Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/vGoHfriPki42R6sM4AGNaZ6Sim4.roa
File: vGoHfriPki42R6sM4AGNaZ6Sim4.roa (raw, json)
Hash identifier: QcwTT5U/Z4Mw3Ga8Qis4P0Rl1OjYiRfOAUfd5c277Jw=
Subject key identifier: BC:6A:07:7E:B8:8F:92:2E:36:47:AB:0C:E0:01:8D:69:9E:92:8A:6E
Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial: 019889EB2049554CD0EE4F80206AF8CFA303
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/vGoHfriPki42R6sM4AGNaZ6Sim4.roa
Signing time: Fri 08 Aug 2025 13:42:24 +0000
ROA not before: Fri 08 Aug 2025 13:42:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16344
IP address blocks: 185.181.148.0/22 maxlen: 24
212.122.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:eb:20:49:55:4c:d0:ee:4f:80:20:6a:f8:cf:a3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
Validity
Not Before: Aug 8 13:42:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc6a077eb88f922e3647ab0ce0018d699e928a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:1b:3b:c5:89:b3:cb:17:ef:38:c1:41:ce:
b6:85:80:4a:7e:0e:bb:96:c0:ba:b9:08:41:cd:7c:
41:3d:cc:03:fa:ca:ff:fd:b2:4b:ef:e3:06:2f:86:
58:9d:c2:c5:8d:d5:b4:a1:25:d3:84:30:0a:1c:37:
df:68:11:d4:f6:ed:ff:7c:e6:cf:33:fe:fe:90:1a:
d5:a1:a6:cc:17:80:e3:66:6f:4f:af:60:97:03:af:
db:64:8e:d0:2d:a0:9d:5c:54:90:bb:38:4d:5a:73:
32:f9:da:63:5f:2e:13:e5:83:73:e6:27:62:98:e5:
ae:5f:7b:3d:25:b4:26:6d:b2:fd:2c:d9:5a:15:c6:
d0:e4:c4:4f:24:4b:b9:50:b1:3a:d2:c3:13:c8:fd:
2c:03:09:16:ba:7f:1a:90:89:50:a2:66:b8:f0:b9:
20:7a:26:91:98:da:39:a5:07:1b:b4:72:f3:7e:d2:
37:bd:cd:de:80:b0:11:19:51:fa:fc:cd:51:3b:f0:
b0:55:92:57:23:97:3e:84:ae:b4:ad:91:57:f1:5f:
50:3a:f9:bb:34:49:8d:ca:06:09:19:77:b8:97:c8:
00:b7:f7:64:9b:fe:84:18:fc:77:df:52:cb:9a:ec:
d2:91:8a:f5:fb:17:5d:8d:a5:f7:1a:9d:f3:20:bc:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6A:07:7E:B8:8F:92:2E:36:47:AB:0C:E0:01:8D:69:9E:92:8A:6E
X509v3 Authority Key Identifier:
keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/vGoHfriPki42R6sM4AGNaZ6Sim4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.148.0/22
212.122.160.0/19
Signature Algorithm: sha256WithRSAEncryption
97:08:60:e1:2c:96:4d:fe:71:da:cf:36:66:40:2d:e1:c7:35:
54:79:14:56:88:2e:14:4a:97:0a:41:99:8d:6c:fb:a1:37:22:
f6:ed:12:7a:02:4e:3a:03:7f:cb:59:42:d7:55:6a:47:5e:48:
db:dc:c2:12:07:09:42:1b:5e:ff:59:7a:eb:6e:23:ae:7d:61:
9b:61:96:d4:0e:61:7c:7e:c7:09:56:c5:dd:cd:7c:40:86:b0:
7c:3d:82:44:41:64:47:ac:71:5d:f0:d5:04:9a:0e:45:f9:88:
db:06:b5:3d:e2:b8:c0:21:6f:64:94:04:5a:a2:1c:88:df:df:
64:56:21:6e:8c:51:04:ef:04:e9:ee:94:64:78:a8:f2:ad:a2:
c4:e5:17:1c:f1:10:d0:17:fc:22:5a:b9:ac:59:25:fe:97:6b:
52:96:cd:69:70:96:4c:62:e9:a4:9e:41:15:24:fe:0c:bb:5a:
34:b0:d8:1c:09:03:a6:a0:46:47:57:c7:dd:94:c5:d7:de:0c:
ac:bd:b6:49:e1:0c:c4:4b:24:5b:b4:b5:54:45:3c:e4:a6:0f:
9a:87:c7:ba:c7:88:8c:e7:00:74:ec:4a:5c:48:5a:37:c1:f1:
cb:08:24:fb:21:ff:a6:78:96:71:4a:02:3a:0a:3b:b9:ea:3e:
45:cf:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:11 2025 by rpki-client