Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uF8rk7LpxpBMxklV_RWm55Ih4vo.roa
File: uF8rk7LpxpBMxklV_RWm55Ih4vo.roa (raw, json)
Hash identifier: y0maThc1Ra2sguvgT6xC+DyshsCgw3R/u2YIpFuI4Dc=
Subject key identifier: B8:5F:2B:93:B2:E9:C6:90:4C:C6:49:55:FD:15:A6:E7:92:21:E2:FA
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01975A3C1AE72B467AA71D6959095702BBE0
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uF8rk7LpxpBMxklV_RWm55Ih4vo.roa
Signing time: Tue 10 Jun 2025 14:26:17 +0000
ROA not before: Tue 10 Jun 2025 14:26:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63902
IP address blocks: 176.97.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:3c:1a:e7:2b:46:7a:a7:1d:69:59:09:57:02:bb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 10 14:26:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b85f2b93b2e9c6904cc64955fd15a6e79221e2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:74:b3:77:83:06:bb:db:80:fd:9d:b1:1d:
2b:27:9c:70:9b:55:91:9c:60:d8:48:13:6e:62:37:
ba:23:d4:39:bb:40:ea:09:07:c6:7c:47:35:c8:a2:
31:45:40:14:f7:48:f6:48:d5:bb:ee:95:85:0e:52:
a7:64:b1:c9:b5:fa:4b:c7:be:f0:c1:00:58:e9:be:
cb:6f:e7:dd:29:20:52:0d:8c:26:f4:7e:88:ec:f0:
f0:67:83:5d:b1:ad:37:71:cd:ea:52:a6:97:c1:dd:
6e:37:69:a9:e2:bc:d5:1f:58:53:3b:f7:67:4b:ac:
6d:e8:1e:42:a2:e1:76:b9:e9:4d:f6:bd:9e:20:4f:
c9:0d:dc:9c:61:30:31:8b:14:b5:9d:10:0f:0e:30:
ab:87:3c:bb:2c:bb:e9:ff:dc:62:f1:f8:0f:91:49:
d4:09:04:fb:42:86:04:8b:15:85:12:86:6f:17:8b:
96:35:ce:3d:c7:bc:aa:ac:ba:fa:fb:41:2b:0f:43:
1c:06:de:7b:2d:e8:f4:40:68:67:14:ad:06:7c:62:
15:f7:9a:bd:65:5c:35:37:de:11:4c:c6:d0:7b:69:
29:bb:2f:77:86:c3:32:b5:c1:bf:32:26:66:21:20:
2c:a2:48:e1:33:e8:f7:7f:8e:37:7a:37:be:76:ed:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5F:2B:93:B2:E9:C6:90:4C:C6:49:55:FD:15:A6:E7:92:21:E2:FA
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uF8rk7LpxpBMxklV_RWm55Ih4vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.205.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ae:ba:fc:6e:60:01:71:d8:2c:00:82:24:08:5a:90:43:dc:
c6:dd:9c:ab:31:b1:5f:14:60:62:f5:8f:9d:4c:07:8d:64:e4:
3b:5b:db:a0:0a:cf:b2:46:35:e3:3e:64:76:35:fc:60:3e:02:
33:17:11:8e:a1:18:a9:60:0b:ea:5f:cc:1e:fa:09:c3:c3:d8:
b7:f6:61:bb:d5:af:e4:7a:ab:ac:9f:08:55:a4:a7:69:f0:49:
ec:17:fd:8f:9a:2f:92:57:31:b8:1b:c7:60:6c:9a:f8:38:64:
25:80:56:d5:c4:99:ef:0a:41:2c:46:ab:d5:32:9e:64:09:b1:
2c:d4:eb:86:3f:2e:21:b6:ac:bd:ad:21:f3:28:90:5d:77:18:
d9:b1:49:f9:30:7d:5a:b6:b3:79:eb:37:1a:84:39:53:34:4f:
ce:2f:8d:98:c4:00:6f:29:a8:da:89:9f:40:2b:7d:cd:d6:e3:
5b:1a:5a:2a:cc:66:14:eb:80:b1:b4:05:64:82:e7:a0:b9:3c:
79:2a:b9:f2:58:11:73:7e:51:f2:3d:fc:e3:5c:7d:27:ac:38:
61:c5:35:58:03:05:07:cd:67:93:d4:5f:42:cd:01:29:90:05:
62:d6:cd:e0:f2:59:5f:2f:32:c3:36:8f:35:d4:7e:59:67:5d:
27:ec:82:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:37:32 2025 by rpki-client