Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CwU0SOZBpBqv8FHTt6eeF_Wcyj0.roa
File: CwU0SOZBpBqv8FHTt6eeF_Wcyj0.roa (raw, json)
Hash identifier: PENuzYa45HfkD020G2egovGi2TZ8J0hHbb327XH4aW4=
Subject key identifier: 0B:05:34:48:E6:41:A4:1A:AF:F0:51:D3:B7:A7:9E:17:F5:9C:CA:3D
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0198E0F319272548E5C558A10CD2F85CCEAA
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CwU0SOZBpBqv8FHTt6eeF_Wcyj0.roa
Signing time: Mon 25 Aug 2025 11:18:04 +0000
ROA not before: Mon 25 Aug 2025 11:18:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199669
IP address blocks: 170.168.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:f3:19:27:25:48:e5:c5:58:a1:0c:d2:f8:5c:ce:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 25 11:18:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b053448e641a41aaff051d3b7a79e17f59cca3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:56:d8:b5:da:6f:a1:e2:72:4c:21:e8:15:
9f:44:a8:40:c5:2d:9f:20:89:2b:1e:ae:6f:f0:20:
98:d2:7e:77:75:24:19:33:a9:37:78:4b:fd:ad:e6:
c7:45:5c:e9:b3:6c:7b:bb:60:fd:19:3b:a8:24:80:
b8:e0:ae:0d:9a:f9:af:5a:63:d0:d7:79:fc:86:3f:
da:23:66:67:a1:17:f9:66:c7:ff:43:44:3c:9a:8d:
a3:fb:68:5b:ee:0a:db:ef:74:ff:c1:24:56:1c:67:
33:bb:c2:2d:04:f0:f7:a9:d3:aa:5d:58:7c:d9:de:
55:15:09:bb:c2:9c:56:94:99:ea:d4:db:cb:95:33:
52:02:36:44:3e:96:80:b8:77:11:87:6d:f2:a6:97:
06:4d:da:ef:e6:42:60:23:3b:24:7a:a5:88:85:f5:
32:cc:61:4a:1b:6b:f7:80:73:28:d7:ff:76:81:8e:
5d:2a:16:e5:d3:24:33:66:91:36:d5:bb:a8:85:1f:
53:bb:a5:db:1c:28:aa:5f:48:5e:be:2b:07:f7:a8:
bc:6c:78:ba:1c:69:ac:c9:9b:15:46:1c:aa:bd:a7:
88:76:15:32:cb:ea:ab:d4:77:bc:ec:f2:07:11:97:
b4:ed:35:24:6c:cc:d8:3d:7b:fb:23:2f:4e:c6:46:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:05:34:48:E6:41:A4:1A:AF:F0:51:D3:B7:A7:9E:17:F5:9C:CA:3D
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CwU0SOZBpBqv8FHTt6eeF_Wcyj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.21.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a8:63:b7:e2:a2:6a:41:8b:04:96:25:65:31:22:3a:3c:14:
f3:64:d2:80:1e:0a:3a:aa:8c:30:f7:53:3d:2d:96:b1:28:5c:
9c:ff:49:fa:c3:14:9e:c7:8f:ab:3f:cc:40:06:b9:ca:95:77:
70:e1:6b:de:22:44:29:ee:a7:b7:4b:5a:b2:a6:7f:b7:b5:28:
e5:9d:fa:32:79:e0:b8:5c:40:77:c8:58:1f:4b:6d:a5:a3:8c:
c0:5b:57:f0:9e:96:bb:ef:c0:b0:24:ae:ce:29:8b:1f:9b:8d:
b3:9e:71:a2:a8:a5:94:52:bc:0b:b7:92:18:43:9e:69:c1:b1:
89:1a:d2:20:1d:0f:72:79:60:f5:76:0f:90:6a:c6:d5:97:ee:
ba:08:2e:3f:d3:fe:87:2a:f3:95:54:39:8b:0d:1f:a3:df:ea:
ca:9c:7b:e8:e8:34:d5:76:ce:22:8b:f7:82:81:6a:4a:11:ac:
2a:aa:db:9a:90:6f:06:d4:07:f7:9c:e4:35:fc:87:63:3c:2c:
0e:bf:13:13:f3:8b:41:8b:c8:92:69:d4:70:f3:f5:a9:7e:e7:
4e:70:c3:fc:36:2f:f0:e2:b8:fe:2d:4b:19:ee:48:89:a2:92:
fb:a4:c7:1b:76:10:17:ee:eb:28:e9:02:3c:3c:81:30:e0:8a:
7a:54:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:29:47 2025 by rpki-client