Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/myv5FV2ZT9Ls5MevHdTYqEA_MJA.roa
File: myv5FV2ZT9Ls5MevHdTYqEA_MJA.roa (raw, json)
Hash identifier: 1YzQOOkMlFwUdOarp93EdHT73EeNJxXmq8VtlTgOrEU=
Subject key identifier: 9B:2B:F9:15:5D:99:4F:D2:EC:E4:C7:AF:1D:D4:D8:A8:40:3F:30:90
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019933CCA5208BE1CAC6CC941F0C87F179E5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/myv5FV2ZT9Ls5MevHdTYqEA_MJA.roa
Signing time: Wed 10 Sep 2025 13:24:33 +0000
ROA not before: Wed 10 Sep 2025 13:24:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47629
IP address blocks: 188.255.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:cc:a5:20:8b:e1:ca:c6:cc:94:1f:0c:87:f1:79:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 10 13:24:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b2bf9155d994fd2ece4c7af1dd4d8a8403f3090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:93:e2:4f:a4:b2:8e:98:f8:54:1d:64:6a:
db:86:ef:c2:8c:bb:b2:9b:b3:78:9f:f7:8f:bb:1c:
33:50:65:8f:50:ea:51:c1:11:62:f0:88:36:5b:0e:
48:a5:f1:99:e5:be:c2:91:58:47:ff:ef:5e:86:17:
8b:aa:b7:a2:d3:3e:5e:63:09:9a:8e:21:e0:93:4e:
64:a7:bd:4d:42:a9:11:d5:6b:eb:1f:42:30:0e:27:
f4:57:55:9a:3e:36:07:25:c5:79:f8:ca:40:a7:0e:
a0:6a:2b:59:b9:36:d5:3d:e1:e8:49:0d:14:89:af:
43:7d:f3:69:a0:4a:73:3a:6f:14:36:77:14:91:23:
f3:29:56:61:86:2d:0c:86:1a:ca:3a:1f:33:bb:7a:
39:1f:12:c6:cf:ee:fa:e9:6a:38:67:a3:c3:99:3d:
66:10:8a:7d:7f:c7:99:59:31:57:c1:31:83:45:71:
7a:38:39:2f:a7:68:99:81:f4:c9:d1:e7:38:89:7f:
92:17:13:74:2c:e2:a4:76:9a:42:0c:ba:3e:a7:e1:
bd:27:ae:9a:23:51:9a:70:76:38:d6:c1:5c:b7:66:
56:01:f1:f7:80:57:99:30:62:75:67:37:a1:d5:4e:
4d:fc:d2:74:9d:80:56:e5:30:c7:1d:b2:db:8c:8c:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:F9:15:5D:99:4F:D2:EC:E4:C7:AF:1D:D4:D8:A8:40:3F:30:90
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/myv5FV2ZT9Ls5MevHdTYqEA_MJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bf:44:a9:e2:d2:38:dd:e9:31:65:2f:4b:eb:88:83:46:ea:
f8:c5:68:3a:92:fa:d9:53:f9:e8:e6:d9:8a:f3:83:ff:0b:50:
74:ee:e8:cd:ed:2b:98:9e:61:e1:c7:92:d1:4c:31:7d:69:b7:
5f:f2:2c:5b:36:b7:8e:c6:c8:e3:8f:bd:be:02:50:5d:bf:3f:
ff:8a:26:1c:d9:58:aa:95:45:14:85:58:dc:61:3c:10:b5:8a:
08:a9:9e:b5:26:ad:76:62:48:18:30:bd:21:af:09:fc:86:af:
5e:59:a6:02:f9:2c:53:e6:0a:ad:42:7a:7d:9c:3a:e5:22:f0:
32:97:8d:70:a6:88:c0:39:12:61:81:dd:db:d8:77:ce:63:ed:
83:60:d0:74:ce:1f:ef:5c:f1:2d:df:3b:3e:b2:99:73:3b:01:
83:0a:84:5b:6d:08:8c:1c:c0:24:7f:b2:b1:08:19:44:e2:1d:
2c:98:2c:99:6e:44:3d:93:7a:97:2f:43:96:01:86:6f:37:ac:
b2:57:f0:25:f6:db:72:27:cc:c3:d9:75:a8:ee:e5:a7:ac:1e:
b6:98:d9:d1:a1:d4:18:53:c1:eb:ea:1b:87:68:b2:68:6e:97:
2b:4b:25:b3:14:92:b8:91:21:a8:61:89:7d:e1:95:dc:60:3c:
da:51:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:35:23 2025 by rpki-client