Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/oYGGiYdbxpGeCKboMYRmQpGsbJg.roa
File: oYGGiYdbxpGeCKboMYRmQpGsbJg.roa (raw, json)
Hash identifier: 4Tb5SbH+PWEL8ZWRvMbss+TVaZCN9gSpmDVf6SCXqwg=
Subject key identifier: A1:81:86:89:87:5B:C6:91:9E:08:A6:E8:31:84:66:42:91:AC:6C:98
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 0197FEAEAAFBA4884376ABCE1D75E9A78783
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/oYGGiYdbxpGeCKboMYRmQpGsbJg.roa
Signing time: Sat 12 Jul 2025 12:49:09 +0000
ROA not before: Sat 12 Jul 2025 12:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
194.60.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:ae:aa:fb:a4:88:43:76:ab:ce:1d:75:e9:a7:87:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 12 12:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1818689875bc6919e08a6e83184664291ac6c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:6d:d4:95:76:ee:23:ba:74:76:f7:43:ae:
b6:ee:5d:23:f8:a4:06:38:89:bf:68:56:2e:2e:6d:
08:f8:1f:39:85:e0:43:24:d8:cb:e2:ca:da:4a:bf:
45:74:a3:a3:69:e6:fc:f8:7d:91:3f:b7:8a:39:6c:
07:75:ba:76:78:b2:59:ed:59:1b:33:1c:18:1f:e2:
3b:98:ec:48:6f:ed:ee:9f:bb:32:6d:d0:d6:a8:f5:
fd:9e:29:f3:5c:c6:ff:dc:45:14:1e:53:c2:a3:2a:
e8:d5:7d:13:3e:21:4d:c3:cc:97:ca:87:79:1b:18:
4d:34:36:f7:c9:09:d3:7c:a5:1b:27:21:cb:92:1e:
f7:bf:0c:9b:98:d8:06:e0:23:8f:fc:f9:23:71:ae:
98:ce:6b:fe:74:a3:a3:63:be:b7:f8:e3:07:b3:e2:
f9:e0:6e:64:7f:56:45:c1:a9:f7:55:d1:53:11:46:
7c:ad:54:24:39:07:29:af:b7:1e:78:08:fe:c2:29:
97:9b:44:7c:3b:bd:fa:02:1d:3b:97:20:14:0d:a2:
85:bf:d9:e2:f6:94:35:09:02:7e:44:96:38:81:f0:
3a:db:4b:14:b4:ef:31:ef:22:6c:f1:eb:de:5a:98:
de:a4:c6:b9:a1:ea:6b:9a:69:3f:60:51:d6:11:bf:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:81:86:89:87:5B:C6:91:9E:08:A6:E8:31:84:66:42:91:AC:6C:98
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/oYGGiYdbxpGeCKboMYRmQpGsbJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
194.60.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7d:ad:0b:2a:3c:33:fb:78:4f:f8:85:22:02:3e:44:e8:04:
1d:80:51:bd:d8:b8:0f:94:ab:6b:97:46:6f:85:d1:2b:e3:12:
06:b9:bd:f4:e6:f9:71:79:f3:9d:26:b7:45:92:72:9e:b6:58:
87:98:24:e2:b4:cc:44:d8:67:1b:98:dd:df:28:74:9c:93:ed:
2f:00:f2:d7:22:51:9c:a4:35:66:e9:b8:4d:27:2a:04:37:63:
e7:0f:91:07:59:0a:84:a3:23:2f:4a:0d:7f:4c:45:80:a8:94:
c3:e3:df:36:bb:83:92:de:ee:cd:9e:fc:ae:96:6d:9a:34:f0:
00:b4:cd:00:d7:b7:4a:2a:8b:59:af:04:7f:1a:4c:68:a9:73:
4d:89:6f:26:a8:ef:95:98:c0:f6:5e:33:5c:9b:a5:0c:7d:3a:
91:7f:8d:98:c4:5a:51:cf:8b:6d:95:cc:87:62:b2:5a:7f:6d:
b4:33:34:2a:88:7a:58:68:93:c9:f7:7c:b5:ac:5d:c6:c3:21:
54:d4:fa:e1:1c:c6:5e:b0:bc:c7:9b:0e:1d:d6:e5:06:6a:c0:
26:e9:84:ac:13:63:37:bc:f7:e3:8b:b7:2b:b9:2a:ec:ec:82:
05:89:2d:d1:fc:ec:46:1d:17:ad:58:6c:67:d2:c5:6b:56:ee:
e2:57:5f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:13:56 2025 by rpki-client