Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/rkE_Cbmb1SKcOBIf1djdZGl-bYg.roa
File: rkE_Cbmb1SKcOBIf1djdZGl-bYg.roa (raw, json)
Hash identifier: v+pd4dmoz8jOnZlQ7TRnQpQrIxQ0T2Ba231XJowrkiA=
Subject key identifier: AE:41:3F:09:B9:9B:D5:22:9C:38:12:1F:D5:D8:DD:64:69:7E:6D:88
Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial: 0198984D632D5D7042587427CAC3B98FE02F
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/rkE_Cbmb1SKcOBIf1djdZGl-bYg.roa
Signing time: Mon 11 Aug 2025 08:44:25 +0000
ROA not before: Mon 11 Aug 2025 08:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207830
IP address blocks: 213.174.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:4d:63:2d:5d:70:42:58:74:27:ca:c3:b9:8f:e0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Validity
Not Before: Aug 11 08:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae413f09b99bd5229c38121fd5d8dd64697e6d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:2c:d4:79:20:09:14:f4:0c:96:2f:51:9e:
96:01:63:a1:2d:30:c4:34:1e:d2:fe:f0:30:73:5c:
e5:8d:1e:0e:a8:cd:d7:6f:65:45:c2:00:c9:01:1b:
3a:90:60:ce:15:98:f7:8b:7b:b6:59:83:8e:e0:37:
dc:75:ec:9d:4e:4b:76:c9:e7:97:fb:4d:06:21:4c:
73:1c:20:b5:fb:aa:30:11:73:1f:54:d2:33:01:57:
7f:78:2f:b3:0d:38:6b:17:b5:26:62:25:62:e2:4e:
f0:b8:4f:f6:78:52:6f:1c:0d:a9:0d:7a:8d:47:9d:
0e:fb:bf:84:62:35:62:68:35:24:4b:5b:34:1f:9b:
6d:6c:ce:7b:f2:9d:a7:47:21:04:86:ff:e1:a7:f4:
a9:91:6d:f4:4f:a6:b9:f1:89:d7:a3:a8:1f:51:a9:
8d:92:d1:8b:0d:8b:1b:1d:44:e6:49:dc:08:9f:29:
73:bd:59:f7:aa:8d:cc:0a:04:01:b2:4d:ea:e7:d2:
d0:c2:18:98:74:da:b4:45:43:94:88:19:52:b1:dc:
50:32:e9:e7:d1:a6:1d:23:af:50:c8:a5:df:4d:3c:
4a:80:38:45:bc:54:03:3b:8d:5f:4d:1f:14:00:9d:
c9:28:d1:4c:b8:c5:d2:6c:06:ba:13:9c:6c:b4:b6:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:41:3F:09:B9:9B:D5:22:9C:38:12:1F:D5:D8:DD:64:69:7E:6D:88
X509v3 Authority Key Identifier:
keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/rkE_Cbmb1SKcOBIf1djdZGl-bYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.174.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:cf:10:a1:8b:55:6b:9a:4f:de:72:24:51:6d:ee:0f:67:cc:
cd:f5:e5:b7:58:5a:9e:6c:a1:ee:17:17:2f:d3:fa:39:c9:16:
af:13:76:3e:1c:a1:2d:2b:ff:fa:d0:81:dc:a4:cf:16:56:96:
91:1a:8f:a7:2c:e8:8f:89:ba:d9:2a:cd:0b:65:ca:8f:a3:d4:
40:a6:8d:bb:95:78:4a:7f:db:5a:2a:19:4f:28:4e:07:d1:08:
a0:37:e9:84:c2:a0:be:67:29:c0:62:b2:95:f2:d4:72:81:1f:
ec:50:78:fd:60:a5:16:d4:68:52:aa:89:2c:6e:fc:0f:55:5c:
9a:3e:26:18:18:a9:6f:8b:98:5d:2a:86:b9:dc:c3:a6:ad:8f:
9e:db:d4:47:70:94:dd:cf:24:ab:15:70:af:23:14:6b:3d:50:
b6:44:e2:55:55:65:e0:20:d3:30:8a:36:d2:f2:ba:09:03:fa:
1f:d4:9b:2c:2e:bc:e9:31:00:14:ce:30:67:3a:16:9b:55:fe:
91:80:15:6e:ce:a4:bc:cf:8b:25:1a:8f:a6:6c:fa:eb:b9:07:
1b:6f:97:0d:c4:83:5d:a4:0b:44:77:02:f8:0c:04:83:48:b3:
e0:fc:c4:d2:ed:37:b9:fd:49:72:1c:f3:d0:63:f8:35:b8:44:
b0:38:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 10:27:31 2025 by rpki-client