Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cEiVX1WfFaPTQaTECwZkbs-ZxbY.roa
File: cEiVX1WfFaPTQaTECwZkbs-ZxbY.roa (raw, json)
Hash identifier: 8DTWi1TZMWqVEqFi/iYkOOWwoeFtVxwCkiw+STAhjYo=
Subject key identifier: 70:48:95:5F:55:9F:15:A3:D3:41:A4:C4:0B:06:64:6E:CF:99:C5:B6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198F928CAC8333322E3F81DEAD8188E62FD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cEiVX1WfFaPTQaTECwZkbs-ZxbY.roa
Signing time: Sat 30 Aug 2025 04:07:36 +0000
ROA not before: Sat 30 Aug 2025 04:07:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214556
IP address blocks: 94.249.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f9:28:ca:c8:33:33:22:e3:f8:1d:ea:d8:18:8e:62:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 30 04:07:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7048955f559f15a3d341a4c40b06646ecf99c5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:c7:b2:cf:d9:35:67:b5:0e:5b:50:e8:71:
01:b3:c0:72:a3:12:2e:ed:4d:29:3e:4f:01:df:df:
c9:45:20:27:58:1e:18:0f:e3:65:f7:77:20:2b:df:
0c:6d:9f:7c:30:dd:49:dc:98:e9:fc:23:60:7d:d9:
e2:1a:3d:21:4a:9a:ec:7c:0e:37:64:83:66:1e:c1:
54:73:02:ec:11:d5:a6:7b:e2:2c:7a:17:68:42:10:
14:32:25:36:00:cc:39:21:9c:9e:fa:8c:af:ce:b2:
ba:9e:19:23:cc:88:20:46:62:ef:fd:9a:70:c3:0e:
b3:31:f0:91:45:aa:a8:00:30:f9:7e:19:5b:20:68:
60:b0:ea:15:fe:26:de:ea:a6:c3:22:b5:c4:c2:9c:
d4:71:a8:c8:ad:ee:bd:a5:2b:93:df:fa:29:5e:4f:
3f:3c:5d:1e:5a:57:2d:ca:98:43:88:93:c0:97:7d:
06:3f:a1:ad:61:95:7b:67:20:45:d9:0b:ce:bb:b8:
8f:06:63:06:24:0e:a9:7e:8b:6d:20:65:45:f3:53:
e6:e5:3b:e7:63:49:df:9d:1b:0a:22:34:a2:d1:29:
62:15:88:23:2b:c8:95:98:98:4e:4f:25:a8:63:cd:
e2:a6:04:d9:f5:c2:cc:73:ec:f7:78:a2:48:bc:b2:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:48:95:5F:55:9F:15:A3:D3:41:A4:C4:0B:06:64:6E:CF:99:C5:B6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cEiVX1WfFaPTQaTECwZkbs-ZxbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8f:1f:8d:51:75:d9:d0:49:09:f5:e9:dd:ae:b8:41:e1:3c:
94:f2:a8:51:62:df:3a:2d:41:c0:63:76:fb:6d:bd:f8:35:2a:
0b:69:72:d6:35:e9:49:fd:c2:ae:94:54:68:6e:1b:d5:92:37:
ab:be:0f:c2:89:73:9b:44:0f:d9:e1:f3:e0:ea:0b:86:5e:96:
16:6e:8b:f2:b7:dd:11:2f:9c:d5:26:46:c9:bc:86:d9:4c:e9:
85:55:33:35:2d:38:3b:c6:4c:28:35:3b:f3:62:30:41:95:86:
19:33:2f:f1:bb:7b:b5:e4:9e:1a:28:f8:e4:b1:2d:f4:2c:a2:
78:dc:e0:d6:e8:3d:d8:ed:92:a7:1d:cb:27:d4:04:f9:21:ca:
12:77:d3:00:9d:83:46:0d:d2:2e:75:c0:2f:35:44:8b:ed:23:
09:0e:68:06:6b:68:62:3f:70:ee:c9:9d:a4:bd:31:c4:dd:5d:
4c:61:d2:60:c9:10:36:c5:86:59:83:a9:68:13:cb:bc:0b:45:
2a:98:8d:84:2c:05:0d:de:85:8c:73:26:d9:b5:9b:2e:14:fe:
28:4e:56:92:b2:59:11:e5:39:e4:71:b5:e9:c8:68:b6:3d:91:
01:00:5c:34:4c:94:ae:1f:7b:b4:04:b1:ae:77:14:df:10:9e:
84:d4:af:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:15:04 2025 by rpki-client