Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/j6-qDXAeAc1h16OGqpAwCo3rr5g.roa
File: j6-qDXAeAc1h16OGqpAwCo3rr5g.roa (raw, json)
Hash identifier: iazcRp7YD1vNWLtyqBU0DjHCkZMl7ouWgzgptjACUWE=
Subject key identifier: 8F:AF:AA:0D:70:1E:01:CD:61:D7:A3:86:AA:90:30:0A:8D:EB:AF:98
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0197466DE9E92EDC0555AB8243009B3A0B03
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/j6-qDXAeAc1h16OGqpAwCo3rr5g.roa
Signing time: Fri 06 Jun 2025 18:08:17 +0000
ROA not before: Fri 06 Jun 2025 18:08:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 193.36.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:6d:e9:e9:2e:dc:05:55:ab:82:43:00:9b:3a:0b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jun 6 18:08:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fafaa0d701e01cd61d7a386aa90300a8debaf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:da:9e:4b:db:93:9b:ce:7e:6a:ea:91:6b:
b3:a5:c4:c2:3b:a2:a6:69:9c:a6:13:c5:64:8a:d0:
82:89:0b:fc:f1:3e:53:e0:a3:9d:32:63:50:f6:76:
c4:c9:c5:d4:fd:5f:19:02:f4:1a:7d:88:86:94:78:
f9:e5:ed:05:02:41:68:8f:e6:1d:4b:1c:7c:4a:df:
6b:c2:d9:28:df:b3:4d:c2:c4:42:1c:5b:47:d1:bf:
b9:ed:51:f2:6e:ef:9e:79:93:42:22:59:ea:d4:cb:
2f:1d:26:60:11:51:ca:14:10:71:0a:5a:9c:a0:73:
a3:68:2d:e0:5c:10:a7:28:18:8c:de:68:54:e3:9f:
70:b9:6e:ca:a9:4e:a9:97:06:7a:cf:41:c0:4d:18:
fb:43:d5:0b:9c:dc:f9:8e:0d:c2:ba:33:76:93:d3:
c5:03:46:15:0b:03:7a:d5:51:0a:db:99:4f:a9:e7:
9f:65:e3:3c:4f:95:02:f1:46:19:07:47:fd:49:f3:
19:88:4c:7e:7f:1f:e6:f1:75:df:cf:6e:4e:df:18:
bd:09:92:96:45:95:53:07:c5:8f:06:e0:f3:2b:3c:
0f:37:0f:bb:cd:a4:8e:98:43:04:26:43:fd:a0:e2:
59:76:f0:1e:01:1b:59:94:ef:35:1c:a4:af:92:5a:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:AA:0D:70:1E:01:CD:61:D7:A3:86:AA:90:30:0A:8D:EB:AF:98
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/j6-qDXAeAc1h16OGqpAwCo3rr5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e4:3b:e7:cb:4d:5e:d7:86:60:fa:e0:b4:be:5c:7b:50:3e:
99:c1:12:9b:34:de:1b:b4:73:00:50:34:0e:07:1a:fc:ff:fc:
17:fb:44:59:de:66:6b:68:af:11:1d:4e:fd:30:0e:83:b6:7a:
97:71:72:b5:9b:f6:dc:d1:91:70:97:10:d4:59:e6:0f:1e:0a:
c9:af:f8:91:a3:9e:55:ef:e3:1a:75:ad:42:60:76:4b:a8:40:
b4:0e:ab:a9:23:89:f6:12:69:79:9a:0a:87:47:99:42:c3:09:
36:7a:c8:77:f2:9c:7c:e4:d6:c1:f8:aa:41:a0:32:fc:9b:36:
51:d6:54:f3:9e:37:bc:e2:02:52:d5:ce:b6:20:2c:a6:ae:79:
d6:33:15:f3:4f:90:37:21:e0:0d:96:4c:67:3f:36:92:b8:9d:
89:52:f0:7d:56:d5:b9:8a:37:80:2f:6d:65:19:ca:c3:1d:de:
06:80:c9:ae:0c:16:cb:e4:cb:66:4a:3a:5b:95:86:b4:ed:8c:
c9:34:f2:15:40:10:0b:07:b0:e6:68:6c:78:6c:3a:c4:bf:ad:
4a:fe:02:f2:a9:4a:1c:86:8e:ec:e8:19:85:71:c5:59:bc:da:
b5:15:c8:f3:af:2b:f0:85:ce:fb:24:29:33:7c:1f:0d:c0:4d:
08:15:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:51:05 2025 by rpki-client