Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/kqVgG5IaLNIl62LJ665IFzhdX_E.roa
File: kqVgG5IaLNIl62LJ665IFzhdX_E.roa (raw, json)
Hash identifier: /utNls9uHQqkq54knX2xtyOSW9O96iyuo8ILzQ7d4s4=
Subject key identifier: 92:A5:60:1B:92:1A:2C:D2:25:EB:62:C9:EB:AE:48:17:38:5D:5F:F1
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 0197449497588F825EE9B9A0C36091C57C08
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/kqVgG5IaLNIl62LJ665IFzhdX_E.roa
Signing time: Fri 06 Jun 2025 09:31:17 +0000
ROA not before: Fri 06 Jun 2025 09:31:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.143.16.0/24 maxlen: 24
193.143.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:94:97:58:8f:82:5e:e9:b9:a0:c3:60:91:c5:7c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Jun 6 09:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92a5601b921a2cd225eb62c9ebae4817385d5ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:75:6d:88:b7:c8:90:cd:56:ee:0f:18:67:
2d:fb:f2:6d:12:9d:50:97:3d:ed:2a:d9:07:8b:42:
99:b8:e0:fd:c8:0b:2d:5d:5d:d6:be:bf:bd:f7:bd:
ee:4a:49:10:47:bc:95:ec:14:85:4a:e0:b4:b1:e5:
fe:46:30:1d:57:55:83:d8:6e:68:ae:cc:4a:e3:7d:
54:7b:75:ec:06:c2:dc:40:e0:e6:45:0c:b9:aa:d2:
6d:a2:28:d8:3d:03:59:57:c5:b5:77:b7:23:53:1b:
b9:2f:ba:a8:7a:16:3c:94:a5:3b:de:cf:9e:1e:fe:
88:e6:d9:ef:d9:f3:ca:c6:b9:77:9a:03:99:52:26:
dd:8a:88:0c:87:6b:32:1b:05:fd:7e:be:71:b6:b6:
62:4c:7c:06:cc:55:20:9a:8f:2f:74:87:20:fe:ef:
c3:42:ac:e8:cd:ce:1b:8c:00:2a:2e:eb:c8:71:d5:
74:1f:87:cc:92:b8:46:f1:c4:29:80:bd:eb:8a:f9:
38:ef:10:88:3e:94:2a:af:f4:d2:95:2e:72:f7:77:
1e:d1:c4:b5:ba:19:43:e9:84:a5:7d:96:31:ca:e9:
74:59:4a:48:c2:d3:a2:33:bf:02:20:b5:8c:56:76:
d8:47:3a:22:a2:03:07:6c:7b:ad:d5:e1:71:1b:dd:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A5:60:1B:92:1A:2C:D2:25:EB:62:C9:EB:AE:48:17:38:5D:5F:F1
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/kqVgG5IaLNIl62LJ665IFzhdX_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.16.0/23
Signature Algorithm: sha256WithRSAEncryption
63:04:b5:24:9e:11:06:88:51:ba:13:46:b3:f8:2a:88:6f:06:
ac:3f:90:5a:89:6f:bb:24:a6:0e:ed:ca:fd:6b:6a:c9:ef:38:
a5:4a:92:b5:b8:ba:e9:b0:cd:7a:ee:0d:40:f9:0c:f7:ce:50:
13:a3:c3:42:96:78:7a:2f:c9:1c:cf:dd:c5:33:4e:07:28:cf:
dc:fd:cf:97:48:6c:06:54:b2:f5:27:9a:a7:b8:2d:ba:2c:68:
0a:29:b0:1a:77:a6:a2:8b:f6:0a:3e:ec:1c:63:c9:18:66:2e:
08:fa:0b:03:88:f1:30:28:e3:a3:cb:73:b5:db:97:22:aa:c0:
26:0f:38:25:92:cb:ed:d2:63:2a:09:c6:a1:d5:9e:35:16:5f:
1e:f6:10:92:99:7c:c4:70:13:1d:58:d1:25:30:2f:12:f0:3c:
8c:08:d0:55:db:d0:ac:f4:c5:85:bf:bb:8e:31:16:fc:af:6b:
b6:bd:d9:8f:84:eb:14:1d:59:9c:30:e2:36:af:12:39:dd:8f:
aa:07:e7:f9:0c:25:4e:43:79:0a:49:0c:31:44:15:d7:c6:73:
53:75:6e:81:03:56:c2:ab:ab:70:c5:e0:8d:70:44:3e:e9:12:
14:90:3a:c6:d9:ae:1f:79:84:49:22:a0:a9:02:61:40:1e:0e:
86:e8:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:25:35 2025 by rpki-client