Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moy1w0If6gryjTVBV6oRju1h3LM.roa
File: moy1w0If6gryjTVBV6oRju1h3LM.roa (raw, json)
Hash identifier: otlRM577WXSVydAKFBah6hqn3GxRyvXmEjcfZAM9OSQ=
Subject key identifier: 9A:8C:B5:C3:42:1F:EA:0A:F2:8D:35:41:57:AA:11:8E:ED:61:DC:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197D42F0DB5472EB9C6ADA5851429152390
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moy1w0If6gryjTVBV6oRju1h3LM.roa
Signing time: Fri 04 Jul 2025 06:45:42 +0000
ROA not before: Fri 04 Jul 2025 06:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 87.121.70.0/23 maxlen: 24
87.121.144.0/23 maxlen: 24
94.156.162.0/23 maxlen: 24
94.156.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:2f:0d:b5:47:2e:b9:c6:ad:a5:85:14:29:15:23:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 4 06:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a8cb5c3421fea0af28d354157aa118eed61dcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:57:69:14:05:6f:d3:44:86:3d:24:69:01:
c6:02:c6:e1:10:d6:5d:b9:39:af:80:df:cb:ef:1d:
0b:10:13:6f:38:f1:77:66:cf:33:67:9c:02:3a:ce:
0a:73:ca:56:a6:49:07:ab:31:5b:95:09:62:d8:ac:
ac:e3:db:d5:93:1e:f7:5d:ca:1f:c1:5d:fc:f8:bb:
df:cf:7b:9b:3c:bd:92:bd:af:f3:23:be:8a:ce:63:
78:b4:5f:a2:c5:b7:74:1a:f2:a0:ce:a9:d8:9f:c3:
f5:e4:47:f0:30:1b:40:f8:1d:54:56:de:15:2f:bd:
9b:6f:3b:b7:d2:ca:d7:b6:62:0d:f6:0b:c4:fa:cd:
7c:7e:b7:13:e6:f0:2f:73:82:ff:48:d8:b6:11:93:
83:5f:a5:f0:70:77:85:60:d1:c0:ab:f3:a9:4c:72:
93:40:74:17:45:43:cc:10:25:f2:1e:6a:e3:a6:b0:
49:fd:78:df:f5:83:be:78:31:f4:95:bf:d1:6f:55:
2c:29:f9:f5:41:11:78:c4:f4:43:97:54:8a:05:6d:
ab:df:a0:05:0f:2f:63:9e:ee:06:a7:1b:b1:11:15:
8c:93:dc:8e:49:50:93:6d:44:12:b6:31:d1:40:4e:
ce:cc:94:76:b7:57:8d:a3:36:3c:95:35:ef:53:b7:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8C:B5:C3:42:1F:EA:0A:F2:8D:35:41:57:AA:11:8E:ED:61:DC:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moy1w0If6gryjTVBV6oRju1h3LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.70.0/23
87.121.144.0/23
94.156.162.0-94.156.165.255
Signature Algorithm: sha256WithRSAEncryption
0e:86:d8:75:9c:c0:13:0a:b8:f1:bd:a8:90:dc:99:b6:a5:dd:
a7:8a:46:89:23:e8:5f:f4:23:23:19:eb:ff:db:17:ad:51:ea:
34:f6:52:2f:97:42:9c:77:74:19:7f:26:84:04:0c:a6:b0:e2:
d0:36:4c:64:91:7b:b3:33:a1:59:95:58:f6:db:30:84:be:7a:
c9:e8:f0:55:32:4a:bd:33:62:f5:c9:c5:4c:5f:46:c2:d7:20:
cf:83:6b:ba:ab:0c:74:65:1b:15:e1:9e:25:3e:6f:d4:a3:3b:
6b:c1:60:63:7f:b0:a2:1c:bd:98:b9:2d:4b:b5:4c:0b:49:8f:
d4:fd:54:10:88:b7:7e:73:2e:ea:ef:bb:6f:9a:0e:3e:fe:48:
88:ad:2f:80:31:d9:e5:23:65:52:99:a2:15:a7:11:d8:38:3a:
d6:98:2e:73:c9:b8:90:d0:99:96:46:f2:1d:d7:54:2e:ba:5e:
e1:df:d7:31:1b:f4:b8:1b:90:ec:14:86:4c:ea:26:51:b0:98:
65:0a:f7:c6:b1:58:0b:ff:e8:13:b6:cb:e4:26:ab:d5:ff:73:
6e:9e:d3:ec:28:29:84:f1:26:83:41:87:1e:b8:0d:00:61:67:
14:9b:57:53:31:dc:49:62:b3:52:0f:17:e1:89:6a:24:70:59:
ca:f4:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:22:43 2025 by rpki-client