Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/tVkzOGYvm9Ue0p1DtZsOv0Qo5ww.roa
File: tVkzOGYvm9Ue0p1DtZsOv0Qo5ww.roa (raw, json)
Hash identifier: 1l4DY4og67nsoecheqcUHwFJJl1I+VZAOse9iPXrkJI=
Subject key identifier: B5:59:33:38:66:2F:9B:D5:1E:D2:9D:43:B5:9B:0E:BF:44:28:E7:0C
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0198E1B70426F9B9FC13ECE9B79E7BBE7C0F
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/tVkzOGYvm9Ue0p1DtZsOv0Qo5ww.roa
Signing time: Mon 25 Aug 2025 14:52:04 +0000
ROA not before: Mon 25 Aug 2025 14:52:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33058
IP address blocks: 95.155.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:b7:04:26:f9:b9:fc:13:ec:e9:b7:9e:7b:be:7c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 25 14:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5593338662f9bd51ed29d43b59b0ebf4428e70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:72:be:7c:80:47:41:06:43:4c:02:53:a0:
02:4c:9c:dd:0c:79:84:c3:25:63:7b:fd:86:ea:8e:
45:95:80:66:8a:ec:4c:2a:f9:0d:82:ea:a6:da:0b:
df:ed:e5:07:8e:8d:47:b1:13:39:c1:fd:43:b8:73:
12:cb:06:c9:9d:cc:95:ae:b7:60:82:4f:93:e6:38:
8e:f0:78:78:56:cd:d9:1b:24:15:a1:3f:d0:72:ec:
6c:59:1a:87:ac:12:f8:68:f1:c5:f3:cd:b3:7c:d9:
a9:3f:24:e9:62:1f:6a:79:0a:85:88:dd:34:ae:65:
32:ee:f4:6c:82:5b:50:ba:49:76:df:43:22:3e:67:
88:de:34:1c:1d:cc:1e:d1:c9:2a:d9:e0:ae:b0:fb:
7d:d4:20:69:12:f4:40:57:33:9d:89:15:8b:b0:52:
4f:6f:45:ab:0b:6b:a0:dc:39:66:c4:8b:bd:13:6d:
e0:28:69:90:84:b5:a7:26:61:da:7d:d9:f2:2d:0e:
72:23:30:1e:37:08:b9:c0:c2:1b:6f:04:be:58:59:
e7:fb:c5:4e:a7:59:e8:cf:3c:db:c2:75:88:de:04:
59:d6:5e:6b:b2:00:c0:af:fb:fc:55:b4:3e:de:c5:
cf:46:76:2a:d6:69:83:99:a3:bb:4e:7c:c6:99:eb:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:59:33:38:66:2F:9B:D5:1E:D2:9D:43:B5:9B:0E:BF:44:28:E7:0C
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/tVkzOGYvm9Ue0p1DtZsOv0Qo5ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:30:20:46:02:7d:f3:d9:d7:f8:0b:56:98:ce:c3:ad:ad:e1:
1a:b5:7c:6c:9f:de:dc:27:a8:3f:6a:0e:ba:e5:de:4c:d9:e5:
2e:6e:0a:ca:ec:27:20:99:5c:52:47:04:e6:a3:97:8d:23:7c:
bc:67:30:10:fa:75:36:58:58:9c:91:de:40:20:db:a9:84:89:
c3:d3:d7:82:96:27:eb:e4:55:b3:f9:1e:62:98:2d:11:37:63:
1d:49:4f:3f:f1:32:6e:f1:84:02:ff:51:74:ca:48:62:8f:9f:
ac:10:49:df:25:b1:aa:70:1c:fb:d2:17:34:ad:34:5a:06:a4:
9d:71:0d:0e:bf:a4:cc:94:94:1c:31:a4:ec:37:50:33:ef:83:
f8:fc:8e:44:63:31:dc:c1:83:64:09:83:91:d9:41:b9:3f:ba:
9c:c2:d6:bf:7f:8b:26:01:c4:ca:e0:b4:57:42:f1:1b:81:84:
c2:2e:73:a7:92:b1:52:e7:c9:de:c4:ea:99:de:eb:46:51:07:
2b:db:e2:bd:45:4f:5d:4a:3c:28:02:3b:9b:84:98:3d:e2:f7:
ad:8e:d0:00:a0:23:d8:24:ab:96:c9:af:ec:6b:98:f5:7a:7e:
3f:da:f0:01:5a:ce:44:39:e1:cc:a6:8f:0c:02:e8:18:1a:be:
4f:2c:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:28:11 2025 by rpki-client