Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/th8VIy6ilOjsBnuJs5F-ma3hD5E.roa
File: th8VIy6ilOjsBnuJs5F-ma3hD5E.roa (raw, json)
Hash identifier: /EsPG2U4dQwt3L/d+3LRYLJaWFYWyBa2txVzoihJxU0=
Subject key identifier: B6:1F:15:23:2E:A2:94:E8:EC:06:7B:89:B3:91:7E:99:AD:E1:0F:91
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01981CDEE25C1ED59F6CDBF2E3EBEDA4C915
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/th8VIy6ilOjsBnuJs5F-ma3hD5E.roa
Signing time: Fri 18 Jul 2025 09:30:25 +0000
ROA not before: Fri 18 Jul 2025 09:30:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196695
IP address blocks: 170.168.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:de:e2:5c:1e:d5:9f:6c:db:f2:e3:eb:ed:a4:c9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 18 09:30:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b61f15232ea294e8ec067b89b3917e99ade10f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:d4:3e:c1:95:b5:eb:2d:e3:ad:5a:9a:b4:
a8:22:2c:31:33:cc:6a:d7:01:bf:44:0b:5f:28:99:
15:bd:c2:35:a9:ba:1b:c0:f9:d9:08:12:5b:ce:9a:
a3:cd:73:40:f5:c6:96:e1:93:71:9e:cb:41:0b:bf:
db:de:e7:4e:41:8e:9e:e8:dc:ca:2d:c0:d3:83:0a:
79:81:dc:fb:5e:21:5c:48:0e:29:4b:28:0d:00:26:
3e:7c:b5:67:1f:3b:12:b2:0b:4c:55:c4:13:3f:ff:
ea:04:c5:46:70:e2:fc:1f:71:81:4a:e7:4f:04:23:
e3:5d:35:58:95:5b:2e:22:bf:dd:61:4b:4e:3a:ab:
7c:5a:86:40:53:cc:dc:24:66:37:68:4c:23:4b:36:
d3:26:f8:8e:c0:2b:6e:ff:56:90:ac:0a:c4:c3:49:
56:0a:58:98:9c:a8:4f:0e:d6:b3:2c:38:48:1e:27:
90:69:f0:53:21:0f:fa:01:a5:f1:57:92:db:6c:53:
6d:3a:11:f3:39:4a:60:fb:2d:51:14:f1:dc:df:13:
10:9d:8e:05:e4:1e:a6:2d:27:2f:be:a6:13:99:69:
b5:7b:bc:4b:ba:76:e1:94:e1:d6:bb:e1:8d:48:ce:
b7:8d:d5:61:d0:f5:20:31:d6:e3:01:c5:f9:f9:a5:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:15:23:2E:A2:94:E8:EC:06:7B:89:B3:91:7E:99:AD:E1:0F:91
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/th8VIy6ilOjsBnuJs5F-ma3hD5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:52:9a:a6:3a:2c:4b:30:45:05:ec:fa:59:0d:83:72:14:51:
ce:11:d8:c4:41:43:8c:1b:a0:d4:8b:86:73:c8:9e:16:ec:cd:
ad:c8:ef:6d:9b:7f:58:c8:aa:36:9a:ae:2e:c0:28:9e:a2:b0:
f0:39:cb:79:fa:37:b7:4d:88:46:ec:bd:50:dd:08:f1:d6:4a:
f3:df:00:98:36:9c:5b:f8:57:d2:60:8a:c4:e6:2f:81:c7:0b:
c7:3e:8f:01:7c:21:4b:fa:3a:0c:43:62:3d:d9:df:46:a3:6b:
5c:a1:88:54:02:49:c2:a1:22:fb:b9:64:f5:64:80:63:2a:9b:
1b:12:2b:35:09:a6:87:60:8c:82:59:52:80:7d:ac:b5:d5:55:
e4:4f:61:46:1d:11:cf:95:74:0c:10:5e:49:44:d2:06:d9:0c:
b8:a2:23:b5:7c:3f:f2:33:3e:f2:42:c1:39:ff:3e:85:f1:4f:
9d:01:45:47:f4:9f:85:fc:de:91:f0:ea:db:6d:8e:83:ab:d6:
20:ae:22:ee:3a:33:e9:f1:3f:53:47:69:cb:f2:6d:1b:31:d0:
c2:e2:20:d0:ec:aa:a3:6d:d1:29:db:c6:73:1e:e0:c6:69:b9:
2f:31:9b:22:b7:fb:5e:d9:f5:68:1c:d0:47:a7:61:77:8d:8d:
23:4b:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:13:07 2025 by rpki-client