Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ExSTOwE1cgjVjy4QOn4fnsEg6yk.roa
File: ExSTOwE1cgjVjy4QOn4fnsEg6yk.roa (raw, json)
Hash identifier: BWruwZ2sPPFJNl0LTAZ/6PggnfvgGee+556evIuwLT4=
Subject key identifier: 13:14:93:3B:01:35:72:08:D5:8F:2E:10:3A:7E:1F:9E:C1:20:EB:29
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 019920202E4FC36931411CCBBC08D2D3E163
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ExSTOwE1cgjVjy4QOn4fnsEg6yk.roa
Signing time: Sat 06 Sep 2025 17:43:23 +0000
ROA not before: Sat 06 Sep 2025 17:43:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1004
IP address blocks: 176.117.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:20:20:2e:4f:c3:69:31:41:1c:cb:bc:08:d2:d3:e1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: Sep 6 17:43:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1314933b01357208d58f2e103a7e1f9ec120eb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:de:54:5c:a2:77:f2:7f:08:67:62:10:f4:
24:a2:ce:a0:a4:f8:18:d5:17:5c:36:4c:a7:62:66:
67:2b:9a:88:d6:64:4d:09:fb:d6:4e:6c:81:35:0c:
11:de:16:61:d8:17:8a:d9:1c:cc:82:ba:04:8a:db:
8c:98:b6:dc:ba:46:f0:6d:c7:24:56:d1:0d:3d:fb:
6e:11:8b:a0:bd:b8:b7:77:c6:42:d0:e0:1e:e2:39:
6e:e9:76:40:63:cd:1d:62:2e:9d:f6:66:91:6b:ba:
1f:78:2e:da:00:ba:4a:4d:58:b0:d2:3b:09:b1:a0:
f3:8b:92:c9:41:97:cb:45:41:1c:15:b1:ef:06:8e:
5a:2a:3e:16:a5:4c:e5:9b:22:e7:b9:64:50:a1:ba:
62:a4:54:1f:c8:bc:18:68:f2:df:71:5f:f3:14:dc:
82:f1:cb:0b:9c:36:c4:be:76:ee:3e:b9:a4:a4:08:
af:1b:b7:3e:d3:39:e4:bd:d2:0c:c4:75:b6:62:58:
08:cd:56:5d:96:8f:6d:8e:55:40:ea:7c:fb:32:ff:
5f:4f:6a:9e:c0:e0:b1:81:d9:57:8a:2d:6c:29:12:
02:26:dd:dd:13:52:36:c2:47:f8:d4:a8:45:2a:6f:
6e:fc:52:29:60:ec:05:a0:80:6a:ba:31:ba:7a:a8:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:14:93:3B:01:35:72:08:D5:8F:2E:10:3A:7E:1F:9E:C1:20:EB:29
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ExSTOwE1cgjVjy4QOn4fnsEg6yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.107.0/24
Signature Algorithm: sha256WithRSAEncryption
98:7b:7a:df:0f:67:df:e3:3e:51:14:c2:87:2e:78:4e:d8:53:
6d:c9:5f:bc:90:6e:28:5d:4b:6b:63:33:16:ab:ca:9a:91:5d:
b0:cb:9e:98:85:66:c7:cd:e8:d3:5d:29:fc:d3:a8:96:f1:3b:
67:42:bb:20:9e:d1:e5:b1:35:19:b9:94:a6:45:d4:67:38:a0:
f1:6c:df:8c:b8:e8:4f:59:69:1a:e9:5f:ec:c6:51:70:16:af:
c2:05:a1:28:12:29:1d:12:cd:e3:e8:5c:07:ba:0e:43:2c:1b:
b8:42:03:dd:c4:4c:b9:a8:39:0a:f6:b4:ea:bd:d7:6f:48:96:
c1:8b:4b:ae:a1:a5:23:70:5b:f2:07:15:4b:7d:e3:67:ee:32:
71:47:cd:99:5b:87:c1:97:36:58:e8:f7:5b:33:4f:0f:e2:96:
a3:56:18:1b:c0:44:15:79:22:e4:2b:ef:d1:08:33:54:13:75:
49:3d:dd:99:77:d1:2d:be:84:31:70:5b:2d:52:76:8e:d3:25:
61:82:80:06:0d:9c:83:a6:5b:e7:98:5b:8f:18:25:c0:20:46:
11:ea:6b:ac:4d:b4:f3:63:a4:9c:c8:d4:f3:7c:be:dc:f4:12:
ec:96:63:24:03:f6:e4:29:6b:20:99:8e:5e:16:cf:53:d9:0e:
3a:da:91:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:57:44 2025 by rpki-client