Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/tUIacj6VOPH10m5Y6XUJyWIow6U.roa
File: tUIacj6VOPH10m5Y6XUJyWIow6U.roa (raw, json)
Hash identifier: 9uc/yuqmiqky5HfjpLsVrt/99q8zfLW5nmttPUpS6nU=
Subject key identifier: B5:42:1A:72:3E:95:38:F1:F5:D2:6E:58:E9:75:09:C9:62:28:C3:A5
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0198ECFF808255AE68C0093088B6D90941B2
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/tUIacj6VOPH10m5Y6XUJyWIow6U.roa
Signing time: Wed 27 Aug 2025 19:27:04 +0000
ROA not before: Wed 27 Aug 2025 19:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48925
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ec:ff:80:82:55:ae:68:c0:09:30:88:b6:d9:09:41:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Aug 27 19:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5421a723e9538f1f5d26e58e97509c96228c3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ee:1c:38:20:29:7d:c7:81:9d:8a:e7:ab:da:
7f:bf:32:11:e1:71:55:f2:73:7c:36:96:c6:94:14:
03:d7:4d:42:1f:bc:47:43:a2:1e:95:89:e8:47:42:
28:ff:bf:57:aa:00:a1:e6:01:d3:f7:31:7e:61:0f:
b4:48:3e:dc:9b:e2:71:64:71:1b:57:bb:74:07:15:
65:4f:59:14:67:cd:2e:57:3f:b7:ff:e1:02:99:c1:
3e:0c:2b:f2:76:52:a8:4e:bf:ec:00:8e:f7:ef:ff:
d2:5e:54:07:c7:67:b0:64:9d:65:7b:1c:c3:6a:2a:
db:1a:09:53:60:e0:03:94:43:86:4a:7d:9f:0e:01:
fe:84:cd:61:d7:9c:38:a4:7c:fd:de:e3:c6:db:82:
02:60:e0:78:65:43:6e:f1:c3:b6:19:2f:10:43:2b:
13:d3:f2:a9:33:52:0f:70:b5:a9:9c:83:27:a8:97:
a0:88:17:9a:7a:6a:16:8a:f4:89:ed:f1:a9:57:83:
1d:01:8b:5c:28:fe:18:8e:1a:56:49:db:9f:9f:56:
90:bb:4b:fa:fd:92:e0:47:7e:59:be:34:64:4e:5c:
da:8c:37:5a:31:b3:79:27:62:16:f8:25:7d:c7:a5:
a4:c6:56:6c:5d:51:1b:ab:11:8a:6e:6a:e4:66:64:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:42:1A:72:3E:95:38:F1:F5:D2:6E:58:E9:75:09:C9:62:28:C3:A5
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/tUIacj6VOPH10m5Y6XUJyWIow6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:61:b7:df:ea:b1:df:1e:7b:7b:79:73:57:69:e9:de:52:ff:
97:56:31:e7:b0:13:4e:05:2b:0e:22:5c:8c:f5:4a:2f:9b:3d:
82:4f:17:7a:f1:63:06:a3:92:3a:ca:28:2b:be:79:b5:4c:94:
f8:a8:01:c3:0c:21:c3:09:9f:64:df:ab:bb:20:f4:04:0b:26:
1f:82:8e:f6:09:43:6a:cb:c4:7f:09:42:d8:53:ff:42:72:58:
3a:e8:6d:23:37:4c:eb:f6:85:8d:c1:be:ca:60:f5:05:95:12:
f9:d6:c9:ca:bd:8b:ac:88:27:54:b6:98:6c:09:3a:86:44:20:
8e:7e:93:8a:c9:42:fc:cc:da:cd:e2:b9:52:ed:45:23:d6:7d:
79:35:e4:6d:bc:b3:d0:54:55:7a:2c:6c:05:b2:f5:25:b4:39:
0f:2d:fd:7a:4e:b1:82:7d:01:74:d1:ec:b5:67:2e:0d:73:7e:
1f:b5:e1:30:72:7b:d9:7f:1f:69:96:a3:63:61:d4:45:94:bb:
0e:50:08:49:52:1d:a9:ba:02:ba:da:1f:41:44:b6:b3:af:14:
1d:e7:f1:4b:12:34:d3:39:c6:a7:9b:c3:64:dd:2c:c3:a0:d8:
1d:df:14:8f:bb:99:30:6b:47:51:bb:00:3e:45:1b:e9:ba:9c:
0d:39:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:25 2025 by rpki-client