Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/US4urt8SGYSwI0nrEmSfY23OtMo.roa
File: US4urt8SGYSwI0nrEmSfY23OtMo.roa (raw, json)
Hash identifier: WGkLaX+bRS10FeqEfnkw5XXJQ/dEDlUw6wG2fIeU7p0=
Subject key identifier: 51:2E:2E:AE:DF:12:19:84:B0:23:49:EB:12:64:9F:63:6D:CE:B4:CA
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019813AFEBBBD887DE909D33C51A16438AC5
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/US4urt8SGYSwI0nrEmSfY23OtMo.roa
Signing time: Wed 16 Jul 2025 14:42:32 +0000
ROA not before: Wed 16 Jul 2025 14:42:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7922
IP address blocks: 95.164.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:af:eb:bb:d8:87:de:90:9d:33:c5:1a:16:43:8a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 16 14:42:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=512e2eaedf121984b02349eb12649f636dceb4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:ea:9c:d2:4a:18:aa:3e:37:2d:67:d8:4a:
2d:4e:92:c6:9f:67:91:4d:8f:84:3f:c6:a1:b5:2a:
72:ee:07:86:de:56:d4:87:0b:93:c0:f7:f3:78:b3:
7f:2d:4b:a2:ff:63:71:2e:e8:fd:08:60:03:f8:05:
da:07:01:0a:af:21:ea:7b:06:42:45:a7:f9:6e:20:
88:88:25:86:3c:91:29:b0:5f:84:ba:1d:a0:a0:2a:
15:dd:bd:95:aa:30:d5:f9:42:96:08:d9:92:03:c4:
f2:8c:93:5b:6a:21:93:a9:56:64:90:eb:ed:02:50:
25:72:5d:99:65:b4:d4:39:53:d3:ae:b2:73:16:76:
ff:92:a2:9e:e3:9f:eb:69:08:f4:4a:45:d1:56:12:
a9:6b:cc:4c:6f:49:52:70:4e:f9:94:ad:67:4b:b2:
5e:3a:c3:9b:3e:4b:82:f5:5a:a8:27:85:be:7f:92:
4a:9e:d8:14:b8:cc:25:01:e6:eb:1f:85:45:4d:05:
bf:7a:20:8d:12:3a:c5:af:3f:2f:0d:f7:91:83:e0:
0d:1c:3f:40:33:40:64:0f:d5:47:61:de:22:65:8e:
64:c1:1e:df:ac:c9:54:77:e0:c5:1a:b7:24:1e:38:
6e:31:04:96:ab:20:77:fa:fe:e4:11:5e:45:22:c6:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2E:2E:AE:DF:12:19:84:B0:23:49:EB:12:64:9F:63:6D:CE:B4:CA
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/US4urt8SGYSwI0nrEmSfY23OtMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.224.0/22
Signature Algorithm: sha256WithRSAEncryption
69:f0:c1:bb:4b:71:94:ed:8a:1e:6c:06:7f:df:67:09:2f:00:
0c:ba:ce:97:62:14:83:48:9a:c3:23:2e:eb:92:ac:60:82:ef:
29:8d:9f:5f:b5:57:6e:f7:4c:3b:bb:f4:4e:b1:e4:69:93:25:
95:50:67:a6:f1:07:f9:11:e3:12:95:2d:0d:c5:57:59:c2:83:
fb:61:b4:e9:da:26:14:d7:6d:8f:eb:ab:e8:82:ff:94:20:0b:
fe:c9:3b:ba:af:76:9d:58:fa:6a:62:08:ee:aa:17:c0:6d:13:
1a:db:6e:75:83:89:b2:9a:ad:82:7b:60:33:59:c0:e6:bf:31:
32:cb:a2:5b:8d:87:e0:83:2b:bd:90:f8:75:c2:f9:3a:51:12:
57:92:e6:8a:0c:29:fb:4b:ee:b1:69:04:40:84:b3:8a:0d:22:
8c:3d:fb:58:21:12:29:32:fa:3d:f5:0e:de:cc:70:52:f2:85:
26:f0:b7:df:79:2b:e4:d5:46:ef:3a:20:26:44:9f:65:3d:57:
28:59:45:18:78:f6:e8:0d:31:22:3a:27:63:1c:fb:df:95:43:
7c:e0:a5:c7:4a:34:f6:d3:f7:5b:e3:32:5b:c4:ed:1f:73:e0:
41:f7:2e:1a:42:a7:e2:b4:d0:22:5f:90:7b:22:67:7d:fd:bc:
d9:1a:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 21:00:34 2025 by rpki-client