Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/m5uzTjKBj1YNxt9lmpL_W70mOs4.roa
File: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (raw, json)
Hash identifier: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=
Subject key identifier: 9B:9B:B3:4E:32:81:8F:56:0D:C6:DF:65:9A:92:FF:5B:BD:26:3A:CE
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 01977C9EE5D125802CF2C01E63E3FD58B613
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/m5uzTjKBj1YNxt9lmpL_W70mOs4.roa
Signing time: Tue 17 Jun 2025 06:41:17 +0000
ROA not before: Tue 17 Jun 2025 06:41:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60528
IP address blocks: 194.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:9e:e5:d1:25:80:2c:f2:c0:1e:63:e3:fd:58:b6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jun 17 06:41:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b9bb34e32818f560dc6df659a92ff5bbd263ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:70:e6:a8:d1:7c:bd:84:f8:ff:53:11:90:
ff:c7:ef:b8:9c:a4:2b:fe:d4:1c:0a:90:a9:13:6a:
18:5d:4b:40:1d:62:d1:40:db:91:27:91:49:6e:cc:
dc:0f:77:29:09:3d:bb:f7:21:95:78:60:cb:b3:f0:
64:04:40:55:83:98:2c:c2:2f:4f:03:ca:7a:3f:0b:
70:da:09:3b:ec:51:ff:fa:a7:74:9b:4c:6c:35:3a:
db:9b:02:7a:e0:3c:35:30:dd:67:11:db:6b:82:9a:
a0:0d:a8:77:76:85:84:ab:a8:55:df:da:3a:bf:17:
8d:64:5a:6e:6e:0a:7a:8f:bc:61:b6:7e:46:2e:68:
27:a1:52:4a:8f:26:b2:d2:4f:0e:5a:f3:fc:a0:4a:
aa:61:57:3c:6b:45:96:66:bd:13:4e:16:c1:2b:e9:
1f:02:60:12:d9:ba:ed:85:50:cb:f8:f0:f0:d2:0c:
f3:c6:ee:0a:6b:71:95:80:04:e0:04:bf:a5:80:13:
c9:f0:74:15:92:56:af:24:9c:d1:f8:fa:06:bf:a1:
35:0a:24:3a:5e:df:a7:4b:b6:ad:c7:79:76:39:ec:
74:90:36:61:bf:a7:5e:21:69:6f:17:c8:a9:88:e4:
59:a6:9f:25:4d:bd:ae:1b:11:4e:18:ad:84:b8:44:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9B:B3:4E:32:81:8F:56:0D:C6:DF:65:9A:92:FF:5B:BD:26:3A:CE
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/m5uzTjKBj1YNxt9lmpL_W70mOs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
08:20:87:70:b7:50:b3:04:66:58:40:a8:42:37:a8:35:27:be:
67:17:1e:11:d2:89:65:04:89:a2:bb:54:bc:a4:92:08:9a:73:
88:3c:cb:74:12:71:28:7e:cd:5d:11:55:66:3a:3e:35:0e:8c:
16:cc:68:cc:15:9d:67:30:25:24:86:e3:66:3e:15:e1:b6:3a:
b5:69:c7:5b:db:64:40:87:0f:a5:e8:2a:d9:30:04:d0:5e:c4:
61:14:67:b0:a2:df:9b:40:8e:dc:2f:57:a7:bc:a6:39:4d:c3:
79:32:bd:5a:32:73:44:f1:9c:a6:f4:2d:68:8f:ea:11:b1:11:
eb:03:a5:07:be:02:28:31:5f:5d:13:3a:bc:25:1d:10:e2:bc:
39:e8:e0:b1:2b:a8:0f:8a:57:99:7e:66:31:55:8c:d8:b6:bd:
e3:a8:2e:5b:6f:b2:2e:8d:73:9b:32:2c:65:a9:04:f3:45:f7:
27:90:d7:e3:78:56:90:fa:e1:60:31:cf:a3:24:ee:cb:69:13:
f7:ea:0e:7e:0f:58:18:1f:82:17:96:dc:73:c2:a8:bf:93:9d:
9e:d4:bc:0f:0f:e3:12:2e:f9:fb:a3:a8:30:f2:c0:67:6d:d2:
af:fc:38:0d:d9:fa:e4:d8:ff:92:09:1e:88:c8:57:4d:e8:a9:
e7:0a:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:59:04 2025 by rpki-client