Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w83KbTwIao5JvGJgNBM5M9idrKk.roa
File: w83KbTwIao5JvGJgNBM5M9idrKk.roa (raw, json)
Hash identifier: xq+xOrVhPBduJzqdeRRXx8TTJV95IVNQGoKA4Xnezaw=
Subject key identifier: C3:CD:CA:6D:3C:08:6A:8E:49:BC:62:60:34:13:39:33:D8:9D:AC:A9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019831E8EF61EB1204045E6A4AA67362A970
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w83KbTwIao5JvGJgNBM5M9idrKk.roa
Signing time: Tue 22 Jul 2025 11:33:25 +0000
ROA not before: Tue 22 Jul 2025 11:33:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210614
IP address blocks: 193.183.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:e8:ef:61:eb:12:04:04:5e:6a:4a:a6:73:62:a9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 22 11:33:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3cdca6d3c086a8e49bc626034133933d89daca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:6d:f0:54:e9:07:f8:ad:b7:1d:7c:a6:3c:
68:4a:cb:8a:0e:91:68:c4:3d:25:f7:d2:12:6a:fb:
92:17:70:e1:75:97:84:a1:11:55:43:26:41:bd:67:
ef:3d:62:58:6b:0c:d5:f0:56:89:24:3c:97:ae:b8:
1f:b4:0f:a6:f8:24:77:43:92:3d:1e:89:55:d5:e6:
96:66:72:4e:74:df:26:e6:21:29:f8:e8:ed:d4:73:
1a:ef:a9:b6:84:b4:c9:a0:ba:fd:ea:1a:6e:72:d2:
02:3a:76:cf:12:43:b1:93:4d:00:10:b0:bc:ba:23:
d4:2e:d8:75:99:35:b6:a6:50:2d:18:d0:8e:e7:56:
de:4a:e5:40:08:48:12:8b:f3:65:68:8b:55:aa:3a:
0c:b3:be:24:57:1d:50:57:e8:7b:68:40:87:06:cc:
79:ba:3e:72:76:c1:68:56:93:e8:38:bf:c2:09:e5:
62:0c:96:9d:b1:a2:e3:f1:5a:01:91:34:25:5f:94:
54:8e:1f:5e:71:cc:f4:c5:4c:62:33:43:88:8e:3f:
b3:da:1d:16:b4:56:b6:d7:a0:42:ae:67:cd:37:35:
68:4a:20:e4:0f:d5:e1:96:64:96:eb:4e:27:77:e7:
cf:02:c1:12:f0:45:ca:6d:16:b0:65:3e:32:c6:5c:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CD:CA:6D:3C:08:6A:8E:49:BC:62:60:34:13:39:33:D8:9D:AC:A9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w83KbTwIao5JvGJgNBM5M9idrKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.79.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:18:41:b8:d1:2d:6f:f6:d3:c4:a4:a9:e0:cb:5e:35:20:32:
97:95:88:70:59:da:78:b8:30:18:a6:ba:0f:a1:10:99:80:9a:
42:22:62:e2:84:95:51:fb:23:37:b4:a6:78:e0:5d:09:9b:f7:
33:62:5b:a2:12:41:cf:23:89:05:2b:a5:17:bd:e0:9e:c8:fd:
21:62:cb:5b:54:66:94:52:4a:77:10:20:27:10:11:40:e2:20:
8e:cb:a5:8a:7e:98:24:4e:64:46:79:10:9d:27:6a:56:6b:92:
c8:28:50:55:23:50:98:35:7e:b0:a5:38:6e:5d:54:1e:b5:91:
4a:b2:ae:a9:37:21:13:6b:e3:37:4a:c7:81:9d:67:76:f1:13:
3c:34:ed:03:b7:55:3e:6f:36:5e:94:c7:a8:c7:0a:35:31:c3:
a8:36:3d:c3:99:53:2d:28:cc:27:cf:c6:de:9d:60:9c:3b:b4:
21:3f:15:ff:68:b6:d9:bd:75:ca:58:0a:37:31:0f:a2:0d:93:
43:45:a6:2e:15:82:c2:d0:3a:1d:87:0d:b1:5c:b9:48:9b:73:
0a:14:ac:23:ee:49:ff:db:81:ab:07:b2:bc:34:81:ad:5b:01:
31:d5:b9:b7:57:ee:99:17:c1:a8:1d:48:2d:ee:fc:ec:1f:21:
7d:6d:86:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:48:47 2025 by rpki-client