Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/468N6r5RPT2f5DQcT-nc3tiYbYo.roa
File: 468N6r5RPT2f5DQcT-nc3tiYbYo.roa (raw, json)
Hash identifier: n/z9/H3ukYX/zuXbah6+bo8U6dHBYWx6B073nDMSCSs=
Subject key identifier: E3:AF:0D:EA:BE:51:3D:3D:9F:E4:34:1C:4F:E9:DC:DE:D8:98:6D:8A
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 0196CF02833F5A46B846E397475AA703F9B2
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/468N6r5RPT2f5DQcT-nc3tiYbYo.roa
Signing time: Wed 14 May 2025 13:36:10 +0000
ROA not before: Wed 14 May 2025 13:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204471
IP address blocks: 193.194.16.0/22 maxlen: 24
193.194.20.0/24 maxlen: 24
217.197.106.0/24 maxlen: 24
2a12:d8c0::/32 maxlen: 32
2a12:d8c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:02:83:3f:5a:46:b8:46:e3:97:47:5a:a7:03:f9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: May 14 13:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3af0deabe513d3d9fe4341c4fe9dcded8986d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:bb:6d:84:0d:b8:95:15:e6:45:d9:11:8a:
db:00:32:53:4d:37:53:6a:e2:f3:f5:56:a7:90:55:
f1:b9:83:f8:12:9c:bc:19:80:42:4f:ac:b9:ae:51:
53:bd:91:f8:4d:4b:76:d9:47:26:c1:a5:65:2c:5a:
ab:60:79:79:42:08:3a:6c:be:a2:e7:5b:ad:d8:15:
a2:33:1e:40:bf:75:7e:34:fc:9c:6b:eb:98:04:db:
dc:a9:12:c7:a6:69:7e:9f:7a:48:61:22:01:d1:5d:
bf:ff:f3:08:b9:cb:08:5e:41:83:f4:3d:82:7f:9d:
8a:d7:57:d4:ca:b1:8f:51:d9:76:49:8a:45:b4:14:
87:5a:f3:ef:d6:02:65:be:25:b7:1a:b2:b5:26:68:
7f:68:28:71:76:d5:2a:a2:1f:45:54:25:da:80:68:
46:f7:bc:bb:ea:aa:f7:f5:0c:cb:87:1c:3a:87:9f:
79:02:4e:bc:65:1f:b5:fa:82:b8:fd:a1:0c:28:b5:
c0:65:d1:a6:94:a8:36:20:c2:9a:05:14:90:12:13:
25:3b:2e:54:28:67:7c:75:cc:90:b2:f4:67:0d:1f:
f9:39:4c:ba:f6:3a:19:95:74:92:7b:19:2d:db:0a:
ba:24:61:1c:b0:4e:38:73:dd:1f:4b:33:ec:38:12:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:0D:EA:BE:51:3D:3D:9F:E4:34:1C:4F:E9:DC:DE:D8:98:6D:8A
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/468N6r5RPT2f5DQcT-nc3tiYbYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0-193.194.20.255
217.197.106.0/24
IPv6:
2a12:d8c0::/31
Signature Algorithm: sha256WithRSAEncryption
62:fc:b0:65:c5:c0:b8:80:ad:e2:a5:cb:b3:db:f2:be:9a:38:
8f:14:f8:d3:cd:17:52:2b:75:6e:15:fe:a1:64:24:3c:a4:f8:
1d:45:da:a7:17:85:8e:0a:ad:be:49:45:ce:69:e0:8a:b7:bc:
12:72:da:af:2a:b5:d6:8f:0d:ff:bf:70:22:11:1c:e5:65:5a:
51:e6:71:f2:d2:7b:c9:61:96:9c:07:9c:dc:60:1a:00:9f:95:
8b:10:c6:1e:b6:c2:e7:bc:35:32:91:91:55:85:31:1d:5f:21:
61:13:0a:28:e1:54:48:37:0e:0e:c5:c2:63:85:d0:f5:0e:e3:
08:43:90:ae:ac:6c:15:33:6b:fb:25:57:95:bf:0e:89:d1:5b:
87:87:3c:6b:ef:de:5a:e1:b7:df:7e:78:c4:6a:53:c0:92:bf:
ca:fe:b1:59:86:1f:b1:5f:39:5b:fd:41:0b:87:e8:51:55:5e:
25:4b:85:67:0b:51:c6:2c:16:8c:31:60:f3:cb:a2:3c:ed:df:
c8:53:f5:e2:af:f1:78:dd:69:57:4b:34:da:27:7d:3f:43:6d:
bd:ed:ce:b8:b1:3f:9e:29:9c:a1:ce:c5:3c:af:e4:69:95:b4:
24:46:1d:41:50:65:82:d0:75:a1:5e:0a:f7:50:36:dc:e8:32:
90:9f:d6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:44:34 2025 by rpki-client