Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/ecJknRyfIBQOOdXuyRMagWGM6Xc.roa
File: ecJknRyfIBQOOdXuyRMagWGM6Xc.roa (raw, json)
Hash identifier: 2TPM3149s6UNJrrM14pEqaNWUfexd8+/2ccuazOqFbo=
Subject key identifier: 79:C2:64:9D:1C:9F:20:14:0E:39:D5:EE:C9:13:1A:81:61:8C:E9:77
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 0198E182D42D1D9A22C3F2FB631255B3E925
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/ecJknRyfIBQOOdXuyRMagWGM6Xc.roa
Signing time: Mon 25 Aug 2025 13:55:04 +0000
ROA not before: Mon 25 Aug 2025 13:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 185.17.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:82:d4:2d:1d:9a:22:c3:f2:fb:63:12:55:b3:e9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Aug 25 13:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79c2649d1c9f20140e39d5eec9131a81618ce977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:8b:0a:1a:43:40:5a:0b:05:e0:1e:a5:66:
7e:15:fe:ca:e3:e8:d0:9b:7d:ee:bc:26:37:26:3d:
0b:23:57:fd:d1:6f:51:95:eb:4c:2a:55:4d:f8:06:
87:05:69:ee:69:c7:07:ce:c5:e1:1e:a1:e4:c6:bd:
aa:b0:31:ad:60:27:94:8d:6f:d0:18:f6:b0:f1:7f:
d1:6e:3f:21:86:cb:a3:53:79:02:ac:5b:9a:ee:47:
23:d6:ec:ab:f0:89:1a:98:fd:d8:5c:45:a2:14:3a:
aa:f7:90:a9:d8:b3:76:af:f7:38:09:18:63:d8:85:
8c:bf:2b:f1:97:0d:1b:5d:50:e9:ae:64:7f:ae:02:
55:fc:64:be:b9:04:b7:28:e6:ff:c6:ba:15:a9:1c:
1f:ee:2c:2f:cd:d6:49:4a:9c:96:36:30:57:58:05:
9e:59:72:25:c9:f9:1c:29:a6:60:32:b6:06:05:bc:
30:2f:38:4f:91:12:28:28:92:dd:65:aa:03:ab:5f:
a5:3b:55:f9:76:c9:3c:01:8c:51:dc:46:45:29:3a:
0c:09:44:dd:47:53:43:21:dc:2a:1d:db:27:c3:18:
cf:bf:52:b8:27:0b:f6:23:a0:8d:5a:63:5b:81:0b:
03:40:e2:38:b5:bd:68:31:8f:09:15:33:8a:78:7b:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C2:64:9D:1C:9F:20:14:0E:39:D5:EE:C9:13:1A:81:61:8C:E9:77
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/ecJknRyfIBQOOdXuyRMagWGM6Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.248.0/24
Signature Algorithm: sha256WithRSAEncryption
72:2d:53:b6:38:34:4c:48:4c:2d:a4:df:34:6d:7f:ac:f7:ae:
b4:74:16:84:34:1f:09:b0:24:98:62:7a:67:21:26:24:d0:55:
4b:bf:7f:5f:12:51:ef:e0:00:f6:91:f7:fb:d7:a8:4f:6e:b7:
76:7a:09:b8:ab:7c:af:bd:01:09:dd:ab:ca:2f:a9:ad:4a:5b:
bf:41:b0:f9:d0:14:c2:b1:cf:04:d5:91:3c:b3:d5:2c:66:c4:
4c:15:35:aa:60:23:8f:3d:f5:1b:b9:80:34:1a:84:1e:58:01:
40:98:cf:95:80:ba:0c:d4:e1:57:c4:ad:6f:db:c9:0c:84:eb:
0f:3c:ef:ed:f5:48:26:64:ac:31:af:50:00:09:d7:26:b3:b2:
fb:ed:e2:d0:6d:68:9a:6f:6c:18:1f:11:9b:f0:f2:dd:db:30:
44:6a:94:66:8a:2b:f4:c8:b9:93:65:ae:e3:58:30:64:c1:8b:
ab:34:c4:cf:c2:e4:89:2c:ae:18:c3:fe:5c:af:f0:73:1f:29:
5e:77:77:68:ce:29:06:c7:1a:cd:7c:ee:e2:d0:6d:b9:3b:69:
ee:e1:7b:1a:44:3f:34:65:fc:e6:06:0e:88:d4:26:7a:8f:75:
72:3a:1a:61:10:e8:3e:51:5b:c0:ad:88:06:e2:3c:ce:df:1c:
be:4b:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:11:40 2025 by rpki-client