Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/XIPI990HC1lYv59Hhi_AZS8z1eo.roa
File: XIPI990HC1lYv59Hhi_AZS8z1eo.roa (raw, json)
Hash identifier: BWRI70SBdr3thNPCuBYvRcFjHCRQb0FzI8VIio++Ldg=
Subject key identifier: 5C:83:C8:F7:DD:07:0B:59:58:BF:9F:47:86:2F:C0:65:2F:33:D5:EA
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0197D0A3C26D4DD02560E836432931FAF5AF
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/XIPI990HC1lYv59Hhi_AZS8z1eo.roa
Signing time: Thu 03 Jul 2025 14:14:42 +0000
ROA not before: Thu 03 Jul 2025 14:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207008
IP address blocks: 193.42.217.0/25 maxlen: 25
193.42.217.128/26 maxlen: 26
193.42.217.192/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:a3:c2:6d:4d:d0:25:60:e8:36:43:29:31:fa:f5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jul 3 14:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c83c8f7dd070b5958bf9f47862fc0652f33d5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:e8:1a:51:30:39:aa:11:9b:7c:5e:07:08:
4e:68:9f:92:f6:37:3d:b6:17:de:76:ac:45:2f:94:
ec:fa:e1:8e:62:b3:46:fb:87:63:44:37:b0:47:07:
2d:56:9f:f1:08:cc:de:5f:5d:6b:1e:2e:81:69:aa:
ef:f5:b7:57:6b:3c:b2:ad:bd:67:c3:8f:94:23:7a:
ec:4e:40:d8:2b:97:20:6a:e7:78:46:11:e6:2a:de:
eb:87:89:af:7f:ce:9e:18:28:df:07:81:29:16:18:
51:27:74:c3:69:06:76:87:f8:ff:e4:7b:ef:15:83:
cc:d3:a0:20:1b:81:bf:b2:f5:bc:cf:20:11:1b:1f:
6f:06:83:63:3d:47:f3:a1:0d:4e:21:ee:ea:38:c8:
52:2a:cd:56:c7:68:2d:29:d6:bf:05:fe:09:95:2e:
5f:4f:fe:15:a0:6d:95:56:66:42:06:78:5a:4e:a1:
31:33:05:fd:b3:88:51:11:e9:c0:cf:f4:19:45:a0:
a3:6c:13:b1:2d:46:0b:7f:4e:16:ef:4e:0e:89:2d:
7a:fb:25:4d:31:9e:ab:c1:cf:9f:78:e7:5a:29:b4:
05:38:96:c4:72:bc:f4:bd:e9:07:82:59:91:52:35:
2a:e2:71:55:67:2d:ee:65:f8:1b:e7:76:3c:60:b9:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:83:C8:F7:DD:07:0B:59:58:BF:9F:47:86:2F:C0:65:2F:33:D5:EA
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/XIPI990HC1lYv59Hhi_AZS8z1eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.217.0/24
Signature Algorithm: sha256WithRSAEncryption
09:17:e2:1a:bc:54:22:f8:af:bc:fd:7a:1b:82:ac:aa:92:b7:
81:36:e5:1f:96:2c:86:77:61:51:70:57:8a:e7:e0:ea:8b:e4:
03:cb:26:d1:27:1a:0a:95:88:37:d6:55:f3:55:0a:9c:0e:63:
ad:32:7e:ba:2c:5e:4e:b8:2c:74:06:3c:e6:ba:23:96:6b:42:
e2:26:3c:15:4b:e6:27:06:53:e8:a8:77:25:bd:07:84:77:9c:
2f:29:3d:5f:4a:2a:5d:19:cd:bc:f1:4f:fa:04:08:ed:85:fd:
92:08:5d:9a:40:d1:0c:41:b9:19:9f:f4:47:19:6e:be:ab:60:
74:50:47:e4:ab:74:ea:3a:e3:bc:8d:a1:77:4a:8e:fe:e7:2b:
b5:67:45:9e:92:45:81:42:19:67:ec:0c:1b:90:d3:fe:36:af:
e9:60:79:cc:6d:18:8a:a9:6f:c8:17:2e:8c:14:98:20:81:c0:
65:93:a1:fe:c1:fa:33:8e:0d:06:d0:39:43:73:ba:b4:54:81:
1f:d3:3a:29:4a:5c:7e:ce:f2:f3:99:91:08:30:08:95:2d:de:
83:a2:1f:28:ed:1f:e6:ee:6a:02:15:51:58:19:4a:36:60:33:
bd:27:09:44:8b:0e:00:b4:df:25:fe:e7:b7:42:1f:4f:13:6d:
01:c9:9d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 03:01:46 2025 by rpki-client