Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/duv4en-kEZVnVXOXNGPZW_Jyrcw.roa
File: duv4en-kEZVnVXOXNGPZW_Jyrcw.roa (raw, json)
Hash identifier: /NQGSNT25LxwGXN6iIBj1hB3qklD/ePBBcZOp63AVyY=
Subject key identifier: 76:EB:F8:7A:7F:A4:11:95:67:55:73:97:34:63:D9:5B:F2:72:AD:CC
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 01991F9C585091DA20A47C0483B487AC2677
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/duv4en-kEZVnVXOXNGPZW_Jyrcw.roa
Signing time: Sat 06 Sep 2025 15:19:23 +0000
ROA not before: Sat 06 Sep 2025 15:19:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56910
IP address blocks: 185.106.38.0/24 maxlen: 24
185.106.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1f:9c:58:50:91:da:20:a4:7c:04:83:b4:87:ac:26:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Sep 6 15:19:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76ebf87a7fa41195675573973463d95bf272adcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:ac:0c:c9:25:71:47:fc:70:fc:b1:46:37:
b9:6a:70:be:63:48:10:af:e0:5f:03:7f:0b:03:ec:
27:5c:cf:23:53:81:67:65:4e:b5:69:62:5e:88:f4:
c1:91:75:82:f5:d3:5e:d4:98:c0:ed:eb:5b:39:98:
69:01:08:34:b7:10:09:3d:d6:ba:4b:48:45:1f:0e:
3a:cf:8a:c6:54:08:47:ff:fb:e5:1e:e9:79:e5:bb:
84:b0:70:d9:d9:db:ef:10:30:36:12:5c:a9:4e:e9:
2f:1d:6d:20:a7:3c:c9:0f:cc:08:b9:e0:65:de:f1:
1d:26:a7:a0:4c:d8:f0:a1:d5:89:5c:0c:79:c0:79:
59:f3:cb:e5:14:ce:6e:1f:1f:b2:b8:8c:39:5e:05:
bb:ad:73:5c:23:bb:57:df:1a:ca:da:ab:4c:33:d6:
84:aa:c3:40:c6:b8:e7:75:94:38:a9:98:92:66:dd:
36:1d:90:11:e5:0a:bc:e4:b9:40:37:7c:8f:c9:ce:
e7:19:74:a6:6f:f6:b9:df:d5:62:4c:bf:da:3c:82:
21:6f:9f:89:dc:15:13:1b:48:d6:ef:ab:96:93:c7:
c1:51:61:43:ea:56:c1:13:b1:5d:de:7b:0e:78:7d:
94:80:83:94:b6:99:11:26:08:54:3e:4e:67:d8:a2:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EB:F8:7A:7F:A4:11:95:67:55:73:97:34:63:D9:5B:F2:72:AD:CC
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/duv4en-kEZVnVXOXNGPZW_Jyrcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.38.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:cc:68:dd:d1:00:96:24:52:b1:40:34:69:f1:90:c4:2c:2d:
7e:7f:c4:a0:2d:69:cc:7a:58:c7:0f:04:47:73:4c:47:db:50:
39:62:5a:98:fa:1e:c6:51:8c:be:e6:11:2d:e2:98:59:3c:e8:
24:af:3c:e4:ac:8f:a6:64:f2:8c:db:04:f3:b0:75:cd:ff:3e:
d9:d1:3e:f2:49:39:1d:c1:35:9f:2e:13:31:84:0f:22:4e:3e:
00:56:a7:8c:cd:d6:e9:64:e9:60:0e:16:a8:ed:06:23:4a:6f:
2e:7b:54:a5:27:f5:9d:5c:31:5a:10:fe:7e:37:d3:8f:f7:7b:
33:74:9e:b6:cf:6a:d9:e8:e9:ae:98:a1:e8:97:69:12:ed:09:
69:f6:e3:fd:c4:b8:a5:4a:4b:f4:74:29:f4:8b:96:65:b5:8b:
d4:81:60:93:4c:46:a9:3a:6f:bf:47:81:7a:aa:64:76:5e:40:
42:81:94:f5:f9:eb:56:ad:6c:91:38:49:90:d9:33:77:17:07:
43:30:35:85:18:66:1e:77:e4:dd:e6:e1:2c:cb:41:43:7e:1a:
ca:10:94:93:dd:d7:13:2c:61:d3:f9:8c:98:ce:4a:3c:9b:5d:
80:e2:cc:51:de:d9:67:7d:f1:3f:9c:a7:ea:c9:14:8b:17:97:
b5:4c:0b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:14:16 2025 by rpki-client