Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/fMzT-5d-H7wm7UzPX4PbBLndjlo.roa
File: fMzT-5d-H7wm7UzPX4PbBLndjlo.roa (raw, json)
Hash identifier: QHxOUGueDky85wAcdSL/hpvn/Djtg29akovspAUAOhU=
Subject key identifier: 7C:CC:D3:FB:97:7E:1F:BC:26:ED:4C:CF:5F:83:DB:04:B9:DD:8E:5A
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0197C485F53A7E8A366F29073C8F4FF49C88
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/fMzT-5d-H7wm7UzPX4PbBLndjlo.roa
Signing time: Tue 01 Jul 2025 05:46:42 +0000
ROA not before: Tue 01 Jul 2025 05:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 176.106.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:85:f5:3a:7e:8a:36:6f:29:07:3c:8f:4f:f4:9c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jul 1 05:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cccd3fb977e1fbc26ed4ccf5f83db04b9dd8e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:bb:81:5d:06:5d:68:eb:15:18:4f:f8:52:
a2:af:5e:9d:15:9b:a5:f1:05:02:66:98:19:8e:f3:
d0:d2:ce:42:c1:cb:ab:4b:67:ba:d8:18:9f:df:8c:
c0:04:07:78:ea:e8:17:7b:b3:6a:57:00:04:5f:74:
b6:db:df:bc:c3:4c:a7:75:00:e3:6a:41:83:53:1f:
05:8b:04:c2:99:9f:e1:74:5f:d2:76:25:63:dc:87:
00:91:71:51:90:37:98:23:35:66:86:c7:c8:40:32:
21:db:6f:0b:b9:dc:26:0b:0c:2e:d5:21:09:a2:e6:
29:74:c3:0a:ca:cc:e1:0f:fe:97:88:f1:72:68:ee:
3d:40:35:80:f1:32:3c:a0:a4:4a:f2:5b:c7:f4:52:
1c:01:f3:a4:f4:89:d9:1a:9f:c6:e4:a5:15:fb:c4:
f8:5d:0b:87:09:82:c6:20:d7:0f:ab:da:d2:64:27:
6d:f8:2e:88:cd:85:a4:22:e6:15:5e:55:5e:f8:75:
e1:6c:d4:13:c9:ef:eb:f9:87:ca:f6:e8:50:87:ab:
b0:34:7c:d7:1b:3c:13:c5:a6:f1:2c:bc:83:7a:cc:
29:44:38:21:f7:fa:f1:48:4b:55:c1:50:69:95:bb:
24:b9:e3:90:31:ec:05:24:fa:ac:3e:e4:fc:4b:ee:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CC:D3:FB:97:7E:1F:BC:26:ED:4C:CF:5F:83:DB:04:B9:DD:8E:5A
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/fMzT-5d-H7wm7UzPX4PbBLndjlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.102.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:f1:74:03:00:b6:98:31:66:89:12:bb:7a:6b:d5:7c:30:60:
8e:42:e3:7b:a5:46:c1:bf:65:71:71:59:0d:0e:07:f0:e4:08:
6d:99:b1:c7:81:e1:e5:94:8b:c3:6f:c2:0c:43:84:71:27:ce:
bc:78:38:35:3f:10:2f:d9:de:e3:00:51:b9:04:50:cb:21:a2:
8e:1c:ca:6f:01:b4:63:98:e4:c3:af:47:ad:d1:cb:5c:7f:76:
af:50:e9:a3:a4:a9:f6:2c:12:32:62:5a:de:f5:b7:bf:16:77:
af:c9:07:f4:d2:36:05:0b:80:b3:ac:ae:3c:b7:61:9b:25:a3:
55:89:fd:57:f2:1a:c7:6d:b4:24:e8:2f:1e:6e:b2:17:55:74:
db:17:2a:83:50:0d:21:b2:1a:3c:9d:08:fd:9c:ef:24:a0:e2:
7c:77:e3:bb:7c:81:ec:6b:f2:c8:be:33:cd:e5:ac:a4:54:0b:
0b:06:19:50:34:22:24:91:2a:af:7c:bb:3c:16:9f:2a:33:8b:
74:f5:de:36:30:46:0a:50:7f:05:b3:e3:ae:fa:79:33:1c:1e:
b5:77:4b:f3:8e:40:55:b2:21:9b:ab:82:06:df:e6:08:80:99:
eb:85:66:98:c5:72:67:aa:c4:11:6c:42:db:12:bd:77:0f:08:
17:75:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:13:42 2025 by rpki-client