Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/2nRmCt4bdl4doXvTYT8t5207Jd4.roa
File: 2nRmCt4bdl4doXvTYT8t5207Jd4.roa (raw, json)
Hash identifier: 0oBN6/6j9IUQgMFBTfG4NJAPzy3oRpmBgYNyWcNrcYI=
Subject key identifier: DA:74:66:0A:DE:1B:76:5E:1D:A1:7B:D3:61:3F:2D:E7:6D:3B:25:DE
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 0197E612E9E2DE2D14342D9B2D0A6F4A9380
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/2nRmCt4bdl4doXvTYT8t5207Jd4.roa
Signing time: Mon 07 Jul 2025 18:08:08 +0000
ROA not before: Mon 07 Jul 2025 18:08:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8801
IP address blocks: 193.56.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e6:12:e9:e2:de:2d:14:34:2d:9b:2d:0a:6f:4a:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Jul 7 18:08:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da74660ade1b765e1da17bd3613f2de76d3b25de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:cf:e1:ff:d3:26:ee:25:bb:85:76:6a:8a:
82:44:85:7e:ca:79:bf:51:31:fa:4f:3a:e7:88:52:
9a:02:41:cd:70:ac:5c:eb:6d:a3:4b:d4:3e:24:c5:
b2:a3:15:be:a1:59:89:07:d4:29:76:5f:97:a0:e8:
dd:94:4b:6d:6c:0b:c1:61:24:c5:d3:e8:58:14:c0:
b4:f8:b7:ad:fb:ff:36:0e:e7:c0:35:39:7f:92:94:
6e:dd:4c:cd:e2:ca:7b:9a:c1:65:34:73:2a:ad:6f:
75:b6:db:f5:43:0a:b0:5b:b2:47:18:e3:05:bf:12:
c1:35:54:64:93:ba:ef:33:5d:64:60:f1:46:62:93:
ae:60:13:aa:a4:c6:6f:09:d4:29:87:5f:7a:c1:06:
07:d8:31:b2:b0:08:48:fb:8a:68:13:e6:da:8b:60:
96:2c:8e:6d:90:72:9f:eb:b1:ad:ef:dd:1d:96:07:
b4:b1:7c:39:dc:8e:a2:45:de:37:63:cf:ee:32:0a:
b5:a5:13:74:1b:93:ab:33:94:e5:89:e4:25:69:60:
dd:21:14:c5:df:4f:9c:a9:6b:0d:34:58:67:a6:a1:
8f:98:04:3e:a5:9d:d3:cc:7a:75:46:d5:f3:fc:de:
55:5e:50:54:b3:b4:be:af:80:06:cc:f6:f0:6c:6a:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:74:66:0A:DE:1B:76:5E:1D:A1:7B:D3:61:3F:2D:E7:6D:3B:25:DE
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/2nRmCt4bdl4doXvTYT8t5207Jd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.176.0/22
Signature Algorithm: sha256WithRSAEncryption
78:9d:c6:6d:a1:24:75:97:b7:36:96:30:b9:15:fd:e6:d2:21:
74:cd:72:5c:b6:55:c9:ba:77:ec:27:77:3b:21:61:be:6f:00:
76:7d:d3:90:b6:52:78:59:7b:11:c0:95:5d:e9:6f:2a:a3:01:
76:03:a5:92:c2:65:13:3a:96:3a:2c:a4:42:de:df:4c:c2:74:
a9:c3:1a:02:95:61:5c:e7:8d:b4:36:99:dc:69:50:d5:13:36:
fd:c5:ea:55:d6:ed:0f:d8:98:c5:8f:6f:34:68:41:93:86:4a:
da:67:ba:67:6c:04:37:54:fa:3d:db:7f:a0:40:e9:84:f4:20:
7c:6b:40:d0:2d:87:95:5d:13:62:e0:66:fc:a9:bf:15:9c:83:
2e:db:07:d5:ad:74:51:61:90:57:d9:5f:a4:72:02:7c:d1:2f:
3c:84:b1:2c:7f:9f:7e:9e:b2:0b:73:81:ef:e8:05:30:03:a5:
0b:c1:d0:1c:c9:fa:c3:48:55:41:fe:4f:cc:bd:1e:56:2a:2d:
2a:fb:90:e0:18:9e:d9:ad:8e:a1:b1:92:45:7a:30:86:97:57:
4f:25:51:56:fd:31:50:88:b5:f4:1b:7d:dd:f2:23:98:0c:c0:
84:b7:fb:dc:fa:c4:bf:6d:55:38:f7:84:7c:41:f9:e9:2d:8d:
9a:b2:37:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:15:17 2025 by rpki-client