Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/_CzYDq1H-ll_gAkdUOBSR_Q_Cpk.roa
File: _CzYDq1H-ll_gAkdUOBSR_Q_Cpk.roa (raw, json)
Hash identifier: fttU6reXvXB5pDq9s86n/2e7Kd4PICvzVXyn5B2qQSw=
Subject key identifier: FC:2C:D8:0E:AD:47:FA:59:7F:80:09:1D:50:E0:52:47:F4:3F:0A:99
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 019827EC02BE5737285C8AB899649FC307F6
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/_CzYDq1H-ll_gAkdUOBSR_Q_Cpk.roa
Signing time: Sun 20 Jul 2025 13:00:35 +0000
ROA not before: Sun 20 Jul 2025 13:00:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202368
IP address blocks: 194.34.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:02:be:57:37:28:5c:8a:b8:99:64:9f:c3:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Jul 20 13:00:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc2cd80ead47fa597f80091d50e05247f43f0a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:03:65:fc:fc:5d:91:89:42:3b:13:f7:b2:
86:0f:29:56:9b:f4:73:36:41:64:eb:d1:36:ea:af:
8f:ef:84:2c:86:e6:76:b7:7e:6b:d0:9a:9d:dd:c1:
83:6b:4b:d4:cc:d9:5c:29:d2:78:39:46:72:a7:90:
40:17:a7:07:93:be:48:9e:47:25:fd:c0:e4:e0:81:
d0:9f:16:68:78:57:5b:46:72:30:75:d0:64:4d:37:
b3:61:f3:b9:f6:07:81:84:2a:e5:24:c2:a4:3d:b1:
81:74:98:52:83:8e:7a:bd:6c:e4:1c:f7:a0:fd:31:
8c:88:a1:b7:61:2b:32:3c:1b:4c:dd:80:27:79:b9:
9d:7b:17:78:bf:6e:81:52:bb:ce:26:f3:26:e3:ab:
ae:71:b2:a7:fa:37:24:44:de:97:9c:74:2f:bd:59:
5b:3c:23:29:c5:99:a1:b0:9f:c9:39:12:0c:5c:6a:
f1:30:21:1a:18:55:dc:52:d2:4e:af:1b:17:68:a5:
ff:02:f4:ae:cc:78:07:8f:c0:a8:9b:16:78:9d:56:
bd:65:37:1b:26:5f:1d:6e:d0:51:76:8a:6a:f0:3b:
87:7a:b1:3f:b5:49:98:69:7e:9b:e5:80:45:db:ae:
13:2d:26:7a:9b:c1:22:25:44:d8:eb:b8:77:0c:23:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2C:D8:0E:AD:47:FA:59:7F:80:09:1D:50:E0:52:47:F4:3F:0A:99
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/_CzYDq1H-ll_gAkdUOBSR_Q_Cpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cf:5e:4b:16:ba:0d:59:56:f6:90:9a:c0:58:c6:46:06:8f:
9b:6a:f4:7c:3b:5b:33:32:32:76:78:dd:29:e6:f8:45:96:f3:
cc:8c:07:79:65:33:69:df:e2:81:6c:c9:c8:fa:52:49:13:dc:
d3:92:9f:71:d5:ae:24:d3:49:c3:34:b6:d3:44:09:50:4e:22:
d9:b2:f1:f0:69:88:b1:32:00:43:c4:a3:4b:5e:85:22:45:d0:
ad:52:99:aa:31:be:2e:89:34:98:5c:e7:e2:57:39:0c:34:cb:
9d:9b:6b:35:b7:4c:af:c0:9f:6f:fe:cc:65:be:2d:8b:78:78:
71:91:44:26:c3:79:5c:59:69:35:e4:e1:2b:a4:0c:36:32:ee:
3b:f1:c0:9b:13:f6:c3:2a:87:5a:f7:76:d1:78:fa:75:b5:49:
5c:0c:5b:5e:c8:ca:44:83:91:dd:b9:e1:82:ea:ba:f7:3f:f5:
b6:d9:3c:1b:3a:b9:45:f9:a8:78:19:00:26:77:8b:0a:f8:02:
31:0b:e3:0c:9d:c3:82:41:33:c0:27:b4:6c:2f:f8:50:66:57:
4e:9f:39:e5:60:df:bc:69:56:e6:0a:71:9b:b8:17:80:32:ee:
d2:a0:9b:4b:6d:73:89:69:c8:49:aa:58:7f:e3:36:af:a6:cd:
37:7b:a6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:21:23 2025 by rpki-client