Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/CWFEcKSRZBYlT2vWWkV5nYcBlHI.roa
File: CWFEcKSRZBYlT2vWWkV5nYcBlHI.roa (raw, json)
Hash identifier: nc++n41sb/ngoYKjInAuk6Rbh3YfF9Q+XH3kpi1+H74=
Subject key identifier: 09:61:44:70:A4:91:64:16:25:4F:6B:D6:5A:45:79:9D:87:01:94:72
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 0197EE89F789150856C10E704C50E02DF182
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/CWFEcKSRZBYlT2vWWkV5nYcBlHI.roa
Signing time: Wed 09 Jul 2025 09:35:08 +0000
ROA not before: Wed 09 Jul 2025 09:35:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 92.119.60.0/24 maxlen: 24
92.119.61.0/24 maxlen: 24
92.119.62.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:89:f7:89:15:08:56:c1:0e:70:4c:50:e0:2d:f1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jul 9 09:35:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09614470a4916416254f6bd65a45799d87019472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:a1:bb:f5:bd:99:d3:f2:0e:9e:93:50:d4:
0a:99:aa:f7:64:d8:87:fd:fe:08:00:41:69:2e:e7:
b0:57:b3:26:95:06:d9:f6:48:c7:9c:69:4a:eb:62:
35:bc:81:d1:56:86:ca:25:a4:65:9b:2e:7a:2e:2a:
1f:d6:9a:3e:c9:06:5d:a8:51:db:5b:be:f1:40:05:
03:46:2a:83:fd:5a:ba:73:18:e1:33:bc:1a:47:17:
77:c1:52:32:ad:e9:1e:49:de:5d:6d:24:dd:3b:a3:
61:13:99:cd:b3:0a:47:8d:00:0c:59:a5:d2:e2:a5:
f1:59:33:5a:36:9f:da:66:61:b2:08:5f:0f:d7:7d:
bf:0a:b5:5d:8c:e6:b0:2b:bf:0a:bf:b6:51:5b:ce:
8d:a5:e5:7e:0e:9f:d5:55:32:d0:75:69:a8:3c:9d:
64:6f:bb:e6:1f:ae:f0:2c:52:db:be:63:01:d8:6c:
d4:c4:d8:dc:42:cb:e1:bd:e3:37:c5:a9:00:9f:eb:
ce:f9:c1:9a:e6:a4:7e:a5:d5:10:93:69:e4:38:ff:
68:f7:56:1b:ef:96:05:b5:74:10:39:20:2d:0f:38:
1b:20:35:9f:c3:78:5b:e8:da:a6:eb:e9:43:b9:4c:
52:b8:b4:54:87:fb:50:f4:71:24:32:b2:a5:3e:23:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:61:44:70:A4:91:64:16:25:4F:6B:D6:5A:45:79:9D:87:01:94:72
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/CWFEcKSRZBYlT2vWWkV5nYcBlHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.60.0/22
Signature Algorithm: sha256WithRSAEncryption
83:8c:f6:64:fa:e8:fa:42:e7:8c:36:f0:f0:0b:9c:ea:ef:7d:
b1:28:86:51:38:b4:fe:bf:02:f8:74:20:35:9f:91:2f:f5:bb:
99:97:2e:31:24:d6:20:1b:6b:78:f0:10:f4:28:39:ad:c7:62:
9c:50:7a:73:a9:5b:8f:72:04:70:7c:52:63:ab:d4:c1:ce:c5:
24:15:9f:ab:be:9d:6a:ce:35:a7:b6:3e:f4:1a:d1:5c:9f:04:
1d:08:cc:c9:43:4c:f6:a4:8c:48:1c:ad:f7:04:fc:8f:fc:a6:
f7:16:1b:70:40:d8:56:fa:ae:15:b2:fe:11:3e:13:8d:9d:e0:
2d:98:37:4e:54:41:58:e2:68:24:f8:ce:2f:62:60:c1:7e:9d:
8d:f9:1f:26:46:9c:c9:7e:c7:0f:b0:6e:4b:76:7d:d0:f7:a7:
11:45:af:60:12:13:a3:79:36:57:ad:06:c8:64:c2:4b:35:bc:
6f:73:37:15:a8:e9:4c:1d:e1:a7:7d:22:9d:af:84:7e:43:a7:
e2:18:72:34:b8:80:37:10:33:28:7d:07:bd:f3:3d:0c:57:f9:
54:f6:c0:c0:6d:c7:57:89:d3:01:52:ce:d6:13:e2:9a:e2:85:
37:b3:f6:cc:3d:3e:62:e0:98:33:a6:56:11:bd:4c:4c:de:0e:
58:af:de:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:39:14 2025 by rpki-client