Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/tT9egEPZfOW0iJxsepbGA_UgQjg.roa
File: tT9egEPZfOW0iJxsepbGA_UgQjg.roa (raw, json)
Hash identifier: nJcChZ33Fi+iAdXvZOyTBjHIrvr+XcKOSiVdHqUG+CY=
Subject key identifier: B5:3F:5E:80:43:D9:7C:E5:B4:88:9C:6C:7A:96:C6:03:F5:20:42:38
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 0197184E013A6BC3B5C1B3D3DFEB3C3F5CFF
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/tT9egEPZfOW0iJxsepbGA_UgQjg.roa
Signing time: Wed 28 May 2025 19:10:54 +0000
ROA not before: Wed 28 May 2025 19:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206004
IP address blocks: 185.194.200.0/23 maxlen: 24
2a0a:4fc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:4e:01:3a:6b:c3:b5:c1:b3:d3:df:eb:3c:3f:5c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: May 28 19:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b53f5e8043d97ce5b4889c6c7a96c603f5204238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:59:95:56:6f:be:1d:1c:e1:82:1e:8b:51:b9:
08:67:93:92:c8:c4:cc:d6:40:d8:fa:1f:38:13:aa:
5a:71:35:4f:1d:17:b6:80:ef:0d:ba:18:d8:83:4c:
32:12:94:4c:dd:da:2f:02:ce:20:c1:25:ff:19:3b:
92:83:06:51:81:72:04:d3:3a:10:a9:3a:73:79:27:
0d:b9:eb:5e:ed:38:0f:58:c1:2a:d0:af:ba:55:38:
cc:9e:fe:5b:31:9a:b5:b7:88:f1:ef:a6:16:a5:d1:
27:21:fa:a9:88:ee:4d:6a:f6:a8:58:7f:2a:9f:c0:
3a:9c:5c:7f:29:0e:20:02:bf:ea:c8:2d:06:8f:17:
3e:ac:81:02:3c:36:25:6d:04:08:17:0b:c5:ca:c2:
0d:43:7c:35:f4:93:db:3b:8f:23:b5:41:c5:8d:cb:
8b:57:21:b7:ce:17:b2:ef:4a:88:1d:86:20:93:76:
6b:23:57:4d:ac:c6:05:cd:f8:d6:0f:2d:65:6a:a9:
8a:32:92:ab:43:f8:6e:f4:a9:a7:61:15:d2:d2:46:
49:c4:50:b5:62:e6:8c:73:ff:e0:5d:c4:ae:f3:d7:
4d:bb:d9:29:55:88:e5:76:71:c2:2e:80:da:93:46:
20:33:6b:8d:8f:69:ac:ac:26:5e:5b:51:c1:3b:6b:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3F:5E:80:43:D9:7C:E5:B4:88:9C:6C:7A:96:C6:03:F5:20:42:38
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/tT9egEPZfOW0iJxsepbGA_UgQjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.200.0/23
IPv6:
2a0a:4fc0::/29
Signature Algorithm: sha256WithRSAEncryption
70:99:c8:73:ef:9b:3d:16:66:42:c0:37:ad:09:33:bf:81:f6:
84:21:bb:0a:b7:fe:c4:4a:e4:d6:48:25:5f:7a:20:00:21:6c:
b6:7b:c2:34:4b:2d:57:42:d4:64:0d:fc:9e:6d:85:49:87:7b:
5f:b6:bd:72:92:f3:af:88:65:6c:d3:68:a7:53:6f:03:79:5f:
87:e0:ee:d8:b8:97:94:86:54:62:48:96:ed:31:91:8c:de:bb:
2e:77:b4:fb:64:69:e8:c1:8c:95:7c:8e:1e:d5:f4:bc:79:26:
a3:43:83:7a:10:06:42:66:72:64:12:f2:9c:31:cd:98:ed:68:
6a:65:db:41:52:ab:2c:83:b4:b6:10:9d:86:d5:c6:d2:89:b5:
ee:10:bc:b2:46:71:99:ea:6e:31:56:79:9b:a6:fa:49:8d:65:
b7:a7:8c:0e:c5:49:c0:68:aa:4a:73:2d:88:9e:1c:be:6f:78:
38:d0:65:a0:68:7b:4b:85:11:fb:65:7e:4d:37:0d:07:21:cb:
53:72:48:0d:35:b3:a3:67:1b:dc:a7:0c:30:7c:57:c3:26:98:
8e:e5:94:45:fa:aa:bd:b2:c3:9d:6f:26:b6:7e:df:0b:9b:5c:
d8:1c:8e:d4:7a:c7:79:04:ad:88:5b:d4:61:43:e8:92:27:c8:
07:45:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:18 2025 by rpki-client