Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/yFq0JfOaNjdhRiNZMahKgBz5pBs.roa
File: yFq0JfOaNjdhRiNZMahKgBz5pBs.roa (raw, json)
Hash identifier: HLvs21UJM8ndMu/vC6YjvpshtGffGUPV1RHDv0ERCAc=
Subject key identifier: C8:5A:B4:25:F3:9A:36:37:61:46:23:59:31:A8:4A:80:1C:F9:A4:1B
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 0196EA0AFB63DF96D0C052AD3C37005B3D4B
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/yFq0JfOaNjdhRiNZMahKgBz5pBs.roa
Signing time: Mon 19 May 2025 19:35:10 +0000
ROA not before: Mon 19 May 2025 19:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5631
IP address blocks: 83.97.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ea:0a:fb:63:df:96:d0:c0:52:ad:3c:37:00:5b:3d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: May 19 19:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c85ab425f39a36376146235931a84a801cf9a41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:34:06:95:87:ce:b7:7a:47:fe:98:f2:0e:
18:46:32:42:d3:33:72:13:27:14:93:fe:c3:76:47:
e9:68:8a:ac:a7:73:17:5c:f2:71:d4:a9:b2:e1:ec:
e6:35:df:cc:c1:09:9b:93:2e:ce:47:90:c4:0f:03:
1e:4c:eb:e6:7f:ad:b4:05:8e:95:9b:3b:01:95:a4:
9f:c2:7f:fc:aa:28:95:75:63:58:6d:c5:f4:b4:dd:
49:a2:a3:81:93:10:5d:80:6e:af:0c:36:82:32:64:
ad:b8:44:bb:89:57:18:70:ea:6f:8f:1c:dd:8f:53:
3b:58:44:a4:6d:52:59:c2:5f:05:19:ea:06:a1:3e:
c1:8f:b6:a5:18:e4:7b:19:5b:fb:da:64:e4:be:1a:
fc:9a:3e:e3:d2:c0:91:13:e6:b2:b8:d4:41:4c:44:
e5:5d:4a:0a:4c:f9:0a:ed:58:b8:b8:e0:a1:2b:ce:
94:e8:5f:8b:b0:51:ed:ed:02:11:7e:c0:84:b3:07:
18:67:f6:93:e6:da:fb:b9:c7:64:3b:83:f5:0a:83:
73:be:d0:20:c5:a1:f1:55:34:a3:0c:c4:8f:90:0a:
fd:17:87:eb:0b:47:51:3f:a7:2b:c2:28:f9:9c:20:
a5:a6:16:22:bb:80:a1:13:07:3a:50:ec:07:83:35:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5A:B4:25:F3:9A:36:37:61:46:23:59:31:A8:4A:80:1C:F9:A4:1B
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/yFq0JfOaNjdhRiNZMahKgBz5pBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.32.0/22
Signature Algorithm: sha256WithRSAEncryption
01:27:8f:38:55:cb:eb:1a:ee:f5:de:37:41:be:41:ef:fd:1f:
b2:c4:7c:0f:52:8d:86:2f:ab:6d:85:ac:aa:06:a2:d5:e4:cf:
4b:36:ae:5b:2f:8e:7a:68:c6:41:ad:3e:d0:c4:58:94:db:c2:
2e:3c:54:46:d9:29:e3:7a:b8:1f:b3:d2:65:8d:7c:3d:82:1d:
be:32:08:69:92:d1:0e:6e:77:5f:ca:e3:01:43:51:f5:50:15:
44:98:4f:8a:c1:e1:9a:ac:15:c2:d0:6e:ee:1d:5b:2e:7f:52:
41:03:d7:3b:e6:6c:6e:a9:1a:56:70:c7:1f:26:dd:78:a5:14:
7e:d8:e6:fe:39:ca:4a:38:54:ab:4f:51:ca:04:09:eb:d9:60:
94:1b:95:a8:31:5b:67:86:81:36:87:c8:6c:e1:bb:03:70:c4:
df:7d:bf:8f:46:0c:0d:26:21:e6:5d:92:1f:af:0b:5b:33:0a:
32:72:d8:fc:f4:0b:d9:89:98:76:d8:8f:97:1c:bc:88:33:31:
b9:c6:85:52:a9:30:e4:25:f3:e7:36:8f:85:9f:cc:8a:07:8b:
7f:b0:3d:8c:cf:2b:1b:80:4f:aa:06:14:b8:a1:74:5c:b1:07:
0a:80:08:19:b5:6a:ae:8f:c9:7c:88:3d:4a:4b:ef:16:1e:fa:
f8:08:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:37:24 2025 by rpki-client