Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa
File: leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa (raw, json)
Hash identifier: qNmjf5Agy5lGUPR54BZFqLIkeuS1MkmGjj8lmstmC6w=
Subject key identifier: 95:E5:82:81:55:32:C5:AE:1F:17:62:EF:EC:AA:FE:67:B3:4F:12:8B
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 0197E5189428CC90A47690781B22E98D3981
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa
Signing time: Mon 07 Jul 2025 13:34:42 +0000
ROA not before: Mon 07 Jul 2025 13:34:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29037
IP address blocks: 185.9.12.0/22 maxlen: 22
193.47.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:18:94:28:cc:90:a4:76:90:78:1b:22:e9:8d:39:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jul 7 13:34:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95e582815532c5ae1f1762efecaafe67b34f128b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:cb:bc:de:96:9d:55:68:23:1e:22:b2:28:
b8:9c:5e:de:ee:be:5c:97:d8:53:7b:ac:87:7f:e2:
04:61:39:f3:cd:f4:81:d8:45:c5:f3:65:ab:90:9c:
5e:8b:ba:45:54:c9:f9:f2:e8:05:21:1d:ee:66:f2:
79:69:94:ac:46:8d:85:69:b4:ea:4b:75:08:cb:95:
7c:b9:91:0f:81:83:7e:bd:41:83:12:ce:89:3e:8e:
ff:39:01:92:73:4e:b6:7c:91:c5:a3:22:a8:73:ac:
86:3e:53:a5:52:84:9b:19:ef:21:82:ba:44:bc:06:
4e:50:4e:e6:f8:ef:30:42:48:aa:8e:7f:0d:cb:3a:
40:4b:09:24:e4:a2:c0:f5:54:c6:48:73:fa:fb:e5:
38:d3:01:f5:ba:9c:2c:58:ca:ed:cf:e1:8e:c6:7c:
66:90:a3:de:b0:9d:35:60:82:21:67:48:3b:b4:54:
79:e0:cb:de:58:60:cf:09:1f:95:c0:f0:c6:2c:c1:
c7:fc:2c:e1:cc:15:18:11:f3:cb:57:9e:09:c3:6a:
c7:15:1a:c9:d8:9d:5a:71:39:b8:ff:4d:8d:3b:84:
58:bd:49:d7:a1:10:2c:ae:1f:fa:1d:02:c7:36:94:
75:40:c7:80:99:b2:fc:67:97:da:d7:3e:01:b1:35:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E5:82:81:55:32:C5:AE:1F:17:62:EF:EC:AA:FE:67:B3:4F:12:8B
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.12.0/22
193.47.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:22:df:08:cb:38:8c:ab:bf:5c:af:3c:c5:79:3e:35:b8:99:
70:c4:e6:78:08:5f:b2:9b:79:75:73:7f:06:2c:30:26:a0:77:
cf:dc:56:4a:96:35:d4:72:1e:35:1e:cc:04:72:52:fb:87:7a:
6c:e3:7a:e3:07:c3:9b:34:69:af:26:8b:e0:7b:a6:94:06:67:
2d:13:20:9c:33:93:76:b6:2f:50:fb:da:e8:16:93:43:2c:fd:
61:5b:2e:f6:e2:3e:39:1e:3b:91:3e:fc:ac:2c:ae:4c:9c:f5:
71:36:6c:be:f0:80:08:15:74:dd:bf:0f:22:5f:2a:d7:ae:16:
6d:55:aa:d7:5d:ef:48:35:7d:a8:4d:a9:d3:d1:13:b1:c0:c4:
db:88:67:e8:b5:47:77:db:f7:f7:75:4f:54:c9:c4:8d:5b:d3:
4c:4c:5e:8b:62:f8:98:87:f1:92:3b:67:3d:66:03:ab:95:3e:
82:ef:88:61:ae:f7:95:8e:d6:12:ed:c2:c1:7a:b2:0d:92:b6:
64:14:52:6f:d4:88:f6:a6:37:e1:3e:ab:7e:8c:36:2b:9a:42:
1f:13:af:39:73:a8:16:02:54:9f:15:4c:1f:fd:36:0e:26:cb:
c4:57:25:61:30:aa:0b:55:55:cb:4f:a8:eb:b3:4f:20:58:e1:
52:13:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:28 2025 by rpki-client