Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/RArINz0YD-h2_8foRhBrlcIVL0Y.roa
File: RArINz0YD-h2_8foRhBrlcIVL0Y.roa (raw, json)
Hash identifier: q/5avSOefV4RUqs3homJnrmXlOea+3kRE2If6GjN/D8=
Subject key identifier: 44:0A:C8:37:3D:18:0F:E8:76:FF:C7:E8:46:10:6B:95:C2:15:2F:46
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 019841DAF3DC005C6317E7DBA85A66B25814
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/RArINz0YD-h2_8foRhBrlcIVL0Y.roa
Signing time: Fri 25 Jul 2025 13:52:05 +0000
ROA not before: Fri 25 Jul 2025 13:52:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206431
IP address blocks: 5.83.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:da:f3:dc:00:5c:63:17:e7:db:a8:5a:66:b2:58:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Jul 25 13:52:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=440ac8373d180fe876ffc7e846106b95c2152f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:92:c5:ac:ea:07:1a:b0:a4:a7:fa:d3:68:
b4:2f:45:9c:cc:54:7f:f2:0c:8d:d6:dc:bd:0a:b5:
55:11:fd:8f:f2:03:f7:73:c2:85:ee:4f:5c:3c:25:
e5:91:c8:fa:0b:e5:44:e2:d3:45:92:6a:e6:ad:17:
fa:81:5c:01:50:67:5a:81:86:77:15:1e:1f:e6:9e:
d8:e1:da:45:25:55:47:c1:ce:7d:2b:69:99:19:5b:
c2:8b:96:d7:36:07:26:e4:f4:18:aa:df:25:23:3a:
6a:f4:de:fa:ce:51:c4:88:21:f8:23:2b:98:95:e7:
1d:4d:89:09:31:4b:28:71:74:ca:4a:8b:60:43:eb:
e9:3b:06:1c:c9:f5:f2:cd:5b:89:d4:ce:66:4e:ad:
0d:20:e7:94:ce:5c:b7:e9:48:bf:9b:07:17:1e:6c:
67:a5:b5:65:40:65:49:d0:47:85:00:79:b8:5d:56:
36:53:44:80:51:e1:1a:4e:36:5c:09:3c:bd:33:be:
37:55:99:34:57:95:22:cf:7e:b1:a4:ee:49:18:d4:
9e:ca:ab:41:a0:b9:a2:12:e7:db:31:94:b3:84:4b:
b8:53:7d:0b:ff:58:05:01:b0:76:2f:7c:09:5d:a9:
8e:d3:64:d8:9e:a0:5c:01:73:2f:53:74:a1:4a:df:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0A:C8:37:3D:18:0F:E8:76:FF:C7:E8:46:10:6B:95:C2:15:2F:46
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/RArINz0YD-h2_8foRhBrlcIVL0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c4:82:b8:84:0c:ac:1f:35:4f:89:f5:6b:5a:44:45:81:50:
a2:ec:bb:a6:b8:17:0e:ed:b5:23:1f:4b:be:e8:84:43:ce:c4:
22:a1:9a:49:a1:c4:7c:0d:06:7f:19:93:88:eb:3f:9a:a7:c1:
19:b3:81:72:bd:b4:bf:f3:68:15:b3:03:71:c9:aa:39:c2:d3:
75:a6:3f:24:5a:c2:4a:9c:bb:2e:e5:5a:92:69:28:2a:6d:f4:
ff:fc:13:96:b5:28:df:ed:77:a8:1e:b7:66:55:c2:ce:74:33:
29:b1:cc:9f:0a:1f:14:4f:8b:9a:3c:14:27:89:0e:00:8c:82:
bc:12:2f:10:6a:b4:40:cd:93:24:20:ea:7e:42:69:77:1a:d7:
cb:39:11:0f:2c:05:ce:ef:a5:60:f8:bb:83:42:ba:b6:4d:fd:
ed:20:e2:5b:04:aa:e2:3c:c7:ef:33:4c:89:75:5a:41:15:88:
87:ea:c8:ac:6c:2f:18:a5:7f:7a:1e:c4:c0:8a:82:fd:e9:01:
65:f4:0d:04:c8:02:6d:18:26:d6:ae:53:77:aa:98:ba:04:d1:
69:ba:f8:2e:6d:2e:aa:21:fe:de:8b:24:54:61:35:73:bc:c3:
2b:59:da:36:ae:74:d1:7f:be:ce:b7:64:1b:fa:2c:7e:35:9e:
ea:3b:b7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:58 2025 by rpki-client