Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/tW5_MsXD8Z4eNdzGvaYrrYbe0cU.roa
File: tW5_MsXD8Z4eNdzGvaYrrYbe0cU.roa (raw, json)
Hash identifier: WKSd60p8hM1W1T4D9foAZg6Eq4OfyzlxAtqhj0VcOJI=
Subject key identifier: B5:6E:7F:32:C5:C3:F1:9E:1E:35:DC:C6:BD:A6:2B:AD:86:DE:D1:C5
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019856F5D86DAE1D8697D169CF0BC5E08635
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/tW5_MsXD8Z4eNdzGvaYrrYbe0cU.roa
Signing time: Tue 29 Jul 2025 16:13:28 +0000
ROA not before: Tue 29 Jul 2025 16:13:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199432
IP address blocks: 109.122.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:f5:d8:6d:ae:1d:86:97:d1:69:cf:0b:c5:e0:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 29 16:13:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b56e7f32c5c3f19e1e35dcc6bda62bad86ded1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:e6:24:48:f6:70:76:47:b1:aa:f2:75:ae:
a0:95:6f:88:0a:94:fd:07:f7:50:d7:93:0a:37:55:
d0:1e:7b:4a:c1:12:b0:ef:0c:70:0c:7d:99:3f:ce:
42:28:41:43:e1:9a:f5:19:64:b7:76:5f:13:39:fc:
b0:c8:55:b5:16:d9:9b:cc:12:54:f0:74:09:87:8d:
6b:24:df:ac:97:60:ec:2f:f1:32:b5:97:85:db:f3:
da:fe:d9:40:f2:b7:1b:cf:52:19:bd:75:00:6a:8a:
1c:0a:e7:37:9c:47:4b:02:da:c9:61:04:b1:6c:af:
8b:fe:44:5a:c6:c8:4c:53:dc:e3:88:b3:0b:71:cd:
5c:b3:d6:95:e1:06:64:92:10:de:ac:cc:3b:2f:45:
7a:3b:6c:25:7c:bf:f2:e1:e1:14:80:ab:62:00:ae:
2e:b6:ae:ce:f1:6c:df:8e:35:ee:5b:3a:05:0e:59:
62:83:5d:61:d8:53:a6:1d:5f:2c:f2:f0:33:01:b7:
a6:3a:88:45:77:db:63:08:e5:2e:37:cc:f0:29:ab:
2c:6b:5c:33:26:0f:27:c6:e6:24:c6:96:d4:7e:38:
4b:e1:0a:0a:e3:53:60:b5:20:de:7d:93:28:23:c5:
34:11:06:4b:03:48:ff:fc:ab:63:7e:7b:e8:00:f8:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6E:7F:32:C5:C3:F1:9E:1E:35:DC:C6:BD:A6:2B:AD:86:DE:D1:C5
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/tW5_MsXD8Z4eNdzGvaYrrYbe0cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:2f:8c:4f:44:7b:9e:9b:a3:c9:3b:db:d3:20:70:03:ea:f7:
90:aa:ca:50:86:3c:b9:27:c0:22:41:dc:16:1d:b2:a7:a6:23:
c3:15:e4:06:bd:bd:86:eb:dd:a8:d8:2c:cd:9c:66:39:29:e3:
4b:79:62:e5:7b:d9:0d:af:f0:9a:d9:cc:8b:d4:86:a5:6c:07:
79:77:69:75:a7:85:10:88:1b:c0:11:14:7b:26:67:66:11:78:
d9:ad:37:19:f4:a0:5e:61:00:95:b3:52:6d:eb:03:28:40:60:
c1:3f:b2:53:45:7b:a5:63:d6:9a:dc:96:9e:a9:35:50:2e:f6:
4f:e0:64:ff:71:ba:07:78:fb:e1:7e:0c:69:84:73:89:e0:e9:
3e:2e:d7:ae:b3:21:4f:25:b4:e4:86:7c:e8:ae:ad:74:45:80:
10:0f:6e:8a:54:16:de:c0:61:a2:a1:e0:81:bc:27:c3:92:bf:
72:b7:38:cf:51:77:3a:2a:50:16:3b:64:37:4c:84:d6:1a:11:
97:e4:d7:80:69:d2:60:8b:bc:7a:70:46:cd:b7:88:0d:5f:ec:
ec:17:26:a4:3c:2e:b3:c0:15:56:0c:90:b9:dd:b9:d6:af:a3:
23:34:ed:11:20:d8:0d:77:2f:93:d2:4e:b0:10:4b:48:ac:6c:
16:9f:dd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:43:48 2025 by rpki-client