Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/_66pxASs3q8uB-XVTEtYg_28j2c.roa
File: _66pxASs3q8uB-XVTEtYg_28j2c.roa (raw, json)
Hash identifier: jpHC45psSv+zAzzYw1OCRaKkzWVXUPpgp6OyO01yiRE=
Subject key identifier: FF:AE:A9:C4:04:AC:DE:AF:2E:07:E5:D5:4C:4B:58:83:FD:BC:8F:67
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 0196C8D1BCA77D3E1E0CD0CC1E9C656F6272
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/_66pxASs3q8uB-XVTEtYg_28j2c.roa
Signing time: Tue 13 May 2025 08:45:10 +0000
ROA not before: Tue 13 May 2025 08:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203329
IP address blocks: 193.193.166.0/23 maxlen: 24
2001:67c:7e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:d1:bc:a7:7d:3e:1e:0c:d0:cc:1e:9c:65:6f:62:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: May 13 08:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffaea9c404acdeaf2e07e5d54c4b5883fdbc8f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:9f:9b:2a:bf:3a:57:ae:65:7c:ae:16:e5:
ee:0b:93:e5:d8:76:80:af:c2:d4:b9:27:65:fa:ad:
08:64:3d:05:36:8b:6b:44:2e:dc:25:06:07:20:1d:
9f:52:06:46:89:33:7f:a8:0c:cc:c1:c4:ba:00:e5:
e6:c6:14:20:83:30:0e:ef:28:fa:d3:34:dd:0d:96:
28:90:ca:d2:20:89:ab:f4:53:54:a2:80:3a:70:89:
3f:ad:ef:24:32:06:bf:f3:ee:ca:46:48:93:65:86:
92:16:a5:97:c8:66:fd:26:0b:ae:2c:72:7c:ac:14:
89:6a:ac:5f:14:2c:40:7c:56:3c:77:fe:4d:39:e2:
31:35:71:fe:a0:2c:6d:67:25:b0:31:2b:7f:cf:8e:
02:fd:f0:46:69:b9:e3:e2:3f:08:d1:2c:f4:9a:3e:
cc:96:f9:a9:4e:5b:76:d8:c9:75:f6:7a:e9:ca:18:
91:d9:a7:5c:a7:7a:f6:53:5b:49:81:d7:6c:ed:83:
b0:01:ca:b3:6e:39:5a:cb:96:b8:71:52:e2:1d:e9:
36:b5:22:d6:26:43:fb:8e:0f:18:41:e7:4d:44:78:
9c:f7:dd:0a:91:c3:5f:75:f2:69:23:1e:ff:a5:12:
59:fe:51:53:10:20:cd:85:4f:bd:97:17:a9:0e:6f:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AE:A9:C4:04:AC:DE:AF:2E:07:E5:D5:4C:4B:58:83:FD:BC:8F:67
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/_66pxASs3q8uB-XVTEtYg_28j2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.166.0/23
IPv6:
2001:67c:7e4::/48
Signature Algorithm: sha256WithRSAEncryption
8a:30:7f:ff:51:89:cb:a0:87:fb:04:39:88:6b:5d:7a:e4:26:
1b:df:ff:c3:09:2b:47:58:eb:e8:a1:10:83:26:40:2b:30:d0:
17:2d:c4:5d:b0:43:a5:97:6b:a5:00:7c:d4:4a:5e:48:17:a6:
a7:ff:b2:12:02:c4:15:1b:a8:3a:82:06:d2:83:06:2f:33:d1:
f2:94:c8:62:5c:56:68:10:5d:76:ff:71:45:0b:f4:09:c3:f7:
e4:4a:25:8b:9b:04:b9:5e:42:10:f8:1d:ea:bc:35:04:a8:ab:
ab:df:e0:15:65:e9:c3:04:a0:9a:32:92:e9:70:b2:74:f8:cb:
43:ab:df:07:2d:fe:5f:3d:b2:6e:6c:09:3c:88:dc:cb:af:c2:
22:2f:55:64:fa:5a:12:01:ed:58:ef:d1:d4:f7:e1:0d:42:06:
12:e2:41:7b:b6:4b:f5:07:80:71:bd:92:22:84:1d:19:a4:4b:
29:36:77:64:cf:44:16:83:e9:77:ff:45:7f:3e:0e:0a:11:af:
29:c2:f3:df:83:7d:bf:19:82:ae:d5:6a:9e:29:1f:75:d3:ba:
fa:08:ed:85:c7:a5:5b:21:b6:96:c0:2a:66:04:88:51:3d:5a:
d8:e9:0a:a6:41:9e:42:17:16:41:ec:4a:13:3c:48:8c:d8:47:
bf:fc:92:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:30:36 2025 by rpki-client