Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/RnqlBqNckemdgMscFPH0Fk7zCrQ.roa
File: RnqlBqNckemdgMscFPH0Fk7zCrQ.roa (raw, json)
Hash identifier: 0kl1KuGhfmZ8KozL0+CoUsR0GiM0aWNfsiuMH0vIrwE=
Subject key identifier: 46:7A:A5:06:A3:5C:91:E9:9D:80:CB:1C:14:F1:F4:16:4E:F3:0A:B4
Certificate issuer: /CN=ed6d4b57a5a1f7617a9e3603efbaeef03b0cf921
Certificate serial: 01971C29918713E1FDB73C26DB73C6998145
Authority key identifier: ED:6D:4B:57:A5:A1:F7:61:7A:9E:36:03:EF:BA:EE:F0:3B:0C:F9:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W1LV6Wh92F6njYD77ru8DsM-SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/RnqlBqNckemdgMscFPH0Fk7zCrQ.roa
Signing time: Thu 29 May 2025 13:09:35 +0000
ROA not before: Thu 29 May 2025 13:09:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28736
IP address blocks: 195.26.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W1LV6Wh92F6njYD77ru8DsM-SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:29:91:87:13:e1:fd:b7:3c:26:db:73:c6:99:81:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6d4b57a5a1f7617a9e3603efbaeef03b0cf921
Validity
Not Before: May 29 13:09:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=467aa506a35c91e99d80cb1c14f1f4164ef30ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:af:68:c0:bd:c7:72:e2:97:07:f2:82:9e:
9e:d2:52:f3:fc:86:6a:8e:d2:0a:40:c4:e8:61:97:
7a:84:99:cb:b6:51:fc:0f:39:42:d0:25:04:6f:a1:
8e:b9:a7:8c:b9:45:60:ce:9d:de:8f:c0:e4:1b:70:
12:3c:64:55:8e:8e:94:4a:53:44:82:13:98:5a:17:
c8:ba:98:1e:86:70:cf:65:94:2b:0f:05:a1:34:4a:
e2:b9:0e:93:a9:4b:2b:f9:2f:a7:69:74:d8:27:a3:
66:bf:57:58:5d:c0:42:07:bf:0a:b6:ff:fb:4e:09:
24:6b:95:5c:ee:77:ad:b1:a3:5e:f7:6c:b0:8e:b8:
a4:b9:29:98:87:2a:47:72:d1:56:e9:6f:5d:d5:c2:
61:c0:aa:9d:02:d4:3c:fb:f4:13:32:ef:66:8a:76:
29:db:ac:54:64:02:43:bf:c4:8e:3d:79:6c:9f:1b:
a6:31:05:28:a8:d1:51:4a:7d:b0:10:c3:dc:12:1d:
ab:41:d3:57:8f:7c:69:77:42:7b:10:10:6d:05:32:
26:e5:4b:e1:63:df:bf:3f:fb:d2:66:fe:85:01:5a:
f5:0e:31:12:21:28:71:c3:17:63:be:d3:0e:2a:43:
19:62:0a:88:9c:a8:e0:de:bd:81:e4:55:37:b9:a1:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7A:A5:06:A3:5C:91:E9:9D:80:CB:1C:14:F1:F4:16:4E:F3:0A:B4
X509v3 Authority Key Identifier:
keyid:ED:6D:4B:57:A5:A1:F7:61:7A:9E:36:03:EF:BA:EE:F0:3B:0C:F9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W1LV6Wh92F6njYD77ru8DsM-SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/RnqlBqNckemdgMscFPH0Fk7zCrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.30.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:1a:9d:bc:41:a6:30:76:20:71:4d:81:76:05:17:a0:ba:8b:
be:3b:02:9a:63:5f:bd:51:f5:49:6e:fb:02:b7:c3:5b:46:00:
92:2c:58:23:9b:95:00:7d:64:22:37:8b:d2:04:23:c2:33:d5:
4d:c5:66:2c:ae:9b:2a:0f:0d:94:d9:b5:eb:7a:11:bb:54:d9:
16:07:23:c4:29:61:3b:32:90:6f:36:f3:86:1e:26:c7:10:63:
b8:fa:cc:2f:61:d4:2f:79:49:16:9c:81:73:7e:cb:b1:d8:13:
58:99:6b:03:9d:b8:ea:42:0d:7a:13:d0:e7:44:91:25:40:15:
7e:6e:f4:0e:9e:e5:7d:9a:f2:92:bd:26:58:5a:40:79:93:ad:
37:41:43:3d:8f:e3:4b:45:7e:5a:3f:f5:a2:f4:c6:8c:e4:34:
b2:f5:44:d4:92:ad:a8:36:00:20:da:34:0c:36:17:b9:f2:2f:
b8:74:9e:75:44:78:cc:11:e4:8b:4f:84:84:8c:14:a7:5f:6d:
86:c8:16:16:d6:86:15:70:05:bd:bb:d3:7a:0f:7d:23:35:77:
9c:28:07:64:66:89:6f:5b:9c:45:c4:8b:c6:b4:27:4f:8d:84:
11:fc:19:15:5b:96:c5:12:1c:9b:16:d6:72:40:f4:52:2d:1d:
0d:23:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:23:25 2025 by rpki-client