Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/cwUw4r66mgFDQSAWHl8IOB481uU.roa
File: cwUw4r66mgFDQSAWHl8IOB481uU.roa (raw, json)
Hash identifier: oxVCix1jZODp+gFXYdLwuyYilIjkNBRGuleGsoBxqc4=
Subject key identifier: 73:05:30:E2:BE:BA:9A:01:43:41:20:16:1E:5F:08:38:1E:3C:D6:E5
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 0198E56F2A8AC3D27F17B5504870607C97BF
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/cwUw4r66mgFDQSAWHl8IOB481uU.roa
Signing time: Tue 26 Aug 2025 08:12:04 +0000
ROA not before: Tue 26 Aug 2025 08:12:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 93.127.156.0/23 maxlen: 24
93.127.160.0/24 maxlen: 24
93.127.161.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:6f:2a:8a:c3:d2:7f:17:b5:50:48:70:60:7c:97:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Aug 26 08:12:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=730530e2beba9a01434120161e5f08381e3cd6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:88:17:86:e1:24:29:fa:4e:ac:09:6c:a8:
df:15:b0:4c:75:4d:23:77:fc:7f:f1:e6:97:83:60:
1e:5c:7c:9f:c1:7c:59:04:de:3f:a1:c1:21:68:c4:
29:12:02:ac:f1:ad:6a:20:9e:09:bd:96:39:c1:e6:
e8:8c:1a:70:17:f4:f4:81:4a:55:b9:ff:d6:9e:6e:
d7:07:13:fb:2d:5c:b3:b2:a5:92:6e:5f:b1:0e:95:
40:74:9a:7b:0c:89:cd:89:a6:8c:15:ee:84:42:70:
9a:8a:1e:81:73:3c:f1:c0:65:c9:83:81:14:b2:70:
ff:ef:24:20:6f:05:c5:b7:3a:42:62:91:e3:ab:db:
f0:13:a1:83:6e:99:f3:2c:17:80:b5:83:5b:a2:64:
d9:33:3d:ad:b2:15:06:f8:d7:86:45:6a:09:04:7c:
14:8f:c7:07:55:d7:7e:3a:01:dc:2a:b7:53:ab:da:
c4:42:c1:20:95:51:a7:22:90:a6:9d:64:28:dd:c4:
ea:40:f6:f0:45:1d:a7:4a:39:4a:89:16:05:26:6e:
a9:5c:fb:a2:ba:3f:ff:9a:6c:1d:75:66:b9:4d:e9:
be:c5:3f:dc:83:08:9f:d0:ec:28:c6:d5:81:50:5c:
3f:e0:9f:47:c4:33:4f:01:67:7d:cc:97:08:7b:8f:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:05:30:E2:BE:BA:9A:01:43:41:20:16:1E:5F:08:38:1E:3C:D6:E5
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/cwUw4r66mgFDQSAWHl8IOB481uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.156.0/23
93.127.160.0/23
93.127.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bf:a0:77:39:6e:df:b9:58:13:46:5b:c2:a4:91:7c:75:bb:
50:c2:72:a5:e7:ca:1e:3e:83:91:46:a2:63:b2:d1:0b:4d:7e:
8b:41:04:8e:f0:60:59:be:fe:79:ab:03:0c:5a:86:1b:8c:3d:
35:11:71:ff:aa:e6:cf:78:87:c8:98:e3:b3:1a:fa:57:eb:14:
9e:4b:a8:8a:6c:f1:c4:76:f7:c3:26:47:31:23:14:7f:b0:bb:
af:12:a6:36:e1:4d:bd:12:29:77:8e:c2:6f:b3:42:16:fb:69:
48:e0:a7:4c:21:a4:e5:89:a8:75:6a:59:e4:22:64:c7:54:00:
62:d5:30:f2:07:72:5e:b4:30:27:8d:e3:09:e4:d4:f8:1c:a9:
c7:8b:a8:6c:1e:4e:5f:18:e9:9a:2d:22:96:d8:b9:41:34:1d:
02:08:37:ef:fe:18:56:4f:5c:08:3b:d9:2e:8d:42:16:81:b2:
c4:7b:14:4c:c9:b7:d0:e8:29:fa:79:7a:5e:f5:60:be:13:12:
5c:1e:da:a7:9c:9f:ac:cd:14:b2:cf:8c:db:96:20:1b:d9:40:
94:d4:65:30:55:e7:00:d3:c3:69:0a:e2:ea:46:01:f4:e5:27:
b1:82:36:49:7c:b6:e7:42:98:55:47:22:1c:cc:7d:1d:49:b3:
08:c7:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:35:25 2025 by rpki-client