Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ATnfXdV0WDQp41dNIcvg_WYNuwA.roa
File: ATnfXdV0WDQp41dNIcvg_WYNuwA.roa (raw, json)
Hash identifier: X8Md5iiF+qULDk5bb7BIKOpKcha+2N3E/fvzBkFs/LY=
Subject key identifier: 01:39:DF:5D:D5:74:58:34:29:E3:57:4D:21:CB:E0:FD:66:0D:BB:00
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019838CDC27D4B00EB9108B41F267394B85C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ATnfXdV0WDQp41dNIcvg_WYNuwA.roa
Signing time: Wed 23 Jul 2025 19:41:05 +0000
ROA not before: Wed 23 Jul 2025 19:41:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399989
IP address blocks: 194.231.128.0/22 maxlen: 22
194.231.132.0/22 maxlen: 22
194.231.136.0/22 maxlen: 22
194.231.144.0/22 maxlen: 22
194.231.152.0/22 maxlen: 22
194.231.192.0/22 maxlen: 22
194.231.204.0/22 maxlen: 22
194.231.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:cd:c2:7d:4b:00:eb:91:08:b4:1f:26:73:94:b8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 23 19:41:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0139df5dd574583429e3574d21cbe0fd660dbb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:6c:78:ac:71:af:5f:fc:32:e7:21:2f:2e:
95:93:93:97:7d:b3:a0:8c:24:3d:63:62:a4:62:5b:
fb:52:ee:0a:87:7d:cb:b6:4f:20:73:e9:71:29:d5:
65:d1:f2:32:b6:78:aa:0f:a1:37:fe:52:d3:10:a2:
40:c5:67:c2:6b:49:15:41:15:f9:20:3a:26:f8:89:
0d:c7:1e:71:1f:1b:f5:42:f5:cb:40:20:f3:1b:72:
dc:d1:6f:01:61:a0:d7:7e:01:5a:aa:5b:7c:48:ec:
14:c8:12:11:15:67:b3:64:9b:80:47:7b:7c:36:4c:
6a:e2:ca:83:13:ac:8d:84:58:2d:a4:bf:72:80:1e:
64:51:ad:c0:fd:65:d8:35:69:67:f5:1f:89:85:d7:
bb:c3:72:e2:48:a0:b1:2a:85:e8:30:e8:32:26:d2:
95:0b:88:a5:d7:68:6e:8a:42:fe:dc:ae:1b:28:de:
ed:9f:19:7e:d6:94:0e:d7:24:7f:d1:d4:27:74:7a:
99:df:c7:ae:a1:6c:7c:56:3d:37:1e:b9:fd:54:05:
d3:61:4a:97:3f:9f:e5:94:71:51:b5:f5:b2:b7:23:
e6:f1:2b:4c:54:ef:fc:ac:59:f1:2f:3c:bb:d0:d0:
ab:c8:63:04:bc:29:3b:f8:78:c4:e7:31:0d:33:a1:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:DF:5D:D5:74:58:34:29:E3:57:4D:21:CB:E0:FD:66:0D:BB:00
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ATnfXdV0WDQp41dNIcvg_WYNuwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.128.0-194.231.139.255
194.231.144.0/22
194.231.152.0/22
194.231.192.0/22
194.231.204.0/22
194.231.212.0/22
Signature Algorithm: sha256WithRSAEncryption
89:0f:25:aa:33:dd:b6:cd:b7:45:ab:48:ec:4a:b8:ee:a0:71:
ff:48:98:ab:05:a4:60:1d:ef:a1:fa:8b:a1:aa:0e:ed:e7:12:
20:07:c5:97:c9:25:d8:cd:e8:4b:09:52:f1:bb:ae:36:65:dc:
53:5f:a7:00:00:f9:19:40:02:32:4f:3a:4b:97:2e:fc:c6:73:
26:34:6f:43:14:ad:82:d0:5e:5a:ab:aa:b5:c8:f6:c1:47:11:
78:3c:f9:8c:3b:79:e5:4e:df:d6:6f:7b:31:ce:b2:c2:1c:26:
55:f4:9e:55:6b:df:99:ca:7b:e8:0c:d6:c6:d5:76:05:32:15:
78:57:ca:bd:f4:b5:a8:35:bc:01:9f:f0:4f:f3:18:52:9d:54:
44:51:10:10:ae:98:b9:1c:2a:da:c7:af:21:fb:1b:9e:a4:72:
2a:69:40:16:fc:28:00:6b:68:1a:9d:54:39:d8:a5:e0:bc:f3:
47:cf:0f:2b:41:ae:bb:31:72:50:9c:2a:47:ac:61:b8:a5:82:
b5:a1:db:b1:cb:f4:c8:e1:53:66:f7:5f:78:91:fb:70:b6:c5:
30:fb:0c:6a:38:d3:fd:36:99:d2:68:a9:b5:97:4a:8a:37:df:
d2:fb:6f:34:0f:16:74:cf:05:bc:3c:bf:8f:3b:69:bc:8f:32:
ce:71:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:37:59 2025 by rpki-client