
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/T_aE1VBzRFBW86cu7jRpCvqMP_0.roa
File: T_aE1VBzRFBW86cu7jRpCvqMP_0.roa (raw, json)
Hash identifier: Br23NBG7MwrWwFTa8s2oq/DVFkGOhwRXNYpcFdJ00mE=
Subject key identifier: 4F:F6:84:D5:50:73:44:50:56:F3:A7:2E:EE:34:69:0A:FA:8C:3F:FD
Certificate issuer: /CN=5b931a874e688f27c95acad8dbd31df698f2117d
Certificate serial: 019833496885327D4267E01A9F8E8C7CE027
Authority key identifier: 5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/T_aE1VBzRFBW86cu7jRpCvqMP_0.roa
Signing time: Tue 22 Jul 2025 17:58:25 +0000
ROA not before: Tue 22 Jul 2025 17:58:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196934
IP address blocks: 195.191.178.0/24 maxlen: 24
195.191.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:49:68:85:32:7d:42:67:e0:1a:9f:8e:8c:7c:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b931a874e688f27c95acad8dbd31df698f2117d
Validity
Not Before: Jul 22 17:58:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ff684d55073445056f3a72eee34690afa8c3ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:b5:da:dc:69:78:45:10:4e:67:d9:12:00:
74:51:41:f0:a6:c1:31:c1:27:cd:dc:45:e6:4d:a5:
06:4f:a4:73:be:c2:b6:54:8b:c8:9c:8b:c3:85:00:
01:a2:8d:ec:bb:9b:6f:bb:c3:5e:1c:9e:91:4a:07:
dc:a0:cc:1c:06:f6:da:25:14:c5:ff:f8:39:4d:76:
1e:23:72:a8:0d:5c:c0:b5:dc:bf:06:cf:83:ff:de:
93:e3:47:c1:c9:bb:29:c2:bf:6b:f7:07:7d:1f:29:
e1:b9:14:98:9f:c0:fe:b2:e4:11:2b:d5:fd:3d:6e:
c7:6f:f8:29:ed:b5:60:31:09:d1:0c:28:3c:a7:86:
ac:4e:83:e9:5d:b4:8f:7a:ac:73:0f:04:5a:9d:78:
8f:d3:0e:96:30:f5:f2:27:7a:16:6e:df:57:2d:00:
a6:98:16:ad:ce:1c:c0:81:1f:09:96:fb:2d:90:27:
10:1d:3a:aa:74:3e:f1:a2:ba:77:b8:7e:34:fc:7f:
18:89:41:7e:22:c6:a4:0c:88:79:cc:75:42:a8:b5:
e2:43:c2:ef:46:a8:c5:ea:30:5e:c6:df:f9:28:f3:
4d:53:31:6d:42:96:ec:9f:7a:ce:bf:b6:6a:42:73:
5d:30:99:db:36:29:40:4d:91:bd:9c:ac:aa:79:30:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F6:84:D5:50:73:44:50:56:F3:A7:2E:EE:34:69:0A:FA:8C:3F:FD
X509v3 Authority Key Identifier:
keyid:5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/T_aE1VBzRFBW86cu7jRpCvqMP_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.178.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:ba:17:20:17:b2:6e:a1:19:35:77:c8:69:85:04:15:f9:55:
28:a5:7a:55:62:83:b1:71:11:a6:51:77:87:07:9e:1d:2b:fd:
eb:34:58:2b:fd:71:15:a1:df:87:59:78:e6:c4:ea:5e:5a:63:
5a:75:c7:22:9d:61:8f:20:1a:0a:2a:11:25:b9:6d:d8:1b:96:
16:a7:ad:80:a4:82:5a:8b:ed:df:9e:c7:d2:61:4a:ae:bd:cc:
b2:86:80:26:aa:7f:cd:d3:48:22:9d:aa:18:4f:d8:57:2b:a6:
14:bd:0e:05:aa:82:b7:a5:9d:0b:3a:bb:16:c4:d2:a0:f0:41:
fb:fa:59:c6:76:1f:da:60:54:05:ea:e3:ad:38:f0:da:cc:22:
67:da:ae:c5:9a:ee:2d:ab:44:4c:c8:0a:91:70:01:4f:ba:7f:
9e:03:bf:b6:62:3b:06:a4:63:02:01:76:65:ac:ee:cd:61:10:
26:72:46:34:5b:ae:c2:ee:5d:8e:0a:d5:5a:13:5c:f3:e0:17:
17:51:14:63:f4:86:02:6c:c2:ee:06:32:3f:2d:c4:71:76:84:
c3:ff:ea:73:7d:ff:eb:39:6b:92:62:5f:1d:97:0c:33:ba:f6:
12:a2:c4:1a:16:51:26:ed:f7:02:3e:f0:59:31:fc:ef:f6:30:
34:d3:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:42:53 2025 by rpki-client