Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa
File: L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa (raw, json)
Hash identifier: A23/d2PZxyO/+hmzuzhwUae+7e+2M3snpbUPx16lhIs=
Subject key identifier: 2F:84:3B:5A:37:DC:29:D4:3C:0A:65:B0:E0:84:25:D6:10:8B:88:D6
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 0197C6F65CBAA1E00B5D1384C25E9C5B69E6
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa
Signing time: Tue 01 Jul 2025 17:08:43 +0000
ROA not before: Tue 01 Jul 2025 17:08:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62354
IP address blocks: 195.200.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:f6:5c:ba:a1:e0:0b:5d:13:84:c2:5e:9c:5b:69:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jul 1 17:08:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f843b5a37dc29d43c0a65b0e08425d6108b88d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:9a:17:9a:8e:80:12:07:d7:54:95:fe:12:
b3:af:d9:6b:ae:ef:32:a9:29:43:49:ec:40:9a:46:
98:c4:e6:7e:6a:50:98:f9:29:1a:c4:0a:18:09:a2:
9b:5c:a6:ee:32:56:89:5c:71:01:52:32:a1:5c:82:
78:13:09:cd:4c:9a:c6:74:95:7a:2f:fc:e7:08:19:
5a:ea:a0:da:73:91:7d:f1:ec:6a:3e:a3:7d:6b:00:
a1:f4:1f:47:b7:b7:09:5f:84:c3:72:44:a7:29:cb:
8d:bc:0d:c3:13:ea:2a:c2:9b:41:01:15:dc:e5:13:
62:f2:9e:f6:50:da:28:bf:54:b0:42:b7:03:2e:39:
6b:d2:05:8e:64:3e:72:3b:2a:a9:62:d7:b0:ab:1e:
89:bb:c8:0c:0d:dc:3e:12:55:8e:68:40:35:67:3d:
62:3b:52:af:00:0b:34:71:7e:3a:59:c8:53:5a:d7:
4c:6d:55:23:fd:a2:c2:1f:ea:6c:17:58:bc:a4:17:
71:6a:67:e9:5e:98:e5:94:e5:ce:3b:cf:3e:ae:e8:
97:80:35:f6:86:ca:53:5a:d2:3a:72:1b:b9:12:e2:
f3:90:de:b1:18:b0:18:0f:8d:3f:c4:c2:15:97:dc:
bb:4e:44:0f:3d:6c:47:73:04:28:cc:1f:dc:cc:13:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:84:3B:5A:37:DC:29:D4:3C:0A:65:B0:E0:84:25:D6:10:8B:88:D6
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.80.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6a:56:16:a3:c5:ad:30:6c:1c:23:3a:26:c3:65:5c:ed:f7:
a9:9e:fa:33:e4:83:b6:a2:27:ba:90:65:f5:62:ee:60:2a:f5:
71:25:7d:59:d6:9a:e3:5e:17:7b:55:76:11:42:f4:54:e6:c8:
b3:9e:ec:39:0f:7f:98:ca:7b:1d:ca:27:a6:03:6d:e0:4d:bb:
1b:48:8e:9b:b6:5b:11:a3:4e:18:8c:3c:56:00:4a:b5:27:96:
28:ce:40:d8:0d:a4:24:d6:51:97:a5:6b:60:4e:70:8d:83:9c:
85:1b:37:c9:1b:fb:f6:9b:93:3a:56:81:77:bb:c6:cd:f6:4e:
07:ea:b8:37:47:1e:32:8c:6a:81:92:91:9d:1b:63:99:73:e2:
e3:cc:70:78:4d:e5:d3:d4:67:de:4a:68:19:83:af:48:7a:b9:
10:55:fc:61:42:8f:02:bc:8f:a4:e1:42:5d:12:5a:4a:e1:28:
32:a2:3e:41:fe:a9:43:e4:ee:8c:29:94:a7:30:f6:39:64:b7:
5a:d2:55:91:a6:74:24:8b:f8:1b:c5:eb:16:29:cb:30:9c:1a:
15:d0:3f:ac:e5:93:55:f5:5c:8f:07:cb:71:f4:25:da:33:fe:
40:01:e9:9a:5d:03:f5:c6:77:24:b7:ec:fb:8b:15:0c:4f:a0:
7c:b6:11:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:06:54 2025 by rpki-client