Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/R6LB8WKxlLzDta0k-CifWrX3njo.roa
File: R6LB8WKxlLzDta0k-CifWrX3njo.roa (raw, json)
Hash identifier: oGHtYzVEuXUpEcOk/tt6qTa3YbqV4Ri2tPwQj0qmkPs=
Subject key identifier: 47:A2:C1:F1:62:B1:94:BC:C3:B5:AD:24:F8:28:9F:5A:B5:F7:9E:3A
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019838D6E8C146855606177F6D0C277F30AD
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/R6LB8WKxlLzDta0k-CifWrX3njo.roa
Signing time: Wed 23 Jul 2025 19:51:05 +0000
ROA not before: Wed 23 Jul 2025 19:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 109.122.15.0/24 maxlen: 24
109.122.20.0/24 maxlen: 24
109.122.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:d6:e8:c1:46:85:56:06:17:7f:6d:0c:27:7f:30:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 23 19:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47a2c1f162b194bcc3b5ad24f8289f5ab5f79e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:07:6d:6a:f7:26:d2:a4:47:10:bb:be:25:
f5:f5:32:f5:a1:18:2c:78:b8:f5:80:58:0d:e6:02:
17:73:7a:82:a6:ad:97:5f:e2:b6:51:80:8c:45:c1:
80:89:94:c4:f0:bd:19:3f:f8:a9:eb:2f:a6:e1:32:
97:69:78:0c:29:62:86:4b:ed:79:1d:6c:95:64:41:
f2:50:97:f2:3f:75:7e:93:2e:e1:5d:f7:f7:56:2e:
77:c2:61:56:16:e6:7e:b3:92:d0:e7:fe:0b:0c:1c:
d4:03:70:36:15:9d:b1:7a:3c:4b:b1:a4:91:01:b1:
f4:53:bc:10:2a:e0:d7:3c:74:ed:3e:a7:73:1a:c1:
52:86:cc:b6:66:73:17:54:79:54:e5:a6:8a:ec:48:
83:f0:69:40:9d:10:75:10:d6:04:53:65:b5:09:53:
3a:e4:5d:77:52:e3:b7:7b:1d:a5:63:b3:54:40:71:
64:ca:b3:7b:2f:1d:19:de:c1:a2:59:a0:07:7e:95:
d4:6d:01:b3:f4:5a:d0:35:77:b2:ac:22:cd:1c:d2:
bc:da:5b:64:a3:3a:50:c5:35:ed:bc:da:ab:68:a3:
19:3c:d0:18:68:41:16:34:cb:0e:ec:bf:1e:bf:73:
de:b7:3e:bf:cd:10:ba:34:61:c7:49:51:c8:80:e8:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:C1:F1:62:B1:94:BC:C3:B5:AD:24:F8:28:9F:5A:B5:F7:9E:3A
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/R6LB8WKxlLzDta0k-CifWrX3njo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.15.0/24
109.122.20.0/24
109.122.26.0/24
Signature Algorithm: sha256WithRSAEncryption
56:df:89:75:7b:1b:7b:75:ed:9a:c5:5b:c3:05:98:1f:58:2b:
23:96:07:84:54:e7:19:7a:34:cb:ed:4f:01:6f:7a:88:6e:96:
97:ef:82:ad:b1:c6:c4:ce:93:35:86:22:ba:94:19:10:a4:2a:
fc:30:34:a2:3e:db:b8:fd:7d:ba:46:be:26:1f:0e:d2:0d:67:
3d:fa:c7:21:0f:6c:de:7b:77:47:cf:d5:1c:24:ab:bc:ce:1f:
b8:f0:51:3a:e2:b8:25:3a:76:94:69:2e:08:fc:fd:99:67:6d:
1c:c6:20:a5:d5:15:ac:b1:5f:1f:18:a3:d9:04:29:a1:5e:9f:
48:2f:42:53:25:b9:e7:fd:9b:f7:43:87:61:55:ca:c7:36:4c:
8d:55:0a:62:e8:fd:52:fd:75:e0:52:8c:2a:02:98:68:2b:9c:
fe:9a:95:58:ce:63:5e:2d:68:c6:2b:ff:34:ce:6e:c4:4b:a4:
f8:6f:42:29:e1:95:59:79:80:3e:45:d0:e3:df:56:03:7a:ac:
76:4d:c6:6e:40:a8:57:12:89:7a:a4:b2:09:e2:6d:9b:b7:a4:
c0:eb:05:fe:69:7d:b0:5a:e8:2d:66:ba:3c:a5:1d:aa:44:54:
d5:d2:8f:50:24:80:8c:0c:0c:3f:65:24:5b:ae:cd:b5:9d:74:
3e:30:d1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:20:47 2025 by rpki-client