Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/S7BdP2nP-Av4-qGhndazzuMA-Fo.roa
File: S7BdP2nP-Av4-qGhndazzuMA-Fo.roa (raw, json)
Hash identifier: RDHy4DmordA+Yz6XY9qGpPgWSCtPZSk4qTnyDjumfHA=
Subject key identifier: 4B:B0:5D:3F:69:CF:F8:0B:F8:FA:A1:A1:9D:D6:B3:CE:E3:00:F8:5A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01988848BE973E289F3952F691A0E11B9230
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/S7BdP2nP-Av4-qGhndazzuMA-Fo.roa
Signing time: Fri 08 Aug 2025 06:05:25 +0000
ROA not before: Fri 08 Aug 2025 06:05:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154049
IP address blocks: 163.5.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:48:be:97:3e:28:9f:39:52:f6:91:a0:e1:1b:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 8 06:05:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bb05d3f69cff80bf8faa1a19dd6b3cee300f85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:a8:b8:26:35:61:d1:f7:a6:11:18:48:af:
fe:bc:f6:eb:0b:17:87:29:2a:0d:ba:8a:0c:bc:51:
d6:78:c7:f0:0c:be:94:c0:de:58:a0:78:b2:d7:17:
76:45:91:ea:c0:98:71:f1:e8:ab:d7:b3:2f:5d:b0:
68:df:8d:80:8e:a3:48:58:5d:1a:46:62:57:8c:df:
ad:44:7a:68:9c:7b:df:29:e6:b1:55:19:43:a7:f5:
b5:3c:1d:4a:f3:5b:53:69:0e:5d:8b:f4:45:cb:3e:
4e:43:fa:b7:3c:7b:53:1c:73:33:bc:db:2f:76:38:
fb:6f:f4:09:f4:a4:26:27:bc:64:7f:86:47:92:c3:
f5:41:40:47:2a:de:31:82:cf:1c:d1:24:86:8a:e0:
48:a6:17:12:9b:a0:81:b5:94:af:36:73:8c:74:bb:
c2:3b:f7:9f:07:13:d0:c7:ed:9a:1b:c3:6a:1f:72:
41:1d:17:25:61:b3:fd:bd:5e:40:98:2a:85:d6:d1:
f5:4b:bf:cd:7c:53:5e:72:06:9d:b7:5f:b6:1a:f5:
3b:f1:41:a8:72:ff:e4:d2:6a:8a:a4:0b:45:fe:89:
43:ab:e8:94:5d:9d:2f:73:20:96:3b:25:3f:1c:c6:
15:3a:0a:ef:d8:05:5d:52:0a:ac:99:dd:8b:6a:57:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B0:5D:3F:69:CF:F8:0B:F8:FA:A1:A1:9D:D6:B3:CE:E3:00:F8:5A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/S7BdP2nP-Av4-qGhndazzuMA-Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.206.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:87:23:0d:6e:a6:b1:30:25:a1:5a:f0:07:bd:6e:b4:2d:ed:
a8:f4:ab:64:71:f3:f9:a8:2f:97:6f:ee:c5:d4:62:7b:c5:40:
71:48:85:38:30:ef:6f:f1:cd:5f:37:34:00:fa:36:a1:38:a6:
5c:0e:57:5a:5f:9d:45:b3:4e:10:a5:00:d3:bc:11:ee:96:38:
60:c1:c9:c9:71:70:8e:89:cb:79:ed:a2:60:f6:ad:dc:c5:d6:
4c:ad:dc:06:31:01:fa:5b:05:59:9d:08:42:e1:9c:30:a2:d5:
4a:88:16:2f:6f:04:59:a1:f5:8e:e9:c2:35:bf:ea:43:39:55:
2c:45:65:48:2f:ef:53:58:e9:26:8a:a8:ef:79:52:ce:52:c1:
85:af:f0:0e:94:8e:3a:59:62:6f:82:e2:6c:11:18:d2:03:9d:
d7:f9:5e:cb:28:36:e6:b1:05:62:7e:29:f5:db:ac:9a:09:1b:
ab:03:ca:c5:d1:6a:98:7e:42:82:93:1e:4f:34:a9:be:d9:24:
50:b2:72:9f:fd:58:b6:84:12:28:33:ed:5c:6b:a0:5d:c2:e2:
01:f3:38:cc:05:f8:fa:10:98:c4:31:01:3d:4f:e8:32:8a:fc:
ce:30:fc:03:c6:29:e2:b0:20:d9:d0:ae:87:dd:e4:c7:4e:56:
27:16:60:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:06 2025 by rpki-client