Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/IRIHNrcEmYA9SiekVnQCGeb5qt8.roa
File: IRIHNrcEmYA9SiekVnQCGeb5qt8.roa (raw, json)
Hash identifier: tBfDnKuitVX0twdrJtQnmeN3GmNpiKza4WKEqcGuDCg=
Subject key identifier: 21:12:07:36:B7:04:99:80:3D:4A:27:A4:56:74:02:19:E6:F9:AA:DF
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 0198F60B5BC5947E413158ABC2BFE161E2AE
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/IRIHNrcEmYA9SiekVnQCGeb5qt8.roa
Signing time: Fri 29 Aug 2025 13:36:36 +0000
ROA not before: Fri 29 Aug 2025 13:36:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205896
IP address blocks: 62.164.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:0b:5b:c5:94:7e:41:31:58:ab:c2:bf:e1:61:e2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Aug 29 13:36:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21120736b70499803d4a27a456740219e6f9aadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:ef:bc:fd:7a:2c:9d:9b:c6:73:85:12:c3:
1f:19:25:00:ce:11:ab:d7:53:9d:82:28:6b:92:4e:
16:a1:a2:76:14:06:13:ee:3b:8d:fb:9d:92:5f:eb:
f5:a5:eb:3b:d6:f4:d3:ee:50:70:4f:40:9c:c9:d7:
9e:a4:6f:e8:51:b9:5c:3a:44:22:a0:de:77:2d:60:
b0:66:13:ea:59:2c:3e:41:4b:89:8f:75:25:97:cd:
1f:3f:63:a2:43:bd:ee:50:a5:40:8d:b0:1c:32:2d:
84:04:73:2c:ec:de:3f:26:37:eb:d9:b9:45:f5:5c:
54:f4:6a:fe:a9:b9:00:11:b4:af:52:7c:a2:fe:ed:
da:5d:72:e3:07:2c:a9:ec:93:8b:2a:33:ef:fc:66:
1e:85:49:de:86:5c:49:76:15:02:b6:5d:79:23:8f:
f2:36:16:59:69:4c:4f:92:53:d4:d3:89:4f:cc:01:
9c:12:68:66:4c:64:b3:b7:3b:88:a9:98:34:9a:15:
6a:2d:9f:c3:08:1d:c9:c6:d9:58:08:7e:d1:41:0e:
60:4d:ea:44:35:27:4f:bb:f7:71:d6:e6:3f:ce:07:
89:0b:61:c1:b5:06:81:d2:59:28:2a:78:26:42:00:
db:d3:57:00:c2:69:6b:41:ed:7a:3b:2d:09:53:b4:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:12:07:36:B7:04:99:80:3D:4A:27:A4:56:74:02:19:E6:F9:AA:DF
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/IRIHNrcEmYA9SiekVnQCGeb5qt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.192.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f5:42:42:94:2a:82:e0:f9:97:56:7b:4d:95:4a:9f:92:25:
7f:09:90:12:37:9d:ae:16:d2:95:a3:35:50:aa:a3:91:38:ee:
b4:f0:41:55:8b:43:a8:e6:9f:85:dc:98:37:64:e2:08:1e:c3:
36:4b:06:03:ca:55:0b:fc:05:48:41:1d:5a:cc:b0:14:b4:19:
40:66:23:b4:83:52:15:dc:a9:1f:69:26:36:80:8e:88:43:59:
f4:90:84:c4:17:cb:4c:8b:e8:2f:6d:02:7b:43:14:4d:c4:d1:
0e:4d:99:4b:69:43:fa:fb:44:e4:4b:0f:bb:36:e1:e2:2a:73:
2c:21:dd:79:08:25:48:50:da:e3:f6:c9:dd:c3:82:f5:35:1b:
c2:be:02:b6:47:57:76:c9:75:e0:a0:97:35:9f:ce:ce:50:67:
9f:73:d0:51:59:1c:32:b8:75:d4:7a:eb:2f:3b:0a:08:be:32:
7e:8f:31:4c:2b:50:2a:a8:fe:4d:a6:de:0e:9b:f5:e1:5d:3c:
9f:3c:e3:b2:56:22:6f:95:e8:2b:03:6f:d0:ca:da:d7:7c:7c:
f3:06:e9:55:bf:23:fc:85:0a:d1:07:56:54:94:b9:2e:65:34:
ab:93:c1:bb:83:eb:83:f8:72:d7:05:68:35:92:6e:33:2d:c8:
eb:b9:2f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 15:39:44 2025 by rpki-client