Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/90gzbAjeTadVBAsnin_kPwy7b1o.roa
File: 90gzbAjeTadVBAsnin_kPwy7b1o.roa (raw, json)
Hash identifier: oYEAsPZgiyEfq93yfwWaUgJihLnRim7/ZPbqSnPC5ns=
Subject key identifier: F7:48:33:6C:08:DE:4D:A7:55:04:0B:27:8A:7F:E4:3F:0C:BB:6F:5A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01984260A0C7DB7563468665286A57A4311A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/90gzbAjeTadVBAsnin_kPwy7b1o.roa
Signing time: Fri 25 Jul 2025 16:18:05 +0000
ROA not before: Fri 25 Jul 2025 16:18:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 94.183.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:60:a0:c7:db:75:63:46:86:65:28:6a:57:a4:31:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 25 16:18:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f748336c08de4da755040b278a7fe43f0cbb6f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:34:d2:93:8e:a7:1d:58:31:b4:90:77:fb:
db:90:6a:b7:2b:51:39:0d:48:f3:c9:b2:73:34:fd:
39:e9:26:0b:1e:5e:1e:13:eb:71:5d:2a:32:e9:dc:
16:75:d7:fb:f4:8e:d5:2a:1c:18:de:82:5b:82:25:
c8:b8:45:6f:ae:ee:42:fd:a6:91:4a:82:7a:1b:02:
a4:31:6f:cc:85:57:b5:26:54:29:a7:2d:c1:0d:cb:
4b:11:ca:e1:85:1b:8e:1d:d6:73:20:89:d9:5d:64:
34:c9:7e:3f:4f:e1:33:df:ba:36:f0:39:db:c2:3c:
e0:54:1a:2c:52:54:19:15:90:8c:e7:12:d0:0e:31:
04:2d:89:a5:47:74:9b:a2:8e:bd:49:63:e4:d9:eb:
95:6c:7b:50:b7:a5:6d:f8:1f:18:0c:00:9c:96:4c:
88:b7:19:be:a9:e8:9d:3e:31:1b:4e:ab:8d:c1:d8:
3b:4e:0e:60:56:55:d8:b1:42:0c:c7:36:74:6a:aa:
72:76:2d:b4:d5:31:38:c0:e7:ed:16:09:26:66:90:
e5:4b:57:1e:94:95:92:c5:77:d8:66:be:ca:b6:e7:
14:1d:43:69:77:bd:33:d7:59:ff:7f:5c:f6:3f:5d:
3e:95:d4:dd:15:d1:9f:f5:95:2a:b8:ba:26:82:4e:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:48:33:6C:08:DE:4D:A7:55:04:0B:27:8A:7F:E4:3F:0C:BB:6F:5A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/90gzbAjeTadVBAsnin_kPwy7b1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.178.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c9:a1:bd:e3:9a:26:63:f6:59:85:fc:42:a8:e4:04:cf:ab:
a4:98:07:9d:6d:da:5e:77:c8:62:13:8a:5e:5e:7c:24:20:54:
c3:ed:71:fd:96:a4:11:13:1c:ff:ec:61:86:ca:1b:30:ba:9c:
3c:4f:83:06:85:66:3e:42:62:38:63:0e:72:0a:34:ce:af:ad:
91:3b:35:be:16:19:b7:8a:f3:51:e2:47:75:24:eb:07:76:2f:
f3:cb:2c:b7:8d:59:b0:e8:cd:bc:86:97:e1:87:3a:97:ec:6d:
73:04:d0:82:03:17:5b:37:3d:8e:40:54:89:54:dc:94:9e:b6:
a3:f2:66:6b:bf:99:c6:1d:a4:5a:24:3b:4a:c6:93:23:88:e2:
4a:1f:d9:d1:80:99:57:66:50:1a:ae:f3:ce:f6:6f:ad:d7:07:
8a:44:b8:cd:bb:2d:16:9f:9f:08:d6:62:cb:2f:21:95:bf:f8:
07:cf:65:a9:0c:ae:0e:c0:03:3f:cd:90:b2:26:63:cb:12:15:
5f:22:1c:f7:3e:48:64:af:b2:39:29:da:66:22:50:18:55:02:
42:1d:d6:e8:6b:58:6b:94:93:b6:64:fc:f5:88:e2:c4:79:75:
42:99:56:79:6e:c3:9b:b6:4c:80:04:67:a8:5d:58:83:07:15:
8f:db:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:49 2025 by rpki-client