Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-VStPNgS9ZWrYtVvyPUQ7KixakU.roa
File: 1-VStPNgS9ZWrYtVvyPUQ7KixakU.roa (raw, json)
Hash identifier: NCHv5d/mD/KptofQ33BDoWwrB3gLlL505/tQk6eMgBU=
Subject key identifier: F9:54:AD:3C:D8:12:F5:95:AB:62:D5:6F:C8:F5:10:EC:A8:B1:6A:45
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198085783A18F262320D0532CE1ADABFD82
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-VStPNgS9ZWrYtVvyPUQ7KixakU.roa
Signing time: Mon 14 Jul 2025 09:50:09 +0000
ROA not before: Mon 14 Jul 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 37.202.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:57:83:a1:8f:26:23:20:d0:53:2c:e1:ad:ab:fd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 14 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f954ad3cd812f595ab62d56fc8f510eca8b16a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:d4:98:00:d8:f4:a9:a3:6a:1e:e6:01:8e:
91:e5:76:28:69:71:8c:35:c5:67:a2:2c:46:6a:69:
4d:02:67:0e:c3:ff:b7:f0:4f:30:75:c8:ba:1d:88:
71:33:a3:8a:65:ee:f7:63:74:28:bf:c8:7d:ac:c0:
6b:4a:99:e7:98:93:c5:cd:93:65:6b:a1:9d:1e:21:
10:49:93:d9:58:eb:55:7f:02:de:52:49:45:e1:3e:
ae:64:e3:34:80:d1:df:02:c8:d5:e0:6d:56:d3:f0:
e1:db:12:55:bb:62:1c:d7:aa:d3:d0:97:a6:e0:a8:
d6:15:ce:ed:c7:d1:d7:06:e1:a4:a5:a9:14:db:78:
80:e8:be:9b:e3:f9:00:ce:ad:aa:27:5f:b3:d4:99:
e1:ac:08:25:b6:4e:e7:23:b2:8f:c5:76:bb:df:b2:
2d:f7:1a:f9:6c:64:e7:7b:54:5f:44:de:f8:1f:f4:
75:c5:eb:7f:d0:95:ff:e4:73:c2:51:0e:a7:11:5a:
17:5a:07:43:29:ec:54:e0:92:d7:ac:e4:8b:83:48:
60:cf:a3:9e:ae:53:2c:22:13:6f:f5:69:8e:0f:fd:
56:db:89:a7:b9:33:7a:a7:4e:04:b2:f9:c7:4f:6c:
0d:64:ae:ae:5a:5e:f1:41:9b:49:70:78:e4:41:47:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:54:AD:3C:D8:12:F5:95:AB:62:D5:6F:C8:F5:10:EC:A8:B1:6A:45
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-VStPNgS9ZWrYtVvyPUQ7KixakU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.210.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c3:c0:e5:18:1f:0c:21:88:c1:3c:58:c5:32:7b:e7:9d:84:
96:9b:88:94:c9:7d:c8:27:dc:4d:c6:de:8b:46:86:3e:3f:2c:
3c:24:c1:76:16:31:43:49:57:e3:5e:4b:1e:34:55:58:83:f2:
7b:10:c0:06:dd:75:d1:a3:45:2a:29:09:6a:d8:0f:c9:ff:3d:
07:33:47:cb:47:7c:74:15:25:d7:be:2a:9e:cc:a4:a7:ad:de:
0b:2d:e0:37:5e:77:69:d6:6a:0a:88:c7:e0:67:21:c6:9c:b5:
36:14:c9:76:7b:aa:45:f5:51:54:39:e3:ba:db:0f:b8:43:7a:
81:bb:e8:08:6c:94:27:a1:f7:5a:e8:fc:be:84:af:f4:9a:84:
8c:65:f3:b4:1b:24:71:a3:99:b5:0c:8a:f8:2a:9d:0e:7d:84:
38:0d:7b:8c:bf:be:e4:3a:80:ed:bc:23:e0:94:97:f0:fb:84:
a7:ee:44:84:c8:e6:86:11:68:ea:0c:1c:24:76:3d:45:63:bf:
4b:d6:02:eb:55:cc:cf:40:be:2c:a4:43:f4:8d:88:8e:ce:d2:
ab:23:0b:16:19:99:c0:7e:e4:b4:49:a8:d9:22:fb:8e:c4:71:
ea:d7:30:95:b1:c0:44:22:c5:b7:71:83:93:d5:e2:1f:43:22:
6c:5f:e4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:30:35 2025 by rpki-client