Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/T9gh88fZ3TQ8-5_9o6el_Wb8-Xc.roa
File: T9gh88fZ3TQ8-5_9o6el_Wb8-Xc.roa (raw, json)
Hash identifier: vYKwClraGBcvVFZxFs/Ct6IWQdD7gfJQlv/kKQiFWXw=
Subject key identifier: 4F:D8:21:F3:C7:D9:DD:34:3C:FB:9F:FD:A3:A7:A5:FD:66:FC:F9:77
Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Certificate serial: 01983752E4C4CA9C9D1EFE39F6482085B97E
Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/T9gh88fZ3TQ8-5_9o6el_Wb8-Xc.roa
Signing time: Wed 23 Jul 2025 12:47:15 +0000
ROA not before: Wed 23 Jul 2025 12:47:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51333
IP address blocks: 31.15.96.0/21 maxlen: 21
217.174.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:52:e4:c4:ca:9c:9d:1e:fe:39:f6:48:20:85:b9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Validity
Not Before: Jul 23 12:47:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fd821f3c7d9dd343cfb9ffda3a7a5fd66fcf977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:d3:dc:5d:1c:e8:d3:80:3a:5b:ea:12:53:
2b:af:92:43:30:0f:ec:47:9f:93:21:dd:d9:fe:02:
66:0e:1b:d4:47:d3:36:a7:3c:46:58:26:61:29:01:
6f:18:e6:e4:d7:be:98:5a:f2:69:cd:24:03:8c:46:
dd:ed:e4:7e:31:e5:32:1b:6d:27:03:ba:96:2e:ab:
e8:05:0d:18:a3:e7:f8:cc:78:40:b0:76:fb:04:46:
31:d7:f3:42:10:7e:62:9e:23:f5:27:7e:69:01:b7:
48:ae:07:e8:ab:22:ce:89:4d:3a:2a:5f:6d:19:d4:
fe:cb:4b:c9:cf:7f:ea:68:c0:16:69:4a:f6:c6:da:
a9:a6:5d:0c:49:77:cd:58:41:93:c1:a0:c3:ae:78:
66:d5:ef:8d:0a:cd:09:5a:b8:9d:08:2e:71:e1:09:
62:a4:70:82:a5:78:52:b0:7e:c7:d2:61:25:ae:2b:
06:a3:93:e6:b2:a2:72:97:a1:bd:f1:80:49:d5:1b:
6f:c8:7d:2a:35:3e:b7:5f:fc:71:df:85:e7:67:8c:
2e:98:16:cd:44:25:33:c2:a8:fd:76:2e:c2:70:3a:
4d:28:d7:b3:9a:04:85:6b:51:ac:16:76:9d:59:06:
e3:54:bf:41:0f:58:a8:f5:71:09:b5:b9:da:46:05:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D8:21:F3:C7:D9:DD:34:3C:FB:9F:FD:A3:A7:A5:FD:66:FC:F9:77
X509v3 Authority Key Identifier:
keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/T9gh88fZ3TQ8-5_9o6el_Wb8-Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.96.0/21
217.174.128.0/20
Signature Algorithm: sha256WithRSAEncryption
93:ff:fd:88:78:17:f8:c2:51:9e:6a:cf:a2:42:25:40:e3:0d:
f3:9e:44:79:3a:a6:4e:4b:ca:f4:6d:dd:8c:dd:94:dd:7f:71:
60:e7:50:3c:7e:64:af:5b:a9:05:48:13:f5:d7:fb:df:d5:66:
c1:53:18:6f:45:1d:26:df:67:9c:a3:35:6a:b6:6e:67:03:52:
ef:ba:22:85:7f:b7:68:7a:1c:aa:5d:46:d2:67:62:02:cd:1a:
81:75:2d:c5:dc:eb:3d:a5:c1:46:c1:8d:e8:6a:a3:16:f9:76:
81:25:49:c0:83:9d:c2:6d:ca:73:81:22:98:8c:41:11:10:cb:
70:5a:de:56:9a:8e:0b:46:9e:f2:4b:a8:83:6b:f8:a7:8b:9e:
aa:b4:96:cc:2a:ee:4d:fe:2f:27:eb:83:cd:76:4d:65:96:9a:
6f:fb:40:28:83:99:1d:8e:28:32:3f:43:4a:b0:ef:f8:55:95:
c6:dd:49:62:9b:b9:88:a1:17:fc:79:66:77:33:b6:9c:2c:db:
87:c7:2d:30:70:80:f3:88:01:54:76:4d:04:3d:63:e0:4d:f6:
d2:6f:fa:4c:6b:b4:2c:db:c3:96:80:cd:46:b5:26:07:4e:f4:
60:a5:89:14:75:b6:72:92:77:68:96:10:ab:eb:5b:ec:fa:c6:
70:e3:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:33:59 2025 by rpki-client