Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/CeX7E3fZXVsdPANui7LEojY4jyY.roa
File: CeX7E3fZXVsdPANui7LEojY4jyY.roa (raw, json)
Hash identifier: knL0+PqLOBqomAg/sncBbQWcoQB5Mmxq54ysIaZdoTY=
Subject key identifier: 09:E5:FB:13:77:D9:5D:5B:1D:3C:03:6E:8B:B2:C4:A2:36:38:8F:26
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01971C847FEEAB7475746B518F35EB2A236C
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/CeX7E3fZXVsdPANui7LEojY4jyY.roa
Signing time: Thu 29 May 2025 14:48:54 +0000
ROA not before: Thu 29 May 2025 14:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 93.88.152.0/24 maxlen: 24
93.88.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:84:7f:ee:ab:74:75:74:6b:51:8f:35:eb:2a:23:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: May 29 14:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09e5fb1377d95d5b1d3c036e8bb2c4a236388f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9e:db:33:30:f7:f3:66:3e:39:ef:9f:ac:d1:
b2:b9:cf:3a:d9:43:29:b4:f3:9c:8e:58:6d:e7:fa:
06:7d:83:4e:e5:be:c4:14:92:0a:2e:69:76:fd:1f:
71:c3:46:9d:9c:27:70:42:7f:e8:1f:44:8f:45:46:
c4:1b:ec:cd:46:02:61:5b:8b:e2:3d:5a:f7:54:de:
ce:18:ef:69:15:f2:88:07:39:00:1f:6d:42:1e:63:
6c:9a:64:12:61:68:e3:b4:20:0c:bb:80:04:42:80:
58:68:b8:c5:65:15:5b:c0:42:da:bf:2b:95:b0:b6:
2d:84:69:52:8c:13:a6:ef:49:29:9f:ad:8a:ce:96:
e5:e0:d7:e8:94:3e:ef:0f:76:9c:5c:be:b6:47:e1:
ad:3b:6c:e7:a7:52:09:72:2c:c4:26:10:13:75:de:
60:f1:50:79:5d:a1:ab:f8:79:59:e6:52:7b:33:12:
d2:23:e7:80:f9:6e:96:29:0d:9d:5f:fe:5d:1b:02:
29:ad:69:0d:e4:67:c8:03:47:8f:35:85:b9:48:30:
b0:72:94:bf:f0:5c:57:b4:6f:b4:46:4e:53:38:56:
32:0a:17:21:58:4a:ad:78:aa:10:99:b4:4c:da:ad:
03:93:68:85:c7:a6:c5:3e:33:f4:2d:1b:8d:f8:72:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:FB:13:77:D9:5D:5B:1D:3C:03:6E:8B:B2:C4:A2:36:38:8F:26
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/CeX7E3fZXVsdPANui7LEojY4jyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.152.0/24
93.88.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:03:82:3f:03:5f:57:57:6d:6c:94:dd:b6:5d:75:2d:d9:06:
59:00:bb:ac:2b:87:ce:d7:b7:62:96:0f:49:35:a7:c2:1b:5c:
2e:24:f5:ab:42:e3:41:39:ea:9c:2b:a9:1c:fe:e3:80:2d:2d:
21:d2:e2:e9:a1:40:b6:fe:67:c4:38:ea:c3:a4:57:13:a1:b2:
53:43:d7:fc:7b:36:85:ab:63:b8:ab:10:b2:82:5f:db:ec:72:
15:ad:32:94:46:83:25:2c:10:ba:8c:91:28:e8:34:2a:5d:77:
06:51:da:82:80:90:25:50:14:d0:9c:85:03:50:34:c9:25:e3:
84:b2:d6:cf:99:96:2e:ce:f6:ae:4e:f4:b5:78:af:22:52:bf:
ba:06:95:93:28:12:3c:30:f7:ff:28:c6:d7:8d:cd:f9:4b:f5:
9b:00:c5:4b:d3:e0:88:6a:a2:45:82:4c:87:5b:b3:55:cb:e0:
ea:40:56:7c:0c:53:a7:f1:7b:ed:2c:89:9d:fc:a5:71:35:69:
dd:64:42:f3:c4:fd:b7:98:f7:e2:fc:1e:7a:fe:f0:22:0e:d8:
7e:dd:6f:42:96:b1:62:06:48:12:66:de:51:1e:15:29:35:0b:
13:21:ae:3f:bc:33:17:cd:1a:49:bf:bf:63:9a:6c:4b:10:95:
5b:24:d3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:25:49 2025 by rpki-client