Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/RpRW6TZvmlJBGznF3-hnJMYz2K4.roa
File: RpRW6TZvmlJBGznF3-hnJMYz2K4.roa (raw, json)
Hash identifier: xykvfoJNE09ErVanuSOIuIu5xVg3V0n12SrhzPJXXrg=
Subject key identifier: 46:94:56:E9:36:6F:9A:52:41:1B:39:C5:DF:E8:67:24:C6:33:D8:AE
Certificate issuer: /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Certificate serial: 019845FD4EFEB34580CCA1B3F63C345C5DF6
Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/RpRW6TZvmlJBGznF3-hnJMYz2K4.roa
Signing time: Sat 26 Jul 2025 09:08:05 +0000
ROA not before: Sat 26 Jul 2025 09:08:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210707
IP address blocks: 194.33.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:fd:4e:fe:b3:45:80:cc:a1:b3:f6:3c:34:5c:5d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Validity
Not Before: Jul 26 09:08:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=469456e9366f9a52411b39c5dfe86724c633d8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:53:a3:99:b1:10:ff:46:0f:b7:6e:4a:70:
d1:8d:fc:ee:00:28:c8:82:b1:b4:34:88:90:6c:88:
48:ae:60:30:47:e3:fb:3e:af:26:34:cc:ca:2a:61:
74:8a:c9:81:96:a3:fa:fd:83:f0:64:6c:46:0f:ea:
f1:93:ba:d0:b7:6e:b8:bf:15:9b:58:9e:79:99:d6:
46:65:9c:7a:00:1e:2f:87:00:1c:c9:b2:b3:f2:50:
36:75:4a:f0:a4:8b:45:ef:be:53:14:69:ae:08:f9:
0a:7a:01:e1:f3:8e:39:60:00:29:0f:87:8d:ee:6e:
48:df:d9:87:69:db:d1:bb:ce:fd:bc:61:ef:f7:46:
04:61:e5:0e:46:87:88:63:d5:ed:ae:15:05:16:b9:
d2:36:35:23:71:e1:0d:80:d5:0c:12:0c:2d:e9:e9:
84:f0:83:69:6b:4a:45:ac:04:16:35:77:55:59:07:
94:c0:12:13:60:d1:1e:8f:69:0e:62:02:72:2e:a9:
5c:98:c6:75:16:16:e2:dd:22:00:5d:fd:48:d6:5c:
7d:67:69:6f:04:fe:db:e5:97:30:29:31:dd:40:6a:
dc:46:65:62:ef:79:d2:1b:33:91:97:bb:5c:89:d3:
42:ea:f6:28:48:68:1c:82:b5:f7:c6:1c:6e:a2:45:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:94:56:E9:36:6F:9A:52:41:1B:39:C5:DF:E8:67:24:C6:33:D8:AE
X509v3 Authority Key Identifier:
keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/RpRW6TZvmlJBGznF3-hnJMYz2K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:fa:db:3e:fb:91:94:33:c6:6a:c2:da:d1:77:d9:de:e3:b0:
a6:55:aa:aa:55:ab:2e:4f:1f:80:f0:76:02:06:6e:25:db:7f:
b6:f6:7b:07:55:9e:f5:2a:58:46:60:80:d4:22:73:11:bf:9f:
1d:60:9d:d9:67:05:d0:96:fd:4e:8f:f1:59:85:fc:e0:ec:38:
8a:c5:dc:da:8f:ff:b1:11:df:15:52:e7:9c:3b:ab:a9:d0:10:
a3:43:7c:da:fb:65:25:6c:06:86:09:8a:19:23:f3:11:5a:dc:
e2:b0:16:b6:73:06:bc:3f:a2:18:a6:3b:33:51:a5:ee:9c:cf:
1a:d3:50:5d:1c:3f:5d:11:f9:f4:39:53:da:34:fc:1d:1c:ae:
bc:9d:48:22:c2:fd:7f:87:50:3e:9c:55:30:41:38:c7:29:19:
43:9c:da:1f:06:f3:26:59:dc:dd:77:2a:43:00:ed:5e:62:5a:
32:e5:fd:a1:75:6e:70:a0:d2:f2:cd:e6:64:ef:88:e4:41:04:
72:d2:57:a6:29:c3:6b:2d:c1:f9:2c:ee:de:85:97:67:69:00:
e8:b4:e3:f9:97:7d:01:2f:5d:b1:d3:0f:70:c3:4d:e7:b8:bd:
9b:c8:d5:ff:67:a6:27:dd:88:7c:b5:d6:cd:21:d0:b2:b4:c4:
17:51:fe:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:50:42 2025 by rpki-client