Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/1gJl5QGcLnfhKR4ZX5vkhukZyTU.roa
File: 1gJl5QGcLnfhKR4ZX5vkhukZyTU.roa (raw, json)
Hash identifier: NMFFqW5s2zQQWT6VrzvJinnOwTRcu4h6yTFNCCxpjXA=
Subject key identifier: D6:02:65:E5:01:9C:2E:77:E1:29:1E:19:5F:9B:E4:86:E9:19:C9:35
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 019850BAA136715BA06915FF7F488DAE0E12
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/1gJl5QGcLnfhKR4ZX5vkhukZyTU.roa
Signing time: Mon 28 Jul 2025 11:11:04 +0000
ROA not before: Mon 28 Jul 2025 11:11:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211385
IP address blocks: 193.107.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:ba:a1:36:71:5b:a0:69:15:ff:7f:48:8d:ae:0e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Jul 28 11:11:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d60265e5019c2e77e1291e195f9be486e919c935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:62:b4:c0:6b:60:3a:c7:77:d9:b8:eb:82:
93:2c:fd:d0:fe:3d:80:b6:b6:ff:3f:30:f0:0f:9a:
0e:7a:cc:71:50:f9:ee:ea:c2:76:4d:86:8a:84:c0:
67:a4:1d:54:89:89:81:b0:14:e2:0a:9a:ce:64:85:
f5:e8:53:20:9b:bf:64:4d:19:e6:7e:2e:0c:48:e6:
59:93:cf:f4:66:ff:57:c6:b2:df:dd:54:9e:d9:7e:
75:d0:81:de:8e:54:64:9e:d7:1e:ab:06:2d:ff:1f:
0a:8e:d9:aa:76:23:dc:45:0f:c8:b5:64:25:06:0e:
6e:c1:8b:3a:77:8d:6e:4b:7d:fa:ed:41:44:ce:78:
a1:ad:a9:90:fa:b6:54:70:3d:96:38:6f:89:3f:bb:
22:45:fa:31:e3:3b:07:76:e6:90:b5:f1:86:0b:a7:
9f:06:e8:e7:28:a1:2c:e5:af:1b:0c:c0:39:f8:7d:
f9:7a:f6:06:c8:75:f7:a2:f3:06:99:93:3e:35:11:
fe:3f:9a:f5:70:9c:47:27:69:41:82:42:80:a0:46:
5f:9c:e2:7c:2d:7b:4d:cc:7f:39:a6:cb:14:38:71:
c3:b4:2e:a2:bc:11:68:cc:8a:c1:05:54:83:76:de:
d5:6d:ec:28:07:15:ef:5b:21:e4:7c:71:9c:ab:79:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:02:65:E5:01:9C:2E:77:E1:29:1E:19:5F:9B:E4:86:E9:19:C9:35
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/1gJl5QGcLnfhKR4ZX5vkhukZyTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.12.0/24
Signature Algorithm: sha256WithRSAEncryption
62:07:bc:cb:d8:19:9d:c8:b2:bf:92:fd:79:e5:3d:53:41:cc:
f4:19:30:30:22:bb:88:22:40:e2:f1:10:38:d7:75:48:9b:58:
12:d7:ea:12:13:00:c3:d4:a5:cd:30:be:af:9a:6b:98:2b:8e:
7f:ba:8a:6f:86:92:0d:19:65:c7:c0:12:34:00:8f:af:28:c7:
2f:a0:09:46:56:70:cc:90:a7:93:4c:46:b6:8d:70:58:00:b8:
3f:04:90:44:c6:f4:0c:58:b8:02:b4:5a:5f:ae:86:78:90:19:
57:ea:d9:3f:1c:b3:ac:53:18:6f:33:00:7f:69:e5:d7:9b:f4:
54:b1:4d:b6:93:4c:e6:c7:0e:8d:f0:cf:69:82:b2:08:47:d4:
0d:c1:c6:7b:c3:57:44:bb:92:f3:1c:5d:5c:cd:b3:d8:e9:b9:
7d:32:d1:e9:c4:06:01:fe:dc:0a:98:75:eb:16:87:5b:0a:7b:
76:ea:db:8e:b8:2f:61:fa:60:73:7c:25:9a:39:8e:f4:12:61:
e0:49:61:77:e6:4d:fe:ab:dc:7c:e4:f8:eb:05:f8:19:99:a9:
20:27:03:72:d0:73:df:a6:08:35:6f:67:fc:0c:e7:0e:e9:36:
0f:6c:90:24:44:cf:52:67:5e:cd:fe:e3:5f:f6:31:72:ae:ec:
85:d5:6a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:25:39 2025 by rpki-client