Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/5RDrxvpk6f6_CeHaE5maQdmSM44.roa
File: 5RDrxvpk6f6_CeHaE5maQdmSM44.roa (raw, json)
Hash identifier: ki187Iv+O6q2r1ZkIX9WA+gL/Pc275QX3Xeem+p1Izk=
Subject key identifier: E5:10:EB:C6:FA:64:E9:FE:BF:09:E1:DA:13:99:9A:41:D9:92:33:8E
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 0198179966CA4407A0629A761F37DFE23A0A
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/5RDrxvpk6f6_CeHaE5maQdmSM44.roa
Signing time: Thu 17 Jul 2025 08:56:25 +0000
ROA not before: Thu 17 Jul 2025 08:56:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48444
IP address blocks: 193.219.118.0/24 maxlen: 24
2001:67c:788::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:99:66:ca:44:07:a0:62:9a:76:1f:37:df:e2:3a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Jul 17 08:56:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e510ebc6fa64e9febf09e1da13999a41d992338e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9f:46:00:ff:60:f9:2f:b7:71:56:7a:9e:0b:
34:c6:46:84:c0:8f:88:cc:a6:32:a4:d4:6f:3d:9f:
e6:c0:06:56:e4:ee:68:bc:41:30:12:3b:08:be:82:
75:1f:58:2b:b4:22:c8:f6:44:0f:18:6d:a5:83:22:
e0:ea:ae:f3:b0:1f:da:70:40:ce:6a:c4:fc:3d:df:
36:85:66:49:72:2e:f3:15:9c:b1:ab:5c:e2:b8:de:
c9:ca:3f:f6:98:64:88:fc:68:d4:a2:61:fc:23:d9:
a5:52:56:22:10:bd:46:28:0c:fa:0d:30:67:60:57:
56:34:21:cb:b1:8d:ba:d3:7b:6f:84:e7:d6:51:47:
34:e8:cc:53:e6:87:1c:72:84:1d:30:07:3b:c6:4c:
c0:37:59:23:aa:9f:73:b9:7b:b3:2a:e3:20:2b:ea:
8d:d8:e5:48:42:f6:a9:8a:b5:a4:54:c1:33:91:bd:
64:eb:63:74:4b:f3:f3:94:a1:b8:e1:a8:f2:fe:79:
1e:4d:87:cd:f2:da:25:a3:21:f9:7b:51:99:34:2d:
e8:6a:a2:d7:9c:a5:13:8b:86:a0:6a:85:77:fc:e2:
b3:3f:90:64:92:68:5e:a5:ef:6a:cf:c9:f6:d4:63:
97:c5:cc:cf:15:78:6e:7b:fa:5c:1d:f5:22:13:70:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:10:EB:C6:FA:64:E9:FE:BF:09:E1:DA:13:99:9A:41:D9:92:33:8E
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/5RDrxvpk6f6_CeHaE5maQdmSM44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.118.0/24
IPv6:
2001:67c:788::/48
Signature Algorithm: sha256WithRSAEncryption
2f:42:3d:21:07:f4:6e:81:68:0a:a8:14:1d:ca:65:37:d2:09:
18:ae:08:9d:49:f2:b3:31:a8:ca:75:b9:ec:3f:44:a0:b2:3d:
c5:83:b8:e0:82:d2:f2:e3:95:13:a4:60:fe:4d:3c:28:5a:ff:
bb:95:0d:be:3a:7d:1e:5b:05:46:cb:d2:53:11:0b:99:65:d1:
a2:7e:cb:5d:7c:77:3d:0e:82:b2:4a:92:e3:b3:0d:68:df:33:
5f:d2:2d:bb:47:90:c4:54:4f:c1:03:89:aa:8e:63:bd:cc:a5:
d4:0b:3d:9d:f4:d9:51:e5:e8:7c:3c:b7:01:7a:31:b6:85:04:
e7:48:fc:96:d8:3e:4b:ed:3f:94:8b:d9:29:27:fa:f5:f0:06:
1f:69:e2:b2:ff:99:d8:51:bf:74:ac:ee:f1:80:3e:39:f4:71:
28:39:7e:21:1b:7e:b5:00:41:2e:aa:9d:0c:f5:0c:73:a3:57:
56:16:15:d7:02:e1:67:23:af:da:2e:ae:0e:cb:92:03:90:8e:
b8:08:fa:48:f7:68:c6:79:79:39:0b:03:02:6f:48:f1:b7:bf:
17:9b:7d:99:d7:e2:da:96:5f:50:9a:23:59:97:33:1e:53:71:
75:4d:09:67:f0:bc:d7:4e:d3:20:56:39:f1:9d:f4:21:87:ef:
9a:1d:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:07:25 2025 by rpki-client