Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/rQuhF_IboIlB2_vnoX-i80Lj238.roa
File: rQuhF_IboIlB2_vnoX-i80Lj238.roa (raw, json)
Hash identifier: mXp5S1rpiHgJw3sQVXjqZ4GQkF8WVnmKC93FAnlFto4=
Subject key identifier: AD:0B:A1:17:F2:1B:A0:89:41:DB:FB:E7:A1:7F:A2:F3:42:E3:DB:7F
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019837BDD7D7A9103B953FE16B81D0D29525
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/rQuhF_IboIlB2_vnoX-i80Lj238.roa
Signing time: Wed 23 Jul 2025 14:44:05 +0000
ROA not before: Wed 23 Jul 2025 14:44:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 194.61.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:bd:d7:d7:a9:10:3b:95:3f:e1:6b:81:d0:d2:95:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 23 14:44:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad0ba117f21ba08941dbfbe7a17fa2f342e3db7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:03:35:ee:32:35:27:aa:2a:e2:96:81:12:
cd:24:0e:05:41:36:8e:79:1b:2f:31:00:3e:94:5d:
26:13:52:4d:da:d1:0e:fb:ba:19:34:64:48:b9:9f:
d2:45:bd:88:3f:ef:4b:c6:e3:f7:88:6f:1b:16:40:
3c:89:25:01:3d:ab:69:f7:58:bc:e4:dc:ba:7d:6f:
7d:96:57:a6:a8:64:03:4f:f1:0b:8a:75:0d:82:16:
29:2e:7f:f1:0b:c7:ed:ca:9d:72:07:cb:b7:fa:14:
6d:2d:0f:f2:ac:22:71:a8:8a:b7:38:9e:b5:a5:f5:
7b:87:ac:a6:15:3d:24:ea:d0:89:4e:f5:21:c5:39:
a1:7b:c5:b9:a5:af:04:81:c8:84:b7:4d:d1:b1:90:
22:ab:8a:a3:4f:0f:eb:bf:29:93:6a:19:9e:f3:85:
bc:c4:a0:42:b7:fc:c0:11:ba:81:24:5b:55:ad:5c:
95:0b:7c:65:57:34:dc:35:6b:2d:0c:bb:19:6c:86:
72:2c:b7:af:6c:61:be:c5:f5:93:97:ee:14:e4:34:
56:7f:5f:ae:28:59:b4:bb:31:f1:95:68:ad:73:62:
c5:c8:5c:2b:57:a6:f3:aa:32:00:bf:a8:a3:33:21:
51:b9:27:27:40:fc:dd:81:f2:b1:3a:83:31:ae:9e:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0B:A1:17:F2:1B:A0:89:41:DB:FB:E7:A1:7F:A2:F3:42:E3:DB:7F
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/rQuhF_IboIlB2_vnoX-i80Lj238.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c5:53:90:e6:d6:92:63:1f:13:9e:49:34:18:35:dd:a9:b0:
e7:8c:38:63:8d:72:9a:9f:d7:71:e5:af:b7:3f:44:58:44:b4:
dd:40:39:2c:c1:be:11:9f:ef:be:cb:34:6e:e2:69:a1:6c:79:
e3:63:88:6e:45:d8:7b:f9:fa:46:33:b4:3d:47:38:91:01:fe:
ee:55:ae:67:1e:ab:ef:ee:e2:f7:c9:e5:30:7e:78:bf:d5:3c:
d4:bc:f6:e7:1f:17:8c:b4:1c:1f:3b:36:80:c5:5d:ec:89:dc:
2d:67:30:d4:0c:ff:bc:4c:20:84:d3:31:14:bf:00:76:d3:57:
a7:91:b8:34:cb:24:3b:3b:40:91:ce:45:19:25:b3:a9:80:a3:
4e:3f:ee:55:94:8e:9b:56:9e:9e:c7:2f:64:ef:ce:4c:57:8c:
aa:53:dd:dd:74:a3:71:24:43:e9:25:24:4b:cb:70:c8:fb:4c:
89:ac:2b:02:d0:67:a5:7c:71:ea:33:92:c3:3c:5c:61:56:df:
40:fc:75:c7:69:54:a9:93:01:e2:eb:f3:47:50:c1:1f:7f:84:
67:bf:e5:fa:03:54:dd:6f:5e:1d:49:49:dd:ee:82:36:4b:bb:
28:53:90:10:af:72:ce:f0:13:61:ca:55:da:6d:f9:29:fe:26:
73:17:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:01:11 2025 by rpki-client