Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Ts5s6R-h-7a7r-DkQTNs3dqIoqU.roa
File: Ts5s6R-h-7a7r-DkQTNs3dqIoqU.roa (raw, json)
Hash identifier: 6FBW+7wKlFhVsfYtAAGEeciTYk/P+FI5nTEi81UvzA0=
Subject key identifier: 4E:CE:6C:E9:1F:A1:FB:B6:BB:AF:E0:E4:41:33:6C:DD:DA:88:A2:A5
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0197C94885A9430D76003E1383D66781473A
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Ts5s6R-h-7a7r-DkQTNs3dqIoqU.roa
Signing time: Wed 02 Jul 2025 03:57:42 +0000
ROA not before: Wed 02 Jul 2025 03:57:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 185.182.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:48:85:a9:43:0d:76:00:3e:13:83:d6:67:81:47:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jul 2 03:57:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ece6ce91fa1fbb6bbafe0e441336cddda88a2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:b5:2b:e2:c6:1c:c2:a0:70:28:d2:82:63:
57:0e:43:ac:90:4f:ab:e8:52:de:cc:96:20:93:cb:
60:b5:e9:72:c1:c4:ae:d5:50:72:23:8b:94:c6:af:
cc:ea:51:2c:5e:b5:6e:2c:24:d3:8e:88:0e:31:61:
06:dd:dc:94:29:ae:d0:c9:7b:67:58:ba:ba:c9:33:
42:07:57:bc:40:b1:22:9e:1c:7b:d2:33:ca:01:67:
7e:b3:4e:aa:9c:10:8c:1c:23:92:4f:a2:48:72:1c:
a9:f0:fc:bf:c8:01:b5:8f:44:a0:c7:50:27:a0:a1:
f8:10:f5:b2:5e:a1:5f:38:2f:60:23:05:a8:9c:0f:
6c:94:b6:00:bd:ab:af:35:55:14:47:7e:62:60:92:
77:c9:53:09:da:03:bf:3a:05:6c:e7:41:18:5d:48:
b3:0d:d2:45:f9:8b:56:32:38:77:30:19:e7:95:5b:
d3:1a:53:1a:2c:2b:1f:29:57:9d:bc:6b:6f:cb:46:
14:e3:5a:81:22:cc:fb:41:f8:b4:8f:78:3e:fa:aa:
92:00:2c:c0:ef:54:bb:d5:26:da:e5:bc:ae:8b:32:
cb:cf:34:48:96:b3:51:b8:9a:29:f1:df:4c:ec:4b:
2f:d2:1d:ff:45:18:91:63:54:20:1c:40:da:1c:f4:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CE:6C:E9:1F:A1:FB:B6:BB:AF:E0:E4:41:33:6C:DD:DA:88:A2:A5
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Ts5s6R-h-7a7r-DkQTNs3dqIoqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a5:a5:f3:39:1e:4d:cd:6e:cd:bb:31:8b:b1:ff:0c:52:bf:
4b:05:47:77:92:34:0a:17:1b:bc:54:83:0e:3a:50:43:51:b4:
b2:1c:53:54:f5:b3:49:18:c1:e9:ad:6f:32:a6:b9:ff:54:80:
2d:58:2f:5b:e0:cf:d6:aa:2e:c7:30:fb:02:ee:4a:19:b1:11:
56:a6:55:ee:cb:54:0b:8c:f9:4d:a5:b8:f3:ed:18:b3:50:f5:
ee:31:0e:46:52:c7:71:00:2a:2e:93:92:90:81:5a:77:ba:05:
ef:f4:b4:c5:2a:d3:9e:c6:b6:a4:05:79:c4:ee:e0:ec:48:3d:
8b:99:ea:41:d2:a4:f7:58:27:5a:fb:f3:23:13:91:a4:3f:3d:
00:08:8d:67:ef:a4:1c:45:99:4b:43:11:d3:5d:88:5b:cf:c8:
bf:9a:a8:07:8d:af:59:ae:5a:5d:59:e7:27:b0:df:0e:c3:62:
9d:c5:a2:11:94:12:e6:73:54:8b:c9:86:a4:e2:1d:02:54:69:
77:a6:9e:86:d0:46:9d:b1:67:cb:e0:1f:28:68:71:12:ab:75:
2e:55:91:8e:64:41:b8:2f:cc:39:89:1c:53:a8:03:20:0d:8f:
57:8e:d7:78:db:c1:ce:d9:6b:72:4d:19:64:9c:76:5e:19:49:
78:55:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:05:18 2025 by rpki-client