Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CFl6GjMyPMT-J2hUmiyXi7MAG1o.roa
File: CFl6GjMyPMT-J2hUmiyXi7MAG1o.roa (raw, json)
Hash identifier: YE63ks2egPT9NAjdiZZyscseeKPgUuXIOaJfxHTWa8g=
Subject key identifier: 08:59:7A:1A:33:32:3C:C4:FE:27:68:54:9A:2C:97:8B:B3:00:1B:5A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019962FBF6C21000DADD5E6E11714494888D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CFl6GjMyPMT-J2hUmiyXi7MAG1o.roa
Signing time: Fri 19 Sep 2025 17:18:23 +0000
ROA not before: Fri 19 Sep 2025 17:18:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 14.102.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:fb:f6:c2:10:00:da:dd:5e:6e:11:71:44:94:88:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 19 17:18:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08597a1a33323cc4fe2768549a2c978bb3001b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:c3:71:ba:a7:7a:8c:b8:bc:db:4e:5b:8f:
4a:07:d1:11:94:5d:fc:00:2a:93:2c:9c:be:70:d7:
2f:a8:1b:6f:f4:2c:2a:c2:00:dd:a3:93:4b:37:6e:
bd:ea:f8:4a:7d:83:52:68:5b:50:16:bd:9d:13:89:
e6:ee:5b:4d:f9:f6:f0:f4:7f:f2:78:c5:9d:0f:cb:
00:8a:75:af:f9:ab:43:35:23:a8:26:6b:01:12:3c:
c0:87:b5:a8:cd:0c:85:64:59:01:f8:38:3c:c2:3c:
e8:7e:40:8f:4b:d3:d8:89:52:5c:48:32:4d:12:f6:
84:e6:6d:16:c2:81:50:da:cf:a6:4a:66:24:4f:bd:
a6:ae:d6:db:f0:5f:48:5d:43:6e:c1:4d:91:15:c4:
7c:56:35:9a:1d:52:cd:66:c3:22:f8:99:09:ab:a3:
c4:0d:41:f9:30:f6:42:df:be:39:44:b6:91:5a:f5:
b8:74:83:f2:33:33:5a:12:29:a6:00:15:f4:84:f4:
06:ba:23:2e:27:ea:2a:db:b0:45:8c:f8:b8:06:6c:
be:58:0c:b6:d3:d5:1d:f3:de:5c:20:a1:fa:b8:f5:
2a:e7:66:18:4c:38:be:c4:58:ad:2a:8d:a8:55:a3:
bc:d3:56:7d:d3:20:a2:75:70:3c:3b:79:03:20:7a:
d4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:59:7A:1A:33:32:3C:C4:FE:27:68:54:9A:2C:97:8B:B3:00:1B:5A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CFl6GjMyPMT-J2hUmiyXi7MAG1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
51:11:ec:ea:b7:fc:e7:8b:a0:ce:ea:dd:82:7b:b3:c8:f8:a0:
4d:88:22:5a:c3:7d:03:87:6f:f2:d2:63:79:d9:35:3a:63:3f:
69:9f:2e:cb:eb:e5:cd:a2:72:0a:d8:73:4f:66:11:59:55:0f:
50:fc:c1:d7:81:b0:c8:02:6b:08:ec:38:e7:59:b4:bb:0e:e5:
eb:f4:b1:51:31:80:c4:f6:7e:8d:1b:17:f0:69:66:e5:0f:0d:
41:e1:ef:74:e2:de:a5:3f:22:94:1d:1f:f2:ec:92:65:70:17:
59:08:de:be:fd:b7:c6:78:dd:94:f2:02:80:9d:43:14:f9:24:
94:69:db:02:b4:97:df:11:7d:a6:96:d4:b6:77:3e:6c:86:a0:
41:ba:12:a8:75:30:86:de:04:20:ab:a8:f3:4e:18:0a:3e:ce:
93:79:8b:cd:22:46:da:d6:0c:9b:d5:8e:3d:65:b6:0f:31:7f:
fe:78:32:df:db:c9:ee:b9:62:48:0a:df:98:6b:e2:ab:9c:af:
81:e6:54:7e:2e:c7:ce:26:c3:06:4d:97:cf:a2:97:1f:b9:e6:
c0:35:7e:a4:12:f8:05:27:cf:a5:b0:57:3b:95:f0:85:89:2e:
0e:ec:4c:a8:16:db:70:08:72:05:be:f6:aa:3f:1c:ed:f2:11:
6d:a0:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:04 2025 by rpki-client