Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/cwh3r4eWlWrhqTwyia3Y6IkQ-I4.roa
File: cwh3r4eWlWrhqTwyia3Y6IkQ-I4.roa (raw, json)
Hash identifier: EAtSuVfxmrmE7PUep+zevWjbxh//ARj59/51XZyWbTI=
Subject key identifier: 73:08:77:AF:87:96:95:6A:E1:A9:3C:32:89:AD:D8:E8:89:10:F8:8E
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 0198F0ED3D142C7F7C6D555AA5DAC6C6F6DC
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/cwh3r4eWlWrhqTwyia3Y6IkQ-I4.roa
Signing time: Thu 28 Aug 2025 13:45:36 +0000
ROA not before: Thu 28 Aug 2025 13:45:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22065
IP address blocks: 155.204.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:ed:3d:14:2c:7f:7c:6d:55:5a:a5:da:c6:c6:f6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Aug 28 13:45:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=730877af8796956ae1a93c3289add8e88910f88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:9b:5a:8f:84:9b:f0:5a:95:e1:42:38:19:
71:e0:ce:5b:e6:d3:81:79:ba:c6:40:3b:3c:52:43:
61:a9:67:32:cf:ab:74:55:b9:ec:c5:55:4c:80:c3:
9d:2b:d7:f2:1e:b9:ff:c7:23:12:3c:23:f8:43:4c:
63:89:e4:54:8b:63:74:de:36:18:84:2b:49:8a:d7:
7c:89:ef:20:1f:f7:1a:dd:60:c9:46:43:37:41:c2:
32:dc:24:e0:a9:14:3d:82:20:e1:57:73:a0:dc:af:
ec:58:dc:bd:59:9c:89:80:e3:1a:24:81:5e:bb:24:
99:d9:36:07:13:ea:43:51:cc:23:e0:9f:a1:e0:42:
6c:25:94:f6:05:1c:3a:88:f9:c9:d2:96:ba:22:f2:
8f:c8:c7:1f:e0:be:42:6c:95:4b:20:a0:35:ba:ad:
81:bc:dd:31:1d:c6:1d:24:2d:b8:e6:e1:2c:6e:5d:
c9:2f:59:0e:ef:13:ba:6f:e2:9a:1c:68:57:ac:35:
4c:b3:14:87:f9:ca:d1:7d:7d:a3:2e:25:17:19:86:
47:2e:51:a9:2e:57:6d:df:8a:42:a3:5e:c0:43:95:
a7:47:a2:e9:05:ec:6a:c2:9e:82:76:e9:44:72:95:
c7:35:6e:09:be:ac:2d:7f:e5:b9:60:71:a8:3c:2d:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:08:77:AF:87:96:95:6A:E1:A9:3C:32:89:AD:D8:E8:89:10:F8:8E
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/cwh3r4eWlWrhqTwyia3Y6IkQ-I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.204.154.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9c:c3:61:e6:2c:7a:5b:cd:d7:4c:01:4d:16:aa:1a:9d:0f:
91:ad:62:05:d8:34:6c:64:63:b0:70:35:09:14:19:73:3a:9b:
b9:8b:92:01:c0:1e:91:bb:cc:a8:6f:9f:5c:96:50:c9:fa:c7:
f3:3a:f3:d1:b7:36:c5:f9:5b:c0:76:0f:41:74:01:69:04:eb:
d0:b2:88:c8:e6:08:0f:2e:73:bd:fd:e9:b7:c6:a7:cf:a6:13:
cc:36:18:6e:2d:13:94:ba:43:0c:f6:82:30:1a:43:59:56:bd:
0e:69:cf:bd:d6:4e:aa:3a:fc:09:30:49:49:9e:c6:e7:ff:72:
ac:ce:a5:66:a4:57:81:e8:b7:83:15:e9:f3:65:b9:25:6c:ef:
35:86:f2:02:76:32:91:4b:1d:7a:08:39:2e:32:a5:98:3a:c8:
07:cb:63:76:b0:39:11:4e:bc:94:19:55:90:b9:b7:d0:63:c3:
1a:6f:77:e8:0e:da:45:f2:da:86:be:d2:df:18:2f:e4:26:3a:
ea:21:62:78:32:8c:b1:31:09:dc:1e:af:6d:05:1a:af:73:26:
7b:7c:f2:33:45:5f:f2:b8:cd:0a:e5:85:e2:d2:40:f6:13:14:
c5:cc:c2:fb:7d:9f:e6:eb:1b:7b:d6:77:43:b8:9f:2f:ce:6e:
1a:6a:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 15:19:57 2025 by rpki-client