Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XdYWO2iFBu-TZw4EXX0LHsI2SlU.roa
File: XdYWO2iFBu-TZw4EXX0LHsI2SlU.roa (raw, json)
Hash identifier: fhxSp4Gv/cstjEHfyaGkOYBT+MxEjw94EU+KwDMUxuI=
Subject key identifier: 5D:D6:16:3B:68:85:06:EF:93:67:0E:04:5D:7D:0B:1E:C2:36:4A:55
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01980E750E256EF8E0A2A51DE387E8632B25
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XdYWO2iFBu-TZw4EXX0LHsI2SlU.roa
Signing time: Tue 15 Jul 2025 14:20:09 +0000
ROA not before: Tue 15 Jul 2025 14:20:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 94.183.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:75:0e:25:6e:f8:e0:a2:a5:1d:e3:87:e8:63:2b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 15 14:20:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dd6163b688506ef93670e045d7d0b1ec2364a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:44:1d:40:30:f0:e4:2c:4c:8b:59:a1:7f:
fa:02:5f:99:1e:25:d3:85:d7:4c:d4:d3:33:54:39:
a3:ad:17:4b:b4:ad:29:48:24:1d:b6:af:f2:68:cb:
e3:89:2c:4c:16:69:9f:02:8d:fb:05:8b:8d:66:de:
cf:23:3b:50:9a:9e:03:a9:9c:9c:45:2e:b9:df:9c:
4d:08:40:fa:d1:c7:4b:47:00:f0:04:9b:34:db:01:
73:a1:b0:d2:0c:a2:e6:fa:ae:ff:f3:48:5d:9a:13:
86:a2:5d:c6:79:6f:94:a8:42:32:fa:78:fd:ea:95:
b7:bf:0d:f9:d9:a3:87:b9:c8:a8:76:47:80:54:1e:
09:1f:19:d1:c6:b3:cf:a6:57:6e:37:5c:c8:da:35:
ec:d9:a7:44:9c:3f:d1:88:8e:66:0d:b2:58:f6:d3:
a8:25:7e:21:29:8b:ce:c8:89:33:fb:9d:8e:b7:b7:
8b:ca:97:35:df:6d:c7:ce:91:0b:c6:5f:b8:62:39:
3e:29:72:83:7c:99:cd:ab:cc:64:a8:0c:0e:4b:88:
7f:df:7d:16:da:65:74:3a:d2:5c:9c:26:88:55:27:
f2:56:3c:11:3d:fc:d0:0d:08:fe:72:eb:ea:5d:62:
b0:99:a3:43:82:f4:e4:1d:0e:35:bd:20:48:54:e0:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D6:16:3B:68:85:06:EF:93:67:0E:04:5D:7D:0B:1E:C2:36:4A:55
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XdYWO2iFBu-TZw4EXX0LHsI2SlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:9c:af:d5:8b:85:10:12:a1:77:e6:ef:d9:53:ea:67:ca:4c:
bb:72:e6:57:ac:55:28:61:fd:6a:f4:49:09:c5:c6:1b:30:3e:
53:3a:c7:06:81:b4:9d:41:cf:ea:ac:a9:aa:49:5c:51:44:8f:
c5:e0:f9:0e:f6:f8:c5:f0:e9:be:8a:ef:75:eb:08:f9:ab:d0:
43:75:1e:3c:fc:cd:ab:08:63:d7:6a:c2:46:8a:05:ef:11:d9:
c5:32:cb:df:1c:9a:d0:68:89:81:e9:fb:21:d1:90:ac:b1:63:
0e:04:e0:0f:b4:01:67:26:27:26:49:e5:80:f0:6d:76:a6:42:
86:ed:16:78:c4:c5:62:71:da:24:83:2d:48:33:ba:59:b3:b4:
51:78:7a:64:89:06:7a:e1:43:6a:bf:90:ee:1d:47:ea:b8:d8:
f5:5c:7d:80:e4:dd:cf:1b:9b:b0:15:f0:49:ed:0d:a1:2f:d3:
48:93:a5:f3:cc:78:15:a8:1f:70:2f:87:33:d1:35:79:62:e6:
54:b5:c2:ec:6d:28:56:ec:53:dd:ef:7c:80:bb:49:00:32:60:
d0:76:d5:1a:09:84:20:3a:18:db:9a:15:ca:f5:71:57:e0:10:
73:fd:45:af:56:49:ff:9b:d1:c2:0d:67:1d:bd:b7:7b:e0:92:
67:29:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:07:59 2025 by rpki-client