Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/CJRfADFE4-QkJg5dtABKS-ENn_0.roa
File: CJRfADFE4-QkJg5dtABKS-ENn_0.roa (raw, json)
Hash identifier: KKiunGLLWijfm7wRv3Jxw+wzFAgL59bXip4yBbIw5wM=
Subject key identifier: 08:94:5F:00:31:44:E3:E4:24:26:0E:5D:B4:00:4A:4B:E1:0D:9F:FD
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01994DE14F84D87DC301748D8730D0C2722F
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/CJRfADFE4-QkJg5dtABKS-ENn_0.roa
Signing time: Mon 15 Sep 2025 14:57:15 +0000
ROA not before: Mon 15 Sep 2025 14:57:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135391
IP address blocks: 185.58.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:e1:4f:84:d8:7d:c3:01:74:8d:87:30:d0:c2:72:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 15 14:57:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08945f003144e3e424260e5db4004a4be10d9ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:ef:d1:f7:3e:c1:eb:a3:d7:cd:4c:9b:c3:
78:c4:62:10:b0:a7:22:65:b9:46:e9:cd:7e:63:fe:
0f:59:45:79:fe:b9:e9:7f:44:58:9e:23:d8:bb:81:
4d:00:f7:01:ac:ca:36:ff:6b:83:90:9c:a7:31:c3:
59:de:65:a8:f2:7b:da:04:9f:3e:e0:8a:e4:0d:73:
57:f7:8f:b7:2a:90:40:9c:11:4b:a7:1f:92:c1:d9:
7c:71:49:77:df:11:77:ad:64:9d:51:7d:01:e1:de:
34:cc:54:81:1b:f3:0a:66:85:4e:a7:a1:fb:81:4d:
32:fa:d7:1f:c5:4c:55:a3:19:73:bc:43:3f:8a:b5:
a4:8d:d8:18:b6:1a:bb:cb:f4:b4:f0:71:cf:de:e8:
bc:bc:05:65:c2:70:d8:70:0b:43:8f:c1:5b:49:d1:
c7:20:e5:fc:6b:6b:b1:d0:5a:e6:fc:72:eb:12:74:
94:98:15:92:1f:be:4a:b5:82:36:70:ed:22:6c:c5:
22:38:54:7e:0b:8c:04:1b:1a:c8:9a:1d:40:b8:50:
eb:c2:86:39:2d:3c:9c:47:15:e7:5a:fd:c9:b3:3a:
57:e2:cd:b2:4f:ad:c3:e2:8d:7f:1c:c1:e9:54:fa:
ef:9d:b6:d1:02:ea:7c:82:31:16:09:ab:41:08:28:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:94:5F:00:31:44:E3:E4:24:26:0E:5D:B4:00:4A:4B:E1:0D:9F:FD
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/CJRfADFE4-QkJg5dtABKS-ENn_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.23.0/24
Signature Algorithm: sha256WithRSAEncryption
31:10:f6:bb:38:9a:10:e6:fe:65:c4:cc:57:6f:a0:21:57:00:
e7:e7:c6:7a:4a:31:f1:fe:cd:20:b8:73:5c:a5:90:ba:6e:52:
13:8c:4a:3b:ea:ce:e7:2b:07:13:48:90:ab:4f:bf:89:d6:05:
65:12:f7:5c:2b:e7:4e:3d:be:b1:2d:90:d7:7a:08:75:a6:88:
28:41:4e:90:53:49:c5:06:5e:38:85:ab:4d:62:be:c0:e6:31:
7b:3e:b3:24:56:fc:8a:3e:f8:fa:ab:66:9e:f6:04:3f:a0:9c:
c6:31:91:7d:0c:01:b9:86:87:69:8f:e4:5d:a6:73:16:12:96:
59:81:87:15:83:c1:cd:63:48:f1:a5:97:9c:49:aa:ee:18:9f:
7d:b7:66:02:0e:39:c0:63:75:9e:bc:e5:db:ad:92:5c:10:b7:
b3:9b:c1:11:7f:ac:ed:dd:40:2b:32:68:85:2b:a3:58:3a:ec:
f9:2e:6b:1a:f2:5e:dd:51:b0:8c:45:fe:c1:43:3b:4a:92:57:
66:cd:37:da:65:35:e9:24:8f:36:03:e0:61:09:fd:67:a7:03:
ab:af:3c:7b:13:e3:e8:7c:44:56:77:dd:7c:e4:f7:1e:a4:52:
0c:b3:53:2a:3a:c0:1f:18:17:4c:8a:db:da:4c:36:0a:d9:b6:
90:df:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:08:17 2025 by rpki-client