Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/1kiSbohRr3DLBAGP7UHbBG1rZGI.roa
File: 1kiSbohRr3DLBAGP7UHbBG1rZGI.roa (raw, json)
Hash identifier: +KzQv3frkKk0smX2lTMNafbc9D/i8E7/YRETWzys+5A=
Subject key identifier: D6:48:92:6E:88:51:AF:70:CB:04:01:8F:ED:41:DB:04:6D:6B:64:62
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 0197F9DC86D5DFADF5B01D5F252823D1DB57
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/1kiSbohRr3DLBAGP7UHbBG1rZGI.roa
Signing time: Fri 11 Jul 2025 14:21:08 +0000
ROA not before: Fri 11 Jul 2025 14:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49127
IP address blocks: 193.37.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 20:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:dc:86:d5:df:ad:f5:b0:1d:5f:25:28:23:d1:db:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jul 11 14:21:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d648926e8851af70cb04018fed41db046d6b6462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:7a:48:1d:4b:a4:74:04:f9:d1:52:db:1e:
91:e6:43:93:39:8b:a6:e5:1f:57:51:62:58:e7:60:
f6:41:fb:a4:b8:72:c3:be:f0:00:35:b1:8e:1d:0d:
bc:bf:09:fe:63:5a:90:08:a2:fb:c6:5a:50:fd:75:
b6:e7:62:91:d5:a7:d9:fb:8c:4e:cc:c7:91:ac:2b:
32:bf:b0:05:ba:fc:f6:48:40:11:bf:0d:9d:27:43:
5b:82:b3:d2:32:63:b3:86:4b:68:71:6f:14:d9:09:
d9:f1:d8:3c:21:b0:58:f0:11:51:c4:de:97:26:8f:
c0:db:ee:7c:e7:ac:87:09:15:c9:5b:36:bd:c6:58:
fa:2a:6f:8a:fb:60:c1:7d:3a:40:3a:6d:f8:8e:ef:
89:40:1c:28:bb:56:d2:e5:79:41:0b:2c:17:f4:92:
e5:42:0b:af:23:63:1f:6c:57:74:ce:1e:12:10:0b:
b4:81:fa:11:6f:ea:7e:19:da:e2:33:5b:ab:ba:bf:
be:8b:e8:f6:d3:37:d9:d0:89:ea:aa:a8:cd:a6:22:
6b:ca:24:45:2b:5b:b0:2e:90:fa:27:7b:4f:4c:39:
de:a7:a5:69:ce:2b:ec:d5:fa:bc:0c:ac:02:6d:d9:
6b:e9:c4:07:c0:02:c3:e2:22:9a:c5:01:9a:15:de:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:48:92:6E:88:51:AF:70:CB:04:01:8F:ED:41:DB:04:6D:6B:64:62
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/1kiSbohRr3DLBAGP7UHbBG1rZGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.216.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:6b:1a:1e:8c:8b:50:61:9b:62:c6:be:73:75:4c:24:12:11:
3f:41:9a:8c:c6:63:7b:85:eb:38:c2:f0:9d:d8:85:18:8b:b3:
de:85:eb:1b:93:cf:55:33:7b:9a:29:96:f9:ef:40:a6:72:91:
3f:4e:49:79:cd:42:b8:51:88:f5:53:7f:9f:e8:c5:83:fd:09:
05:f0:04:22:1c:1e:f7:61:c7:aa:a4:a0:33:4e:96:8e:e4:39:
24:11:27:d6:38:43:24:8f:77:d5:d6:71:f4:1c:b4:ec:34:03:
a6:b9:b1:c8:a3:f7:e6:56:97:41:2e:e1:d5:3f:01:44:53:17:
f4:6a:6c:bd:3c:21:23:6d:e6:d7:4c:46:fb:1e:cd:03:fe:42:
12:a2:91:57:bd:c6:ce:62:21:a0:5f:ec:f1:31:66:6f:16:9a:
a0:0e:75:c7:26:df:1f:7d:7e:5b:f6:3f:41:a8:59:2a:a5:ac:
3c:60:36:5f:99:b3:7c:d3:8c:36:19:e9:cd:96:ac:c2:2c:58:
0a:3e:14:fd:b2:72:ae:88:e5:3c:45:e3:f6:8a:2d:96:71:c1:
a7:2c:fd:cf:ff:8f:9b:15:f3:1b:08:c6:37:8d:c9:1c:ef:56:
5d:26:e1:7f:61:40:57:bf:90:f8:b3:76:df:88:3a:00:d2:b4:
b6:de:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:06:09 2025 by rpki-client