Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/aJfzCHgdSCY6Ayx6oLkgtGDzCkQ.roa
File: aJfzCHgdSCY6Ayx6oLkgtGDzCkQ.roa (raw, json)
Hash identifier: Hkvhz/ggkNHVhSUwJdWWlUrJO/wqUHZPcgr4qXPSHYQ=
Subject key identifier: 68:97:F3:08:78:1D:48:26:3A:03:2C:7A:A0:B9:20:B4:60:F3:0A:44
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019812AF926133F947463419AE8123AB678B
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/aJfzCHgdSCY6Ayx6oLkgtGDzCkQ.roa
Signing time: Wed 16 Jul 2025 10:02:32 +0000
ROA not before: Wed 16 Jul 2025 10:02:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205135
IP address blocks: 185.229.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:af:92:61:33:f9:47:46:34:19:ae:81:23:ab:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 16 10:02:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6897f308781d48263a032c7aa0b920b460f30a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:b6:df:bd:25:4e:ff:75:f5:57:29:ec:e3:
d8:31:27:b9:b2:a4:07:46:35:93:c3:64:1a:68:bb:
55:90:e8:87:0a:f6:cc:dd:2f:37:97:08:26:ad:5a:
4a:64:c8:7b:73:fc:16:79:d8:87:0c:91:4f:7a:a9:
bc:4e:5d:61:0d:87:d1:42:dd:41:3a:8e:0e:8b:46:
97:fd:e1:70:a9:2e:d3:73:03:0e:0c:8a:bd:39:22:
40:0a:3b:b0:49:7d:c3:86:81:3e:d6:37:fd:47:1a:
5f:cf:85:e7:64:90:07:2f:6e:73:b0:5c:6d:9a:a2:
92:87:3e:9c:f5:1f:01:0e:15:57:d0:bf:48:15:0c:
17:ae:bc:a4:db:72:7b:78:42:3b:86:d9:25:a4:aa:
5a:ff:95:91:60:76:b6:4c:b2:7e:98:e2:06:f8:85:
a6:e0:39:3f:10:6b:9e:04:99:8a:ce:da:39:47:ab:
f2:ce:b0:f7:7d:e8:0b:d5:18:62:bd:e4:8a:38:85:
85:cb:7d:a9:d3:0d:57:ba:d8:eb:a2:48:76:c6:b6:
cf:0d:91:ad:23:14:56:59:2a:10:7e:de:84:da:f5:
e9:b1:4e:78:7e:c1:f0:0f:b3:de:8a:94:4a:2c:c9:
3f:07:e9:1b:63:3e:ce:12:ef:bc:e0:8b:fb:6f:ba:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:97:F3:08:78:1D:48:26:3A:03:2C:7A:A0:B9:20:B4:60:F3:0A:44
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/aJfzCHgdSCY6Ayx6oLkgtGDzCkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.67.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c4:8c:b6:e4:de:30:ab:5f:1a:0b:7b:47:b1:43:9f:5e:21:
dd:50:53:bc:04:e4:69:83:b7:2a:99:df:3c:57:58:20:5a:f2:
77:5d:ed:43:30:41:63:00:fe:1c:1e:d7:f5:95:5b:eb:6b:41:
af:f6:f2:a3:3d:29:b6:7c:c1:f4:95:f1:3f:92:4b:93:4a:86:
50:3e:80:c4:83:da:d2:b3:be:5d:69:55:2b:dc:94:bf:d9:57:
89:9c:a4:3b:0e:92:f8:ae:0a:d7:25:9e:9f:d0:04:03:3a:d0:
a5:cb:32:40:9e:a0:5a:22:37:b6:dd:5b:14:01:ab:35:c9:1c:
2f:9f:06:43:c3:6a:d6:73:91:df:e0:b1:3e:7b:40:ed:57:df:
58:ca:2d:c5:e9:10:9b:2f:de:4b:78:a0:d8:fa:05:6f:75:6c:
f7:c9:23:00:95:af:44:d4:41:f5:ca:f9:a1:59:45:64:f5:e0:
94:b4:76:42:a2:5c:f4:35:0d:3c:02:37:91:8d:e6:f1:93:8e:
0a:24:62:c2:3b:1a:05:00:aa:a1:8a:49:47:40:29:3e:6d:8f:
b0:e7:d1:82:9c:21:82:22:f1:04:58:5a:18:67:b7:42:2f:c0:
53:00:9c:ff:2f:d6:33:74:75:1a:e2:2b:1b:a3:c4:3d:b0:bc:
e2:8f:a8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:42:52 2025 by rpki-client