8f:82:96:18:64:4b:e1:7b:ca:1b:e7:
e5:55:af:bd:b4:a5:4c:1f:0f:11:83:60:8c:ba:77:
83:e1:a6:3f:a9:84:29:79:42:a2:a3:da:3c:2c:1c:
51:28:49:45:de:40:70:1a:f0:92:2c:7c:98:65:33:
c0:e7:68:ec:86:a4:15:76:ff:62:1f:6a:24:3a:b1:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:94:43:09:95:6B:8D:CB:36:EB:33:76:C0:9E:68:3D:9C:D6:72:B1
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.244.0/22
89.188.176.0/22
Signature Algorithm: sha256WithRSAEncryption
53:44:86:82:22:88:7c:55:b1:31:be:8a:40:c1:21:13:f4:53:
8f:d1:38:53:75:eb:a5:f0:ca:bd:36:e4:37:89:8f:80:d5:9e:
86:3d:a3:26:e2:31:21:22:e7:5e:6a:de:d6:ea:cd:46:c9:9a:
3a:ad:c7:e9:7b:7d:46:ef:8e:73:05:69:eb:fc:7c:a5:73:80:
65:f2:4d:01:4f:1a:a2:d8:2d:49:30:51:28:15:5d:ab:56:82:
08:e1:91:c1:e9:61:c8:7d:6a:50:9c:c1:1e:05:2a:be:61:87:
13:7d:94:1c:94:3e:cb:31:01:be:f1:81:6e:5b:95:93:b1:19:
a5:42:63:f5:73:cc:be:0a:88:f0:bc:2e:a4:2b:21:5b:4a:fc:
cc:1c:5c:25:dc:53:fc:00:ee:c1:ce:da:7d:bd:b8:31:01:bd:
55:42:5e:6c:3a:6d:55:7b:12:93:be:4d:f8:5a:e0:97:0b:e4:
d1:2f:64:6b:e6:c6:2e:d0:f4:91:61:a4:96:e5:bc:59:b9:4d:
e4:73:5b:3b:40:7b:f7:73:f1:27:37:27:fa:84:6e:57:c5:b9:
a8:fb:cf:c3:32:d0:f3:1a:a9:f4:70:32:4e:95:1b:a7:ad:6f:
7b:fb:8c:0c:ca:c6:d1:5c:db:16:bf:72:a2:1c:ff:8c:4d:ac:
8a:91:53:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:55:52 2025 by rpki-client