Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/d_S_LiTn-5JZ6QbYkJGNQlQwd5g.roa
File: d_S_LiTn-5JZ6QbYkJGNQlQwd5g.roa (raw, json)
Hash identifier: wiJdaTKeLOoOD2ZMe+ZN1Wuh3uVVfGMcp7ArG5upMbk=
Subject key identifier: 77:F4:BF:2E:24:E7:FB:92:59:E9:06:D8:90:91:8D:42:54:30:77:98
Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f
Certificate serial: 0198A864F17CB5D27F1C39225BB3697C7204
Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/d_S_LiTn-5JZ6QbYkJGNQlQwd5g.roa
Signing time: Thu 14 Aug 2025 11:44:04 +0000
ROA not before: Thu 14 Aug 2025 11:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 193.105.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:64:f1:7c:b5:d2:7f:1c:39:22:5b:b3:69:7c:72:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f
Validity
Not Before: Aug 14 11:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77f4bf2e24e7fb9259e906d890918d4254307798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:19:a0:06:3d:5b:e8:6e:13:44:50:83:55:
36:c0:63:24:09:db:0a:1e:a1:32:4d:b6:9a:0b:38:
d8:6d:01:fa:ed:c7:42:57:52:0e:cf:97:fb:a5:ea:
6d:98:02:98:05:70:6f:0c:44:9b:1e:1d:13:71:8a:
42:06:13:61:ac:fd:5c:b8:70:29:56:7d:d5:f9:43:
93:ac:d9:e1:5e:bf:e5:70:ac:71:ec:af:b2:f4:55:
b8:e9:51:fb:ed:6d:cb:97:4a:11:46:06:43:bc:26:
82:45:5c:93:a4:9f:f6:18:5d:b7:98:a5:02:50:2e:
b2:8f:55:3b:77:99:52:25:6a:f7:e1:4d:91:71:ac:
04:b1:dd:eb:e8:34:ab:14:32:d3:89:e8:7b:99:7e:
b4:fa:d2:69:31:b3:5e:aa:5d:57:e0:72:a7:8c:90:
76:84:a7:c2:1d:a9:66:40:dd:47:30:96:c8:8c:cb:
ed:55:a8:7b:cb:a5:88:ec:bb:c0:db:25:0a:e2:c8:
76:59:a6:00:1a:b6:be:ef:54:72:1a:aa:70:52:79:
5d:8f:ff:e5:5b:4a:ae:8a:bf:54:ad:42:2d:f1:c1:
55:dc:98:fb:9d:ea:c7:4f:3c:55:11:c1:d1:57:d4:
e0:57:98:64:95:48:7f:87:9f:6e:83:63:78:1f:93:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F4:BF:2E:24:E7:FB:92:59:E9:06:D8:90:91:8D:42:54:30:77:98
X509v3 Authority Key Identifier:
keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/d_S_LiTn-5JZ6QbYkJGNQlQwd5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:7b:10:b2:2e:4d:93:72:57:64:34:23:76:00:67:a6:b4:48:
59:f5:8f:41:d1:21:d3:81:80:46:53:ff:30:c4:96:37:d3:c7:
0f:d5:bf:ae:13:9f:b7:ce:4a:b9:a1:ad:23:af:9d:8f:f3:2b:
e7:f2:9c:b6:bd:81:96:7a:87:95:7e:12:e3:7b:05:29:cb:87:
c5:c6:77:68:00:1f:d7:93:03:b1:ef:63:41:ef:02:49:94:aa:
4b:97:dd:88:10:c3:00:d7:a3:06:b0:87:d1:74:13:ce:1d:41:
3a:db:95:b6:a4:03:d0:ac:0c:b3:9e:d9:4c:6c:d7:a1:32:2d:
1e:01:9a:61:14:67:c7:5d:74:67:6c:08:58:97:83:7d:b1:5a:
ab:22:ce:24:cf:58:27:e5:c6:84:89:f8:ab:0b:a1:f8:56:3c:
da:b0:76:a8:5f:b5:7d:7d:f5:28:9e:02:ff:40:15:73:ae:2b:
25:ac:b9:ef:77:c8:00:09:97:ae:06:12:e2:2c:05:a4:b1:88:
ae:3e:cd:a8:d3:85:4b:95:8c:ef:d9:7f:81:6b:17:30:6e:f8:
ba:68:be:31:7f:f8:81:9c:fa:29:03:2a:6a:4c:cd:96:56:8d:
38:60:6f:77:92:72:b4:c1:89:61:98:dc:73:b9:3a:21:38:4e:
0d:36:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:48:41 2025 by rpki-client