Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ItJIL9SRKLnXsIuVhtSY7RV1H1E.roa
File: ItJIL9SRKLnXsIuVhtSY7RV1H1E.roa (raw, json)
Hash identifier: UFWLxuRrJVwaxRtuBCQV3agezMs2GCXk8Y3UO6SBX4U=
Subject key identifier: 22:D2:48:2F:D4:91:28:B9:D7:B0:8B:95:86:D4:98:ED:15:75:1F:51
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0197F8F97ABF1FB8DC840A46169F8585FD2E
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ItJIL9SRKLnXsIuVhtSY7RV1H1E.roa
Signing time: Fri 11 Jul 2025 10:13:08 +0000
ROA not before: Fri 11 Jul 2025 10:13:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34291
IP address blocks: 195.54.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:f9:7a:bf:1f:b8:dc:84:0a:46:16:9f:85:85:fd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jul 11 10:13:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22d2482fd49128b9d7b08b9586d498ed15751f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:2e:74:44:02:59:2a:cd:f0:e7:0c:52:f3:
d3:6f:da:f9:2a:c9:e6:41:2e:77:b4:70:78:c8:b3:
4f:5c:49:e4:e5:f1:12:fa:a9:4a:0a:c0:5d:a2:9a:
45:44:b9:a3:33:70:15:db:bd:a6:da:4e:bd:51:62:
c9:9c:71:84:9a:18:fe:a0:66:63:81:7a:1f:9b:8a:
76:22:f0:1e:40:ad:ba:8c:2c:e2:37:29:2d:79:95:
3a:3f:07:9e:d9:da:68:ba:1b:c3:8b:12:f4:04:cd:
06:c5:91:3c:d9:a0:d3:02:89:60:01:42:80:12:f1:
ff:0f:a1:59:db:9b:e1:60:13:00:1d:88:c9:a0:6c:
b9:c7:04:5b:29:ca:97:c1:0d:c3:e1:be:34:14:d9:
93:c0:5a:2f:eb:8a:f6:ee:c7:c7:49:4e:9b:30:82:
f8:04:4f:66:90:37:b1:cd:0e:ea:3f:fa:0b:a6:8c:
b4:62:07:02:c4:dd:d5:25:65:7e:90:67:1c:5c:e6:
ac:79:bc:c3:f6:91:7a:ab:94:2c:ee:cf:46:9c:f7:
8a:ef:6c:54:8c:ac:51:59:e4:53:dd:a0:18:90:f8:
67:38:65:9c:e0:6a:2b:99:79:fc:20:2e:71:27:d2:
c5:5e:a5:9a:90:61:db:52:d2:16:68:ed:03:ed:f7:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:48:2F:D4:91:28:B9:D7:B0:8B:95:86:D4:98:ED:15:75:1F:51
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ItJIL9SRKLnXsIuVhtSY7RV1H1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.10.0/23
Signature Algorithm: sha256WithRSAEncryption
16:0c:35:9e:b4:9c:9f:d6:cb:8c:a1:22:1f:24:85:28:0e:99:
22:fe:9f:cb:f8:08:90:77:1a:ef:14:fd:27:11:43:cf:b6:5e:
2f:4a:8b:6d:e3:21:bb:24:b1:91:02:92:7f:f1:e8:72:1d:ed:
b9:de:39:3d:cb:aa:2b:b8:48:55:6e:4c:22:9c:c9:2e:55:69:
6b:54:53:7b:cf:2a:ee:86:d7:d6:9d:37:6e:f8:9d:52:02:21:
66:93:5f:9d:90:c9:6a:4e:de:c2:39:63:b7:3b:e3:66:1a:18:
e0:b7:63:4f:ee:f5:eb:00:c6:cb:24:4c:a2:f9:58:37:68:84:
3e:34:da:da:48:32:75:93:95:2b:64:29:66:04:40:28:3c:03:
40:e9:dc:bb:62:81:c5:9b:af:23:c4:fc:28:8b:68:ad:5d:81:
c6:80:eb:2a:bf:40:9a:2f:8b:e2:ce:f7:60:c4:8c:cb:8f:b3:
ee:23:28:ba:8f:a3:e0:da:2e:4a:8b:4f:1c:e6:fc:81:dc:40:
bf:0d:da:c3:69:09:ad:6a:d3:a7:f5:6a:ad:84:18:85:fb:b0:
83:fa:6b:d6:74:e6:8f:41:4e:94:ef:3a:e6:5f:46:91:a8:25:
91:ad:48:51:e2:a0:56:2d:23:c6:92:f0:1c:d4:dd:bf:b2:73:
97:1c:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:02:22 2025 by rpki-client