Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/IuBa70BDMg0yPa-auzZdBIfQXlM.roa
File: IuBa70BDMg0yPa-auzZdBIfQXlM.roa (raw, json)
Hash identifier: P7DlWRmLUo7YIyLqEcKhGguGrK8gKl8k7uHLBwT0v4U=
Subject key identifier: 22:E0:5A:EF:40:43:32:0D:32:3D:AF:9A:BB:36:5D:04:87:D0:5E:53
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 0198E0FEFF12DBE8FA0D8810C6481A70FCB3
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/IuBa70BDMg0yPa-auzZdBIfQXlM.roa
Signing time: Mon 25 Aug 2025 11:31:04 +0000
ROA not before: Mon 25 Aug 2025 11:31:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42464
IP address blocks: 194.1.207.0/24 maxlen: 24
194.76.102.0/23 maxlen: 23
194.76.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:fe:ff:12:db:e8:fa:0d:88:10:c6:48:1a:70:fc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Aug 25 11:31:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22e05aef4043320d323daf9abb365d0487d05e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:ee:09:aa:92:f1:13:7f:85:e9:9f:9e:0f:
20:4c:df:6a:0c:a0:c7:c7:1c:23:80:9e:86:4d:70:
16:0d:b3:53:72:5f:1b:3b:a5:3d:9d:5e:c0:1c:63:
59:bf:7d:a6:e8:68:e5:1b:73:bf:b3:3d:82:0d:69:
c1:36:1f:1b:b5:67:b3:64:22:14:b4:77:19:05:4b:
d0:bd:45:0d:9c:65:b2:3b:db:86:7d:96:e0:fb:af:
3a:d8:28:e3:01:db:5a:d6:20:6f:cd:82:64:38:98:
9e:f0:cb:e3:af:b3:da:d9:38:03:9f:65:5f:51:79:
6f:ad:a9:5e:f8:9c:22:bf:12:1a:9d:e9:b7:79:47:
49:55:69:f9:98:c8:dc:56:d1:b2:49:ee:2a:96:9b:
a8:e9:69:e1:2f:aa:c4:5d:2c:b4:95:9d:3a:73:58:
ff:e2:d1:fd:2e:55:28:35:33:25:c7:11:d3:e7:ac:
27:09:10:f9:db:7a:92:79:67:c2:80:15:cc:6e:0c:
2e:c5:ea:eb:02:3a:bc:67:4e:a9:9c:6b:72:b7:dc:
1c:89:e2:61:71:db:e9:fb:dd:4a:95:d6:17:4c:4c:
fc:d5:1f:70:5f:04:62:9e:da:78:2b:db:4d:1d:aa:
c3:36:e3:70:e8:25:d3:f3:03:f4:4c:25:87:63:4d:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E0:5A:EF:40:43:32:0D:32:3D:AF:9A:BB:36:5D:04:87:D0:5E:53
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/IuBa70BDMg0yPa-auzZdBIfQXlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.207.0/24
194.76.102.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:e1:ff:c0:93:c4:8d:94:89:4a:49:8d:cd:31:ed:52:00:d5:
29:57:c5:ca:68:f7:34:a0:f3:32:9d:33:f7:fe:ab:11:eb:2a:
39:91:7f:34:9a:16:eb:ed:ca:c3:78:28:c1:2c:90:6b:13:03:
cc:82:34:5f:9a:89:12:d0:74:c9:ed:bd:ce:ef:0f:23:bb:42:
0f:86:b8:8f:e5:ce:07:65:0d:1b:f6:17:4a:79:d9:97:2d:5b:
fa:6f:ad:c0:35:1a:5c:6d:11:44:8f:58:69:e7:e1:2f:95:54:
a5:c5:c1:81:07:8b:73:46:04:10:27:e0:2a:6b:47:2f:db:1d:
42:69:dd:8a:a2:c2:c1:e9:be:b2:95:47:f2:b7:04:d4:c8:ff:
fa:8c:98:6c:fd:1c:9a:4c:5e:1c:c1:31:cf:5f:0d:ea:4a:64:
44:de:95:55:88:14:da:db:4f:ee:14:f9:9d:21:bd:1e:1b:1b:
ba:c9:4e:65:79:4f:cd:75:0f:a9:15:d8:52:47:80:76:eb:b4:
55:cd:8b:30:b9:6a:c5:76:10:b0:6b:92:46:2e:ef:84:a5:04:
be:4d:90:aa:06:1d:c4:2c:ae:61:97:c5:b6:a9:7e:84:a3:dd:
fd:50:03:25:e1:ea:f8:1c:8e:b7:2e:15:f0:d1:81:40:b6:59:
ca:74:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 13:41:38 2025 by rpki-client