Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/u0aUu0b_iEvlUDq3juqga9PBn0M.roa
File: u0aUu0b_iEvlUDq3juqga9PBn0M.roa (raw, json)
Hash identifier: I2lvIAd5dytk2OpXdsqlzCje+prqBKxhEoVZ7EyyIW4=
Subject key identifier: BB:46:94:BB:46:FF:88:4B:E5:50:3A:B7:8E:EA:A0:6B:D3:C1:9F:43
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 01985CCCE6A49510DDB95B247FF42E6B1E69
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/u0aUu0b_iEvlUDq3juqga9PBn0M.roa
Signing time: Wed 30 Jul 2025 19:26:28 +0000
ROA not before: Wed 30 Jul 2025 19:26:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200040
IP address blocks: 188.124.0.0/24 maxlen: 24
188.124.6.0/24 maxlen: 24
188.124.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:cc:e6:a4:95:10:dd:b9:5b:24:7f:f4:2e:6b:1e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Jul 30 19:26:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb4694bb46ff884be5503ab78eeaa06bd3c19f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:2f:2d:0f:3a:c4:74:3c:40:9b:dc:f3:cd:
24:57:19:aa:3b:9d:26:35:03:fa:e2:98:ce:ef:2a:
5f:3a:5a:89:58:a1:b5:a8:c0:ae:5f:6c:c1:45:c0:
aa:8e:74:19:52:f7:b7:1d:4f:c3:41:9e:ba:ee:68:
04:15:90:3e:fa:5d:7e:ad:d0:29:17:c6:a9:1b:7d:
c0:e5:81:29:b2:40:9e:bb:d5:fc:1f:c5:06:b2:53:
22:72:7c:56:11:50:c2:6b:59:a3:ea:8c:7e:1b:9a:
71:03:3c:45:4f:e6:cc:01:ce:03:ef:59:b9:d4:ce:
ca:04:20:95:9b:dd:b1:4d:28:21:a7:6b:1f:04:ad:
c1:f2:39:e1:da:23:5d:27:52:79:a7:cd:72:8e:ae:
40:60:b3:19:91:39:db:14:e9:c9:6c:2b:90:56:b2:
be:63:1a:19:09:4a:1b:aa:a9:7c:b5:46:1f:aa:3d:
18:36:48:5d:cd:99:9b:ef:b6:90:67:b1:bb:59:d0:
8d:44:4e:8b:92:38:9d:2f:00:3e:6c:0e:1d:ca:ce:
46:a4:55:21:f9:71:8e:e8:c8:dd:24:46:8c:ad:2a:
8b:7c:68:0c:46:64:85:34:30:d8:ec:f6:7e:62:4f:
cc:3c:4b:72:9d:8b:31:06:36:3d:01:74:c2:7f:23:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:46:94:BB:46:FF:88:4B:E5:50:3A:B7:8E:EA:A0:6B:D3:C1:9F:43
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/u0aUu0b_iEvlUDq3juqga9PBn0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.124.0.0/24
188.124.6.0/24
188.124.31.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5b:60:81:1b:6c:b2:8a:7f:7a:25:55:0b:ea:14:13:34:3a:
82:da:7e:8a:15:f6:0f:0f:65:fb:cc:3f:7c:46:59:28:f0:d2:
9e:1b:15:7f:69:2c:5d:c3:71:fe:37:10:b6:d9:4d:51:51:77:
3f:ed:4e:8e:fb:95:cd:9b:47:e7:f7:32:17:b8:39:0e:aa:48:
0f:d6:8b:3d:23:04:49:29:5c:ff:ab:32:e2:0b:02:b1:03:e7:
1a:32:b4:e3:7b:4f:87:3e:a7:00:5d:e1:02:b9:c6:f8:e7:2b:
80:e6:70:52:32:44:39:af:a0:49:cc:5c:93:53:d6:91:cf:51:
d5:1e:07:4c:18:bf:28:6b:99:35:06:c6:ed:47:56:4c:03:2b:
f4:71:15:6c:84:d2:8c:33:3f:7c:2e:3e:d4:0a:ce:fc:95:df:
13:09:56:bb:42:98:f6:cf:a9:36:04:20:5c:10:7e:e5:83:de:
9f:bd:1e:d7:15:a0:c0:c7:a1:3a:d0:ac:cf:5d:28:39:44:0b:
0f:ce:b7:15:59:e5:62:9f:59:0a:65:84:d4:2d:2e:45:f4:24:
ab:86:9e:8a:9e:51:45:14:dd:5c:fd:59:76:9e:49:a3:65:38:
fc:45:d8:49:e8:49:84:7c:c9:50:66:d3:44:12:91:13:c2:7d:
7f:60:9d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:16:44 2025 by rpki-client