Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/RzhyO8qxAJ77cqxCfeziTDtNyv8.roa
File: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (raw, json)
Hash identifier: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=
Subject key identifier: 47:38:72:3B:CA:B1:00:9E:FB:72:AC:42:7D:EC:E2:4C:3B:4D:CA:FF
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0198AE7FC0AA99C2261E4F359220DEE01650
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/RzhyO8qxAJ77cqxCfeziTDtNyv8.roa
Signing time: Fri 15 Aug 2025 16:11:04 +0000
ROA not before: Fri 15 Aug 2025 16:11:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59642
IP address blocks: 212.42.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ae:7f:c0:aa:99:c2:26:1e:4f:35:92:20:de:e0:16:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Aug 15 16:11:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4738723bcab1009efb72ac427dece24c3b4dcaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:6f:e5:c8:cf:7f:1e:5a:4b:48:92:f1:79:
a8:f2:93:f3:be:df:7c:a2:df:a1:a6:11:2d:bd:03:
2e:14:d2:eb:11:7d:69:5f:9a:c3:57:d0:2a:05:c5:
72:57:ec:fe:ae:6a:66:6c:91:bd:47:37:ed:df:14:
bd:4d:e9:56:a7:98:1d:1f:c0:ae:d6:90:42:98:a7:
47:5d:fe:0a:dd:02:48:0d:13:d2:4c:7d:5a:f6:aa:
cd:1a:c8:78:a0:6b:da:65:fe:04:39:4c:d8:ea:73:
33:a9:ca:b6:8c:9b:e2:f4:b6:04:db:f6:02:ee:4b:
a3:4e:82:93:38:2e:0c:29:29:90:72:8d:13:3e:59:
04:1a:e1:4f:96:ff:26:0a:6b:44:d7:d4:e2:f4:11:
74:5a:3b:3d:da:1e:09:3d:d9:b5:ac:5a:38:17:92:
f8:1d:03:32:b2:41:ab:35:a6:d3:8d:fe:74:fc:53:
c0:ba:75:61:fd:2d:5b:1e:e5:81:f3:78:a5:34:2e:
1e:c0:4c:17:09:bd:29:3d:6e:f6:80:73:3a:95:52:
85:6f:7c:36:36:8c:d2:6c:80:f7:61:c4:78:ab:98:
12:c2:d7:8a:fc:fb:79:ff:04:2d:54:90:49:cf:3f:
c7:5d:6d:9e:ef:21:d3:59:5c:4f:f5:a2:4f:8a:2f:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:38:72:3B:CA:B1:00:9E:FB:72:AC:42:7D:EC:E2:4C:3B:4D:CA:FF
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/RzhyO8qxAJ77cqxCfeziTDtNyv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.208.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:1c:07:40:8a:7d:52:21:26:c2:e8:57:c2:57:0c:c3:b8:c7:
36:36:af:0a:d8:42:2e:64:6f:4d:a3:a7:04:fa:30:a2:fe:80:
7a:9b:61:1a:e0:b5:bc:ee:a4:b6:e2:39:69:2f:ee:8f:da:53:
7d:47:ed:0f:1e:3e:00:47:fe:65:37:e0:2c:7a:88:da:99:a3:
3d:82:49:f0:0b:f1:2b:80:cd:99:08:15:f4:1c:31:ea:83:5d:
8f:52:23:5a:04:10:7a:db:b8:5a:3e:77:fc:76:b1:79:11:71:
7b:ec:96:ad:0c:27:74:cb:62:4a:ea:20:84:83:d2:81:23:82:
9e:1b:ab:5e:4a:2d:e5:53:38:23:8a:eb:8a:b0:c8:83:8b:db:
f4:c1:b2:ad:4f:c7:04:19:38:e8:58:12:30:85:16:b3:3c:46:
7b:fc:1d:4a:fe:b4:f5:bc:64:a9:3e:3b:40:db:7d:5a:36:af:
00:ae:db:2f:9b:68:0a:07:37:78:40:4f:70:d2:9c:a7:13:ae:
20:20:59:59:6a:dc:53:57:f9:4e:81:88:9e:c4:60:89:79:95:
25:c4:80:6a:3f:a3:15:ed:7d:ac:d9:59:ae:14:6e:85:91:d6:
7f:11:20:c4:8f:ef:42:63:5b:87:e6:1d:da:ba:be:1a:15:3a:
c7:43:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:41:51 2025 by rpki-client