Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/x5g4Yx-4Axclx9bIGwFB84Iym2c.roa
File: x5g4Yx-4Axclx9bIGwFB84Iym2c.roa (raw, json)
Hash identifier: bIVNfubcI8rYDpnAvFhP7CDZoTKLVRLtE5Ma2eZVs9w=
Subject key identifier: C7:98:38:63:1F:B8:03:17:25:C7:D6:C8:1B:01:41:F3:82:32:9B:67
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0197C1118EE23BD14ECFE37711FD934F670A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/x5g4Yx-4Axclx9bIGwFB84Iym2c.roa
Signing time: Mon 30 Jun 2025 13:40:42 +0000
ROA not before: Mon 30 Jun 2025 13:40:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62300
IP address blocks: 31.40.201.0/24 maxlen: 24
45.91.239.0/24 maxlen: 24
195.216.154.0/24 maxlen: 24
213.166.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:11:8e:e2:3b:d1:4e:cf:e3:77:11:fd:93:4f:67:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 30 13:40:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c79838631fb8031725c7d6c81b0141f382329b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:35:ad:b1:26:85:dc:71:72:34:34:d8:7a:
81:66:88:b6:04:65:b1:b1:28:9b:f5:4c:75:59:73:
dc:8b:61:33:ab:a7:7e:fb:78:3b:ff:ee:c7:03:f3:
cd:c9:4f:f1:ea:2e:23:ee:84:00:97:a6:d4:78:5b:
52:3c:e4:3c:1c:05:fe:da:0d:67:7b:0a:2f:90:01:
e1:00:de:17:c8:84:28:18:5c:94:d1:24:37:75:ea:
5d:07:25:d5:5e:c9:cc:f1:18:2f:b0:7a:98:99:71:
25:d7:8f:35:5b:e2:63:90:f8:46:a1:02:c2:07:8b:
0b:f8:af:f7:d8:9d:77:33:59:37:f7:da:39:7a:88:
ef:64:50:52:70:77:0c:2a:06:95:91:dd:06:46:25:
a4:bc:53:2a:c9:02:90:7b:11:27:60:61:a6:ec:66:
48:08:6c:20:31:40:19:06:61:62:41:6f:20:25:13:
45:0b:5a:10:ad:b4:21:89:4d:43:ff:b2:04:1f:f6:
66:6a:43:85:20:2e:ae:c1:e4:04:b6:58:2f:e5:eb:
c6:55:b1:7b:9e:75:fb:af:7e:2b:bc:37:01:36:8e:
8b:80:2d:c3:3c:1f:1e:f4:3e:c6:91:e7:96:aa:67:
b6:6b:94:9f:5d:98:5e:41:a5:95:8a:6a:74:51:a7:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:98:38:63:1F:B8:03:17:25:C7:D6:C8:1B:01:41:F3:82:32:9B:67
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/x5g4Yx-4Axclx9bIGwFB84Iym2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.201.0/24
45.91.239.0/24
195.216.154.0/24
213.166.93.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e4:69:3e:44:7a:04:33:c9:05:ea:b0:a1:5f:c0:5c:aa:f5:
a7:c2:2a:ff:8f:55:8d:1f:40:3b:0e:5c:1a:2e:7b:ad:16:27:
c3:12:b6:04:82:78:19:55:a8:49:e7:10:d1:3c:c1:83:db:04:
dd:5b:f9:f0:bf:96:eb:5a:12:e2:c2:61:22:56:61:58:fc:2c:
cd:df:33:b5:cc:0e:8f:06:f1:e9:fa:90:85:cd:1c:5b:d4:52:
77:2e:d5:bd:2d:a0:25:d4:7b:22:c2:4e:b1:d4:3d:51:ac:50:
91:4a:bf:fb:eb:68:1e:36:0d:9d:26:3e:0a:6c:44:b1:30:d7:
f1:36:c8:23:4d:dd:54:9e:9c:eb:39:31:44:f0:c5:53:47:07:
ba:47:ed:85:fe:b8:6d:c9:a3:8e:f2:ce:20:61:2d:97:f8:86:
c1:fb:08:29:b3:5a:37:70:fa:17:57:44:1f:10:b4:ec:f4:09:
3f:2e:7e:cc:a9:1e:69:0f:26:f1:28:3a:26:3b:36:1a:b9:26:
77:33:bc:80:1e:63:52:4c:38:0b:0e:1a:79:9f:31:34:40:db:
94:82:54:75:68:89:48:f2:d7:5b:cd:b8:f0:88:45:95:ef:f4:
fd:b9:da:ee:9c:c7:10:38:cb:d6:59:51:cf:59:bb:ad:81:39:
ee:63:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:06:39 2025 by rpki-client