Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/xUt7rIAlTaOfGyRWf5TgR_Li0g8.roa
File: xUt7rIAlTaOfGyRWf5TgR_Li0g8.roa (raw, json)
Hash identifier: e04y1syfRUdA3FeDshQe6g/3G2q/CXuKg4Nhfkg8RiA=
Subject key identifier: C5:4B:7B:AC:80:25:4D:A3:9F:1B:24:56:7F:94:E0:47:F2:E2:D2:0F
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B540D79F18A66E5C4BCFBEB14E9FFF
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/xUt7rIAlTaOfGyRWf5TgR_Li0g8.roa
Signing time: Mon 14 Jul 2025 16:12:10 +0000
ROA not before: Mon 14 Jul 2025 16:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209592
IP address blocks: 176.118.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b5:40:d7:9f:18:a6:6e:5c:4b:cf:be:b1:4e:9f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c54b7bac80254da39f1b24567f94e047f2e2d20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:50:f5:17:48:59:16:eb:77:04:80:3b:a8:
ee:50:51:58:82:d5:b9:c6:fb:e8:69:23:a3:60:6c:
ff:fe:a0:8f:87:80:aa:f3:00:74:75:08:5e:fe:bf:
08:d5:45:25:b9:6b:9b:62:58:42:56:70:fd:32:91:
e2:52:a5:0c:0e:10:44:cd:38:b5:7b:0a:bc:9c:a1:
6a:1d:d6:1f:ba:27:17:fe:24:88:50:e5:22:b9:54:
7c:2b:c2:9d:83:65:6b:b5:05:20:92:13:ae:04:42:
07:c3:e4:1d:44:04:95:3a:f6:d7:cf:d1:29:87:90:
3a:7b:48:86:31:25:b8:d3:6c:80:97:4c:31:55:8a:
0b:4b:3f:eb:be:bf:6f:94:61:a0:0d:5e:4d:79:53:
21:86:ae:1a:59:4c:d5:62:b7:d5:94:a0:60:da:b0:
62:ce:1f:45:ae:5c:a3:4d:76:4b:36:8e:0b:c7:43:
8f:c7:13:aa:9e:3a:7c:f6:8e:a6:e3:7d:49:d7:a5:
cb:bb:53:7f:46:7d:5c:fd:98:5a:f7:c5:b2:49:c7:
3c:68:33:fe:18:0e:45:a4:e5:ea:fc:09:35:38:6d:
97:33:8d:e8:44:11:2c:1a:48:a6:ed:95:02:62:18:
26:81:71:8c:c1:c1:00:6f:ef:1a:90:62:4b:8e:6e:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:7B:AC:80:25:4D:A3:9F:1B:24:56:7F:94:E0:47:F2:E2:D2:0F
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/xUt7rIAlTaOfGyRWf5TgR_Li0g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.197.0/24
Signature Algorithm: sha256WithRSAEncryption
74:46:08:7e:58:66:a5:bd:3d:72:dc:4c:82:75:1a:6e:b9:38:
5a:46:f3:7a:60:d2:13:40:5e:51:be:78:dd:06:ec:ad:44:ea:
af:73:15:1d:43:72:59:eb:da:e2:16:fe:e8:b5:3b:7b:6f:5c:
b7:b1:6d:39:56:24:c3:a6:df:e2:91:7e:37:c2:25:4c:70:64:
e9:14:10:14:27:a9:fd:c2:33:0a:b3:a5:96:1e:94:48:de:26:
cf:ec:75:3e:2b:55:c6:e9:2d:ee:66:fd:be:26:f7:0b:c4:88:
3e:73:8c:04:91:e5:a1:ff:6f:e1:55:9c:6d:53:72:32:d6:bd:
98:a4:22:85:4b:be:48:24:7e:19:5b:87:d5:64:33:45:d2:04:
db:d6:75:65:87:ec:c9:84:3b:d2:89:4f:31:b4:65:7e:81:55:
ec:3e:a1:47:ba:14:b3:05:2e:67:c9:08:e6:e5:fc:08:a5:d4:
c7:7d:a6:aa:c7:d4:08:56:80:7b:9d:13:86:9b:97:de:c4:ec:
e1:19:72:71:2b:de:6d:6d:86:a9:c9:fc:ac:d3:c0:b7:fe:be:
5a:0d:30:8d:48:92:9b:58:df:18:12:ec:31:a3:7e:76:16:fb:
00:61:aa:f3:82:fd:f8:c4:eb:36:6c:f3:48:d4:c2:a1:49:d9:
80:ab:3f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:25:29 2025 by rpki-client