Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dtuI-Dk8rjmgbeti-u8zlBS0kg4.roa
File: dtuI-Dk8rjmgbeti-u8zlBS0kg4.roa (raw, json)
Hash identifier: JCzTwFzuBlkS0V1Zf4BxRjtgyQVZLv+4zxrZv5Q/TvA=
Subject key identifier: 76:DB:88:F8:39:3C:AE:39:A0:6D:EB:62:FA:EF:33:94:14:B4:92:0E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01984009E088B773EE156F140520E79211F0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dtuI-Dk8rjmgbeti-u8zlBS0kg4.roa
Signing time: Fri 25 Jul 2025 05:24:05 +0000
ROA not before: Fri 25 Jul 2025 05:24:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213995
IP address blocks: 94.183.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:09:e0:88:b7:73:ee:15:6f:14:05:20:e7:92:11:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 25 05:24:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76db88f8393cae39a06deb62faef339414b4920e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:8f:ec:53:e4:40:b0:fe:4e:90:3c:fd:7b:
4a:19:43:e4:68:fd:23:57:99:4b:59:42:26:f7:34:
ce:22:8b:91:93:9a:3c:db:34:af:fa:65:07:24:4d:
1c:6e:33:82:4c:2c:df:fc:d2:d1:2c:04:af:37:14:
ad:5c:07:61:08:05:40:27:7e:7d:5f:cf:1c:81:02:
81:ec:6d:58:4d:11:50:8c:81:6c:2e:ea:58:03:c4:
6e:c6:a0:03:d4:86:c0:9d:dd:ef:3f:9e:5c:df:69:
11:c7:b8:b1:eb:48:62:e8:dc:2d:70:42:21:9b:cf:
f2:fd:26:b4:57:89:a6:f6:36:bc:4b:1a:78:77:c3:
b5:6d:8f:2a:92:7e:3d:86:56:1c:a0:83:c5:cd:19:
60:77:05:8d:98:f7:16:f5:e3:ae:04:5f:37:da:33:
0e:40:a0:0d:ad:20:36:f5:d6:0d:07:16:53:d1:df:
ff:96:4e:52:6f:ca:40:f6:fd:0f:67:62:6e:b9:30:
f8:76:c8:20:cf:12:f6:5a:91:19:90:12:cb:e2:b2:
88:a4:90:f2:ac:46:c1:8b:c6:0c:1d:dc:4e:5a:e4:
3e:5d:74:95:f2:e0:e5:c8:82:13:f7:ce:fd:43:01:
44:39:11:02:d6:a1:11:28:71:26:d0:c2:1d:48:91:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DB:88:F8:39:3C:AE:39:A0:6D:EB:62:FA:EF:33:94:14:B4:92:0E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dtuI-Dk8rjmgbeti-u8zlBS0kg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:cd:bd:d6:f8:8e:7f:3b:b0:37:02:e4:71:65:16:b2:ea:3e:
82:39:cc:7f:a3:d3:8a:b8:a6:bf:a7:20:20:7e:87:97:3c:a8:
ee:51:3f:db:52:7f:da:51:23:73:7f:37:f0:56:c8:61:bd:8e:
1e:54:7c:82:5c:a4:23:e5:87:c1:f6:e4:00:ed:98:01:2a:2e:
d9:f3:5f:91:15:25:87:5e:9c:df:2c:26:97:f8:b0:87:d9:03:
8d:83:de:89:de:65:dc:4c:10:d3:86:d6:11:bc:bc:cf:84:9a:
fe:3b:18:3a:60:4d:3b:35:f1:53:c2:8d:f9:d4:80:1f:a9:5f:
c0:93:51:4b:18:1a:6a:75:d1:e6:b7:04:42:f5:29:d3:d0:3c:
71:26:3f:30:95:ae:23:3b:a7:a5:df:a4:9d:da:27:c6:3f:fe:
83:59:d1:ae:4b:c1:6e:1d:ea:81:cc:8e:73:67:a8:80:cb:b1:
1a:89:df:f0:5f:6b:1a:3f:30:5b:ca:1b:18:8c:6e:a7:26:7d:
8c:d9:cf:71:9e:0d:53:09:86:97:85:26:a1:93:97:e0:1a:91:
80:81:74:36:df:c1:ea:44:d2:29:15:88:a9:b7:8f:e8:eb:fd:
56:39:0e:fd:01:75:1d:07:8a:89:e9:b3:55:fe:ca:f5:ed:5c:
df:fb:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:48 2025 by rpki-client