Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/67T4HBu1pG9u9uC3z_qV_yWI8m8.roa
File: 67T4HBu1pG9u9uC3z_qV_yWI8m8.roa (raw, json)
Hash identifier: EFwv6mLYMzp3bgNxL88piWuR3/pmV9TsB1QPsdp3Sjg=
Subject key identifier: EB:B4:F8:1C:1B:B5:A4:6F:6E:F6:E0:B7:CF:FA:95:FF:25:88:F2:6F
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 0197F5E5357D7539DDFB2D6793E08F20C742
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/67T4HBu1pG9u9uC3z_qV_yWI8m8.roa
Signing time: Thu 10 Jul 2025 19:52:08 +0000
ROA not before: Thu 10 Jul 2025 19:52:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209783
IP address blocks: 194.31.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f5:e5:35:7d:75:39:dd:fb:2d:67:93:e0:8f:20:c7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Jul 10 19:52:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebb4f81c1bb5a46f6ef6e0b7cffa95ff2588f26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:e9:9d:32:da:ef:42:22:bf:8c:26:b4:7b:
0f:5e:e0:56:b8:e3:6f:df:f9:69:3f:4e:1b:40:3f:
1f:31:60:cb:7a:8e:0e:d2:bd:9f:68:da:b3:fa:11:
32:8a:af:78:aa:60:15:f3:5e:ea:4f:9a:d0:51:de:
fa:2e:7d:63:e4:d4:42:fd:c2:9b:05:84:93:04:91:
6e:93:ab:9d:64:91:6e:80:e2:ae:fa:e7:25:09:b2:
f4:91:9a:b3:62:1e:cc:0f:d7:e4:99:41:98:fb:ca:
c0:08:60:71:46:a7:ce:ae:0f:9e:5b:53:36:de:32:
da:d3:f1:d4:87:4c:00:78:3f:7e:be:cc:ec:8e:9f:
89:04:dc:c3:a7:b9:54:af:64:6a:81:e1:59:15:1a:
b5:04:b9:c4:d1:b0:f8:f8:15:8b:ab:f0:a0:19:59:
64:e6:f3:1d:29:0e:49:6c:92:9c:56:b0:c2:74:73:
f1:3c:0a:f5:3e:df:42:23:02:fc:ab:3b:28:96:45:
46:db:3e:80:7e:15:fd:80:ff:e6:1b:86:65:5f:0d:
a7:23:63:cb:01:5a:27:e7:5d:4b:0c:63:a6:27:f5:
c6:02:c9:b6:05:d6:a5:9b:bf:00:06:37:27:dd:94:
d2:ae:3e:7d:a2:9a:37:b4:72:b1:ff:14:33:fe:6f:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:F8:1C:1B:B5:A4:6F:6E:F6:E0:B7:CF:FA:95:FF:25:88:F2:6F
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/67T4HBu1pG9u9uC3z_qV_yWI8m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.108.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1c:b7:c0:84:ef:73:2a:25:f6:50:1c:26:df:91:ee:00:55:
a1:3e:62:1b:03:b3:4e:56:c4:22:a9:80:48:91:0a:bc:ee:69:
5d:ad:88:11:a6:26:22:0f:59:e3:5e:82:05:99:b3:4e:94:4b:
d6:94:21:0e:f4:bc:69:d4:e3:31:e8:be:ed:7a:0f:e7:07:77:
b3:79:52:a5:fd:6d:d5:29:7a:f7:f6:7c:4f:19:db:8a:46:9a:
44:53:6e:01:05:e4:73:71:29:e3:c9:c3:1a:31:52:c3:c0:2c:
d1:45:59:cc:a0:e1:62:8f:80:8a:9f:92:de:0f:52:85:6b:75:
ca:d3:cb:e0:1f:cc:7c:30:d0:3c:dd:02:8a:c1:81:30:ec:4e:
e6:0d:0e:86:4d:c0:fa:f5:e5:84:92:33:6b:f5:41:9d:43:d2:
6d:41:2a:19:a9:27:4b:e9:3c:59:9c:37:5d:9a:03:51:38:6d:
78:b6:fc:58:b9:e8:e3:15:4c:f6:82:df:7c:b5:fa:b3:a0:eb:
57:30:dd:f8:c3:da:c4:95:41:a3:8a:0f:bd:f1:b5:03:71:e6:
68:76:31:64:a3:70:c7:50:99:3f:4f:5d:d6:17:e2:27:2f:24:
df:80:ee:07:82:72:6c:8c:3d:23:1d:d5:49:71:c5:07:23:87:
0b:64:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:13:27 2025 by rpki-client