Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/r1CV8D1_y4TguGkYqv-ggeXr4c0.roa
File: r1CV8D1_y4TguGkYqv-ggeXr4c0.roa (raw, json)
Hash identifier: jDk4rmD0Q4dKvEGvkXrnmVvHn/m5l4R7RawW2v9/HZc=
Subject key identifier: AF:50:95:F0:3D:7F:CB:84:E0:B8:69:18:AA:FF:A0:81:E5:EB:E1:CD
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01971B04E506CD153AE3AE085D6F5F4B2C43
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/r1CV8D1_y4TguGkYqv-ggeXr4c0.roa
Signing time: Thu 29 May 2025 07:49:55 +0000
ROA not before: Thu 29 May 2025 07:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199218
IP address blocks: 93.88.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:04:e5:06:cd:15:3a:e3:ae:08:5d:6f:5f:4b:2c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: May 29 07:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af5095f03d7fcb84e0b86918aaffa081e5ebe1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:ca:4b:85:5d:c2:4d:4b:ef:39:1a:63:4b:
d6:ce:d5:8d:ce:c8:c2:d5:dd:92:64:87:2b:41:8f:
03:33:ed:18:5d:52:48:20:19:36:7d:56:ab:ee:4f:
92:a3:dc:ad:40:45:53:bb:ab:43:a5:25:6e:6c:e7:
ff:fc:b5:99:e9:52:95:0c:a6:37:5e:86:86:59:31:
7f:0b:6b:fe:f2:72:22:03:1e:48:00:de:2e:d0:2f:
b2:1e:46:73:c1:64:68:e4:7e:49:f8:6d:00:6c:f6:
4e:e3:16:df:7b:3f:cb:8b:3c:07:a9:7a:d7:80:ef:
d5:f5:62:08:ef:24:bc:de:ff:03:24:84:95:6d:aa:
62:e0:47:2e:1d:5c:0e:86:c8:b4:40:aa:c3:e8:a8:
39:1b:85:ef:c8:0f:de:e1:ce:41:e7:d3:ca:35:7f:
74:ea:00:c1:fc:a1:bd:bb:54:7d:3c:f2:8d:a5:af:
52:4b:2a:60:3e:28:82:69:cc:de:1c:cf:6c:8a:3a:
47:6b:d3:63:3a:ab:24:76:9a:5f:b2:72:91:18:f8:
bb:a5:4e:65:f6:5c:c0:58:7a:ca:3e:ef:81:0e:23:
92:6c:db:56:49:1f:7c:d9:b4:95:bf:d4:c7:1b:fa:
fe:0c:f5:22:d9:49:2a:80:a6:9b:5d:01:2c:5f:e1:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:50:95:F0:3D:7F:CB:84:E0:B8:69:18:AA:FF:A0:81:E5:EB:E1:CD
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/r1CV8D1_y4TguGkYqv-ggeXr4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.156.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d4:1e:98:a7:a3:85:99:37:8f:1e:68:38:ee:b7:62:6d:34:
fb:9f:df:dd:d3:d4:b0:61:ed:75:86:14:d9:49:06:ea:5f:7e:
ac:2c:09:9e:c0:48:24:b6:d5:80:7a:13:41:be:38:2e:9a:8f:
1f:81:5e:64:2c:e6:13:15:da:7e:e8:36:cf:b8:b5:43:d3:fa:
5e:4f:0b:b0:1a:cd:2f:65:28:76:f0:de:a7:cf:98:fa:17:59:
59:52:e3:af:04:0e:68:dc:cb:b5:3d:d4:b3:bf:4d:98:6d:ab:
37:b9:7a:a8:ca:ea:ed:a3:45:da:24:53:cd:91:38:a6:f4:a7:
6e:d2:69:94:58:9f:66:51:75:46:c4:f9:2a:82:23:80:ce:7c:
ea:0a:8d:cb:60:bd:32:cc:c9:4c:bd:16:2f:6c:d1:99:5d:9f:
fe:e9:e3:e9:d2:fd:02:c9:62:47:39:54:ac:af:f3:ee:cd:81:
07:4f:f1:e5:3a:a1:c4:2c:14:50:b5:7e:44:dd:54:67:09:fc:
48:8b:d0:3e:70:d4:08:a7:da:51:37:34:99:ff:8d:37:b3:9e:
0e:ac:28:32:b5:4f:f9:aa:58:97:b5:fa:38:9b:5b:09:3a:e5:
92:eb:69:c5:cc:45:01:3c:ce:75:6d:97:54:c5:86:52:44:98:
80:30:90:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:59:13 2025 by rpki-client