Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/cP6rGkpLPRV4pGqYJvOMDMFHqcU.roa
File: cP6rGkpLPRV4pGqYJvOMDMFHqcU.roa (raw, json)
Hash identifier: GpilgFxhpRLrq5YeYU84vDbeZTBkbH8/ApC4YFc5FBY=
Subject key identifier: 70:FE:AB:1A:4A:4B:3D:15:78:A4:6A:98:26:F3:8C:0C:C1:47:A9:C5
Certificate issuer: /CN=232af36b9c079da091827da3d07c9c8a5236cb54
Certificate serial: 0198DFD0C76EFD82DE186BFFA62BD652A42A
Authority key identifier: 23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/cP6rGkpLPRV4pGqYJvOMDMFHqcU.roa
Signing time: Mon 25 Aug 2025 06:00:58 +0000
ROA not before: Mon 25 Aug 2025 06:00:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200984
IP address blocks: 185.89.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:df:d0:c7:6e:fd:82:de:18:6b:ff:a6:2b:d6:52:a4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232af36b9c079da091827da3d07c9c8a5236cb54
Validity
Not Before: Aug 25 06:00:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70feab1a4a4b3d1578a46a9826f38c0cc147a9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:9b:b0:0d:7e:9c:d9:10:2f:7f:2e:0b:e6:
6b:fa:e3:2a:d3:42:7f:9c:96:7c:2c:45:83:28:06:
4e:39:cd:6b:36:5c:28:04:60:53:06:e4:64:59:06:
5c:7d:dc:e9:3c:52:95:5a:58:1a:1d:5e:ba:e3:0f:
14:17:de:36:ce:d0:35:59:a5:a6:64:c9:2b:cc:79:
82:c4:27:b7:18:d0:74:f8:24:34:a2:65:f2:6e:f6:
7d:3c:70:c7:8a:df:54:96:80:cf:17:02:99:e1:d4:
a4:ed:fc:5a:51:fd:91:ca:87:be:60:93:e5:03:4a:
54:8d:b7:2b:f6:64:04:14:e2:c7:8a:19:9a:7c:b6:
28:1b:21:e8:ea:01:bf:ec:0d:d1:9f:eb:d9:78:89:
09:66:43:f4:2b:31:6e:e8:6f:1c:e3:b7:bc:3c:74:
c7:3f:b9:c1:23:cb:8d:71:04:63:a8:95:bb:2f:f4:
18:3a:52:c0:db:d0:61:01:43:3c:72:1d:49:8d:6d:
e2:a7:9e:cb:4f:37:96:d8:1e:29:bd:69:df:2c:4e:
46:6d:e2:c7:09:f4:c1:a0:47:c4:13:c5:73:f4:00:
c1:9e:07:58:08:38:76:78:9c:c3:79:aa:09:53:5d:
38:64:67:d7:63:07:3e:5b:12:6d:c5:0f:ff:a8:23:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FE:AB:1A:4A:4B:3D:15:78:A4:6A:98:26:F3:8C:0C:C1:47:A9:C5
X509v3 Authority Key Identifier:
keyid:23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/cP6rGkpLPRV4pGqYJvOMDMFHqcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.180.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:87:a3:4b:75:99:72:79:bc:31:b8:8f:fc:15:e8:22:c7:bf:
ba:40:89:ae:a0:73:a0:e2:f0:54:74:53:ee:7b:3f:78:2c:e6:
73:39:c1:e6:ba:9a:ae:0e:14:f6:aa:03:f6:f8:0e:21:d2:86:
e6:4a:ef:f0:7e:0e:1f:d2:81:51:8b:91:3a:82:a1:54:af:65:
02:f3:47:80:55:59:40:42:8b:56:50:c6:0a:a7:4e:86:9d:f9:
ea:8e:c7:ce:c4:4b:69:c5:83:ee:83:47:7d:6e:a7:d0:c7:8d:
ee:f6:4c:af:96:a9:99:d4:cf:92:da:32:ae:48:c2:cd:bf:4d:
3b:8c:af:c9:b6:99:ed:d4:61:fe:5d:e2:c3:a2:f6:15:30:9e:
d7:39:46:41:25:c4:d7:8b:7d:33:6e:ef:95:e1:74:22:93:56:
6f:db:75:89:a3:91:d1:dd:1b:08:ba:5d:6d:96:e4:77:76:78:
bd:6f:d0:87:2e:7a:e0:00:90:82:ef:99:32:ab:8c:70:49:2f:
d7:da:fe:95:07:80:3e:0a:f4:ba:5b:5b:2d:f7:a3:f6:31:34:
d7:75:69:92:08:95:93:0f:ca:93:95:04:b5:c8:17:3b:7e:33:
1d:95:15:ef:0a:11:c7:8d:ee:a8:fb:57:3a:35:79:9b:70:e2:
40:52:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:39 2025 by rpki-client