Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/iuKuxv9EBM2kBUoWOZrOGISOEXI.roa
File: iuKuxv9EBM2kBUoWOZrOGISOEXI.roa (raw, json)
Hash identifier: M7VP7rss/sZMOY+HK5CMR5G4/5a9JWWosQij25471bk=
Subject key identifier: 8A:E2:AE:C6:FF:44:04:CD:A4:05:4A:16:39:9A:CE:18:84:8E:11:72
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 019914B97BD0053C6B519E5575AA752398C1
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/iuKuxv9EBM2kBUoWOZrOGISOEXI.roa
Signing time: Thu 04 Sep 2025 12:35:24 +0000
ROA not before: Thu 04 Sep 2025 12:35:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39648
IP address blocks: 193.93.4.0/22 maxlen: 22
195.24.160.0/19 maxlen: 19
2a02:17c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:b9:7b:d0:05:3c:6b:51:9e:55:75:aa:75:23:98:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Sep 4 12:35:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ae2aec6ff4404cda4054a16399ace18848e1172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:54:51:4b:9e:6a:d1:08:67:c8:fc:f4:de:
f1:bf:67:51:2d:ec:b4:44:71:6c:b1:98:6f:cb:da:
c2:cc:74:08:e4:d3:d2:27:1a:e3:eb:85:7a:d0:1b:
c8:d3:18:8b:31:90:87:f4:48:9b:56:48:e1:b3:6f:
55:a3:8b:85:5b:39:1d:18:1f:1c:d0:fa:9c:60:5e:
a8:f0:43:bd:1b:4f:a9:38:76:de:f2:93:44:cd:a0:
18:75:37:e1:de:72:68:c7:6c:38:3a:56:ed:56:74:
d7:ff:4e:bf:41:67:5b:16:2e:b1:d1:fb:8b:20:91:
e8:de:7d:b8:1b:d0:ca:de:d5:f4:2f:a0:2f:1a:e3:
74:bd:e5:b6:16:0f:1a:4d:d1:a5:6e:20:38:db:3b:
64:a2:ca:0f:84:a2:01:cd:e7:c4:e3:34:30:92:3d:
7f:95:3a:70:6b:c1:14:dc:38:d2:c0:bc:c6:80:56:
90:61:bc:8c:25:98:d9:f8:bb:1c:41:09:b0:51:3d:
47:c4:25:2c:41:4d:5a:61:65:16:1b:fe:48:e5:bc:
aa:42:fc:a1:05:e3:4e:c9:28:8b:77:fa:6b:f9:a1:
47:1e:f6:70:62:22:0a:36:77:d8:bc:ab:76:09:1f:
27:74:4a:f8:c2:f3:a0:b1:5d:6d:dc:8f:82:88:cc:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:AE:C6:FF:44:04:CD:A4:05:4A:16:39:9A:CE:18:84:8E:11:72
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/iuKuxv9EBM2kBUoWOZrOGISOEXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.4.0/22
195.24.160.0/19
IPv6:
2a02:17c8::/32
Signature Algorithm: sha256WithRSAEncryption
b0:ad:21:17:ad:15:3d:26:fd:5d:64:ac:16:00:5e:ee:23:ea:
ec:3f:e2:0c:c7:0b:c5:c9:6c:4c:99:e8:5a:e7:9f:ec:ba:79:
56:4e:7d:31:53:91:39:82:6d:be:3f:38:37:13:d1:d7:8b:4b:
e0:5f:51:e3:89:21:81:a5:1f:86:7c:d7:69:72:67:43:09:b2:
21:10:09:8b:27:04:96:12:58:04:a0:d2:fd:1f:4a:cc:f4:59:
55:6b:d4:f4:fc:6f:05:0d:1b:5e:72:ca:7d:b5:0c:e8:a8:09:
39:3c:ef:d9:01:a8:0c:b2:75:1d:57:19:0e:2a:8b:78:14:53:
d4:ba:f8:3e:73:2d:41:ef:ee:b4:11:92:6d:60:69:54:53:8b:
50:72:e9:8d:f9:02:d8:e6:f0:59:27:2e:d5:0e:e0:07:71:16:
51:20:2b:07:8b:0a:ad:40:b9:d6:33:ae:96:46:78:54:32:40:
1a:e3:b8:77:c5:ba:8c:dd:37:43:cf:59:1f:6d:8b:ac:bb:07:
fd:e1:e4:07:90:43:b4:88:d9:7e:b3:7c:24:7a:68:4a:5c:ea:
1b:8b:a1:71:e0:a0:2c:5e:e9:43:ff:4a:f3:d7:42:58:73:a0:
ba:75:14:cd:f4:f7:a4:91:84:57:e5:ae:25:72:64:41:f6:78:
bb:f2:63:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:48:31 2025 by rpki-client