Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Xr0ZSod23fylkrRzbeS-fhErWd4.roa
File: Xr0ZSod23fylkrRzbeS-fhErWd4.roa (raw, json)
Hash identifier: rKrgCaOetMEeYY+fP2Z9bckxvl6AI5JdlBaScg8ywa4=
Subject key identifier: 5E:BD:19:4A:87:76:DD:FC:A5:92:B4:73:6D:E4:BE:7E:11:2B:59:DE
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01991F1DE02C9950FD45E3CC40D22774F317
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Xr0ZSod23fylkrRzbeS-fhErWd4.roa
Signing time: Sat 06 Sep 2025 13:01:15 +0000
ROA not before: Sat 06 Sep 2025 13:01:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213790
IP address blocks: 176.46.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1f:1d:e0:2c:99:50:fd:45:e3:cc:40:d2:27:74:f3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 6 13:01:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ebd194a8776ddfca592b4736de4be7e112b59de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:ce:3d:7a:d4:a1:46:ac:6f:f1:6c:db:19:
2c:07:5d:1f:6c:d9:fe:27:a4:e8:b2:4b:54:8f:59:
50:ab:63:23:6b:da:b6:10:2e:9a:57:c9:fc:8e:35:
08:7c:85:82:7c:df:8e:d0:ba:b6:29:33:3b:c8:92:
04:82:9d:d7:b5:3f:55:75:cf:16:d6:62:4c:7c:fb:
cd:0b:5a:0d:75:b9:bd:75:db:2c:4b:80:3a:9f:e4:
66:87:9b:30:1d:95:41:a2:3f:21:be:94:84:81:bf:
ff:08:16:6b:c8:29:b6:c7:86:4a:5e:71:da:31:2f:
dc:3f:c5:4f:2b:e8:58:02:17:28:ab:3c:5e:c1:56:
2f:7b:f2:38:0b:11:5e:bd:7f:fa:c5:dc:9a:c2:59:
b2:e4:32:cd:1a:46:7c:bb:31:0c:d0:61:42:0c:91:
d9:9f:d3:50:7e:c7:37:d3:9d:67:41:20:ab:36:4f:
da:02:7b:4e:c8:94:da:bd:bd:79:98:95:30:2a:12:
4c:bd:dd:41:74:5d:53:4b:7a:32:57:0a:30:a5:e0:
b8:62:fb:5b:42:ff:7c:34:e3:2c:9d:b6:b0:f4:4f:
09:09:0b:c9:73:13:7e:8a:be:26:c4:2f:1a:49:01:
c8:cb:0e:04:ac:46:ee:5d:03:75:ac:76:9d:2f:12:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BD:19:4A:87:76:DD:FC:A5:92:B4:73:6D:E4:BE:7E:11:2B:59:DE
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Xr0ZSod23fylkrRzbeS-fhErWd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.46.138.0/24
Signature Algorithm: sha256WithRSAEncryption
24:43:d2:60:bf:0e:a4:41:e6:df:04:de:43:81:84:9d:a6:61:
8f:95:22:df:9e:97:85:f4:40:5f:7e:e0:f4:aa:b2:cf:38:09:
8a:42:99:72:98:97:9a:f6:92:1e:91:6a:d5:54:a2:54:7f:14:
b6:38:cd:53:0e:e0:71:81:e9:47:ab:6b:b1:31:e4:8e:bd:3d:
34:b0:85:c9:99:7f:07:02:51:13:f9:f1:29:33:ed:7b:70:78:
3a:40:7b:11:db:39:47:65:2a:e2:ca:ea:d1:aa:d7:41:d8:65:
8f:b3:1f:9f:28:75:c1:7c:d8:7e:e4:37:19:1b:9c:4e:ec:de:
50:17:09:40:a3:3f:8e:dd:d2:ad:e7:bf:f2:21:5a:3a:68:da:
0d:44:cd:93:c9:50:85:36:6f:d7:9e:97:81:54:88:b2:31:3d:
4f:20:08:05:93:2d:35:9f:be:79:98:bf:d7:99:ce:81:e5:39:
45:55:a9:b0:b5:f4:94:55:f0:c9:98:d3:53:82:b7:9b:de:e9:
73:ef:22:95:c4:a8:04:fd:db:5a:ce:e6:f2:2f:c3:59:eb:e2:
d6:73:89:b3:b3:23:6c:5c:25:f9:f0:bc:30:b2:4c:1b:8c:5c:
e4:9f:ed:e0:cd:60:fc:71:a0:7a:ec:7e:ee:8e:db:db:52:b2:
4f:00:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:46:19 2025 by rpki-client