Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/6rKPPeMLzWMmfxQXHG3miJRR_qY.roa
File: 6rKPPeMLzWMmfxQXHG3miJRR_qY.roa (raw, json)
Hash identifier: at3zsZGvewvckmc0l/hP6UiAhbaoajI2j5vQzoVOXGs=
Subject key identifier: EA:B2:8F:3D:E3:0B:CD:63:26:7F:14:17:1C:6D:E6:88:94:51:FE:A6
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0198EB35BE2A0D85FEF71010B5E747A5E8A6
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/6rKPPeMLzWMmfxQXHG3miJRR_qY.roa
Signing time: Wed 27 Aug 2025 11:07:04 +0000
ROA not before: Wed 27 Aug 2025 11:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 95.81.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:35:be:2a:0d:85:fe:f7:10:10:b5:e7:47:a5:e8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 27 11:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab28f3de30bcd63267f14171c6de6889451fea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:a7:51:5e:d9:f1:33:10:5b:8d:82:22:03:
c7:8a:31:2e:1e:7c:8e:90:13:56:e1:2d:09:ed:02:
c2:28:22:8d:c5:62:49:22:8f:8a:29:99:b8:aa:84:
d1:56:30:3c:12:ef:c6:4d:c2:84:d8:d1:52:78:79:
65:92:a3:9b:d5:f6:47:37:9f:64:db:34:27:81:c3:
e1:97:6f:f4:70:6e:e1:b9:24:0d:e6:e6:f4:95:76:
85:82:58:f0:72:e9:26:91:74:b5:f7:be:43:3a:47:
35:8c:fb:49:58:bf:af:18:ed:e0:47:4a:2a:3d:5c:
e8:3c:44:da:b6:e2:32:59:be:54:67:c7:e1:42:d5:
0f:86:ab:4e:67:15:13:d9:a3:de:a5:9e:e2:c6:b5:
64:29:ab:23:01:c9:de:5c:d0:87:3f:4f:38:b8:70:
76:fb:64:cc:73:ef:f0:56:8e:8a:40:02:c5:f0:ef:
c2:04:5f:10:d3:91:6a:02:75:77:03:77:0c:b0:70:
41:87:dd:f2:fd:39:38:f1:02:a9:47:14:9f:7a:1f:
a4:8c:2c:bb:13:d0:1f:29:92:42:0f:d2:c4:01:9b:
22:3f:3e:3c:57:09:53:be:19:97:31:22:a9:f0:1e:
d5:2f:c5:71:34:c4:3c:2e:81:c5:83:10:5e:19:9f:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B2:8F:3D:E3:0B:CD:63:26:7F:14:17:1C:6D:E6:88:94:51:FE:A6
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/6rKPPeMLzWMmfxQXHG3miJRR_qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.117.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:72:73:b2:b7:07:e9:e5:87:ba:ca:d2:74:64:fd:84:67:8c:
a4:e8:04:c2:96:34:56:94:0d:fb:1d:13:fd:3c:63:06:da:bf:
fc:7a:63:19:10:ac:8b:43:c4:c2:5b:26:63:b3:64:4e:b2:d0:
f0:dd:85:d7:6d:70:60:48:52:7f:a7:d6:15:52:a0:c6:e5:32:
06:ed:52:2e:33:fc:dc:80:0e:d2:36:e5:7c:da:ae:f3:c3:07:
a1:a5:1c:df:75:3f:4f:05:fe:b1:19:8e:3b:2b:f7:4a:b7:7e:
3c:1a:49:74:6f:17:63:ea:73:35:6c:88:0f:f5:0a:23:c1:ad:
2d:78:42:c7:f4:8f:29:9b:9f:03:e5:fb:cc:7e:da:2c:52:fe:
e5:f3:32:23:60:03:6a:09:f9:cb:ae:b1:fa:1e:32:4d:37:bd:
d1:bd:6a:5c:e6:22:58:30:7a:e2:47:b5:1a:f3:f4:89:86:28:
26:45:54:f3:42:f8:9c:13:07:eb:92:8e:20:84:dd:d4:85:8d:
d0:4b:26:aa:36:04:30:c6:cd:37:95:5c:26:ee:3a:47:8a:a5:
4f:28:5e:e3:6e:04:75:e5:24:52:66:f6:ee:76:30:22:aa:06:
b3:47:45:a6:a3:cb:1a:71:ff:b1:36:d5:cf:95:ed:7c:b6:23:
61:91:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:19:46 2025 by rpki-client