Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/cpBMoNjMlKVVMsqYaHdWm5BylHk.roa
File: cpBMoNjMlKVVMsqYaHdWm5BylHk.roa (raw, json)
Hash identifier: ErfNZa86K6XPRZZqE+PBMu85TNR4aa82nTGFeMdV3Fg=
Subject key identifier: 72:90:4C:A0:D8:CC:94:A5:55:32:CA:98:68:77:56:9B:90:72:94:79
Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial: 01992E843CD8AA44480A148BA9F422AB701B
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/cpBMoNjMlKVVMsqYaHdWm5BylHk.roa
Signing time: Tue 09 Sep 2025 12:47:22 +0000
ROA not before: Tue 09 Sep 2025 12:47:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206264
IP address blocks: 193.58.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 12:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:84:3c:d8:aa:44:48:0a:14:8b:a9:f4:22:ab:70:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Validity
Not Before: Sep 9 12:47:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72904ca0d8cc94a55532ca986877569b90729479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:16:25:af:65:22:26:5f:9c:63:e9:8c:f9:
b7:66:d1:6d:10:76:76:52:52:5f:0f:f2:4c:66:0c:
7c:16:99:46:7d:5d:94:5b:d1:6f:a3:01:45:16:d5:
7b:8a:3b:9c:ae:3b:43:eb:83:81:df:01:ea:8d:d3:
0f:31:07:11:11:a3:bf:51:66:5c:f8:21:da:d0:d4:
24:cc:37:5e:02:e7:a1:01:01:64:8d:6f:6d:e7:44:
0e:8b:90:54:1d:2e:b5:de:6c:2e:09:cd:ab:b9:63:
92:bf:65:05:c4:b8:00:89:6a:36:23:55:0c:0c:fc:
54:e8:64:e1:49:3e:ff:ea:91:5a:85:1d:42:ac:65:
21:15:a4:10:78:a2:24:96:ae:1b:83:40:44:8b:e2:
44:f1:4e:9c:3d:78:51:03:ad:22:c7:c2:4e:79:dd:
62:58:27:d8:ea:d0:93:88:dd:18:cc:21:54:5a:f5:
4d:aa:97:92:49:63:3e:01:68:f0:08:ce:68:cc:b7:
b7:00:0a:f2:24:f9:87:ea:a5:4f:02:ac:60:dc:9a:
80:ef:4a:60:b2:85:2d:1d:af:53:0e:aa:3e:02:33:
fa:63:31:14:ae:7c:97:b3:4b:f6:61:da:81:b5:c0:
0f:41:94:9a:db:76:95:0f:44:14:da:1d:e1:f7:db:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:90:4C:A0:D8:CC:94:A5:55:32:CA:98:68:77:56:9B:90:72:94:79
X509v3 Authority Key Identifier:
keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/cpBMoNjMlKVVMsqYaHdWm5BylHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.119.0/24
Signature Algorithm: sha256WithRSAEncryption
31:54:4a:d2:ee:8e:40:68:3a:d0:03:23:83:db:b6:42:e0:a2:
79:9e:d2:f3:ce:62:f7:67:12:28:e0:f1:d6:37:66:33:3f:e6:
d9:8a:7a:b7:53:e8:99:24:aa:66:e6:8c:58:86:19:82:f1:d2:
1c:fd:0f:3d:d2:ad:f7:99:88:66:6d:47:74:7e:f5:24:c5:59:
ef:6e:cf:8a:76:87:dc:1b:29:be:c0:32:5d:c4:b3:6b:7f:fc:
ca:66:79:2b:2d:a9:43:c6:48:91:02:b9:4a:80:8a:4f:67:c1:
f3:f1:fc:a0:36:44:7c:f3:7b:5f:5f:30:c5:5a:91:78:b4:7d:
79:bd:54:6f:51:63:84:65:77:48:d3:9a:d5:2f:8a:7e:26:d3:
94:cd:d4:2c:6c:15:34:5b:4e:e8:6c:db:ba:06:9f:c4:9e:e2:
5f:33:45:01:f8:87:2c:9f:aa:fe:7e:88:a0:98:cb:bd:bd:4b:
54:55:62:43:c3:13:b5:61:39:22:95:c3:a7:64:74:97:57:dc:
07:e7:85:5a:7d:65:9f:e3:c2:72:e3:6f:48:cb:6e:50:df:08:
1f:03:2a:3b:09:b7:66:61:30:d3:75:49:af:0c:67:1b:b7:47:
f2:f4:9b:30:c0:ad:bb:1f:6b:f9:c8:26:ef:88:50:86:59:c9:
77:8a:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:18:36 2025 by rpki-client