Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/jQ5qWaYZOuGFbmK6xWnSAiBZvC4.roa
File: jQ5qWaYZOuGFbmK6xWnSAiBZvC4.roa (raw, json)
Hash identifier: hOBNFEt7+n9S44ThfKSG8bjP2CvsYahZ60/Dq1Sii/s=
Subject key identifier: 8D:0E:6A:59:A6:19:3A:E1:85:6E:62:BA:C5:69:D2:02:20:59:BC:2E
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01992DE28651807DE2BCDFCDC0724EEE04B6
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/jQ5qWaYZOuGFbmK6xWnSAiBZvC4.roa
Signing time: Tue 09 Sep 2025 09:50:44 +0000
ROA not before: Tue 09 Sep 2025 09:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 193.135.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:e2:86:51:80:7d:e2:bc:df:cd:c0:72:4e:ee:04:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Sep 9 09:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d0e6a59a6193ae1856e62bac569d2022059bc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:43:0f:c4:78:48:cf:b9:f1:1b:1b:53:7a:2b:
96:cc:2b:5f:10:be:50:b6:6b:ef:2f:57:be:7a:68:
fd:4a:d2:be:6a:6f:2c:06:92:32:b6:68:45:a5:15:
af:4d:90:34:34:7f:43:67:4d:a1:70:f1:ab:b9:ab:
29:48:84:13:dc:5b:66:af:38:ca:9c:25:48:2a:de:
b2:95:32:b9:ed:28:2b:0b:1b:67:85:18:e2:e5:6f:
53:fc:c5:77:14:c9:49:03:83:f8:bc:08:52:dc:0b:
49:c8:ad:5d:46:76:31:49:4e:1d:a7:22:f6:b9:03:
fd:e3:ed:0e:66:4a:0a:89:cf:b9:72:f3:36:17:65:
1c:d5:cc:05:fb:c6:4f:5e:9a:4e:ea:5e:28:b2:b7:
04:c0:58:28:8e:40:c4:80:de:6b:4d:97:7d:66:b4:
1b:1b:c6:e0:26:f4:fb:51:32:f8:38:df:e0:b6:59:
61:03:d5:f1:84:33:44:8b:41:32:66:fe:f5:ec:d2:
83:db:db:aa:97:de:30:31:8e:ba:79:ec:12:81:90:
70:e3:83:19:43:2e:16:bb:4c:2c:46:cc:ef:43:ad:
07:61:43:25:cb:b9:9f:ab:d8:b4:0f:88:79:16:4d:
5c:52:2e:c4:f6:cb:17:b6:b4:3e:ae:f0:1c:93:bb:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0E:6A:59:A6:19:3A:E1:85:6E:62:BA:C5:69:D2:02:20:59:BC:2E
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/jQ5qWaYZOuGFbmK6xWnSAiBZvC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.151.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6b:56:e0:0f:8a:16:c7:de:ed:a5:68:0f:a8:3f:07:1e:e0:
61:45:e0:96:08:5b:4a:3a:92:42:b6:1a:2a:bb:67:5e:99:a3:
20:73:56:c0:a9:e3:12:32:f2:17:28:f4:27:46:3c:d8:fe:3d:
3d:f4:21:5a:a0:68:a6:7d:1d:72:4c:b3:25:e7:98:ca:52:5d:
57:61:5c:9f:ff:83:56:64:ea:71:b3:99:b9:0b:6e:9b:b4:51:
15:26:0b:7c:59:fa:ee:df:cf:5e:57:9a:f7:1b:b3:8d:31:85:
96:b0:c9:c6:de:9a:fb:8b:90:a8:82:11:b5:af:ff:c2:33:02:
ba:4d:4a:48:d3:77:d2:59:cf:b0:22:73:e4:84:5b:95:29:0a:
2b:56:65:64:78:a2:d5:fc:55:06:79:09:09:8f:ec:62:1f:19:
5d:c6:c9:a9:6e:ba:96:7e:88:c5:47:4c:4e:41:dd:3e:06:f1:
0c:56:fc:1b:6b:3d:dd:b4:ea:70:9e:8e:d8:ce:e1:5e:dc:da:
e5:83:26:1a:a3:3b:0c:d8:d1:66:87:0a:23:bb:69:9f:e0:d0:
82:7c:6f:dd:e4:7e:3b:1a:d0:35:8c:f0:60:23:c5:10:38:4b:
f8:cb:a3:5c:10:4a:ec:e8:15:c5:c5:19:f6:ee:17:60:6e:fc:
06:14:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 20:27:58 2025 by rpki-client