Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/8eJjkZcpuWjV5v8rUew7uwzMNnU.roa
File: 8eJjkZcpuWjV5v8rUew7uwzMNnU.roa (raw, json)
Hash identifier: yUs06Rtd51ccCs/vsal2jQR2RBqNnF02H0mDpxwGrFE=
Subject key identifier: F1:E2:63:91:97:29:B9:68:D5:E6:FF:2B:51:EC:3B:BB:0C:CC:36:75
Certificate issuer: /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial: 0196DC1D003B40C05EC2DCC2BC7BCFDD0D5E
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/8eJjkZcpuWjV5v8rUew7uwzMNnU.roa
Signing time: Sat 17 May 2025 02:40:10 +0000
ROA not before: Sat 17 May 2025 02:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 91.90.162.0/24 maxlen: 24
209.145.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:1d:00:3b:40:c0:5e:c2:dc:c2:bc:7b:cf:dd:0d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
Validity
Not Before: May 17 02:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e263919729b968d5e6ff2b51ec3bbb0ccc3675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:e5:58:23:c5:b0:1f:bf:cc:f0:be:5d:e9:
95:b3:d4:37:53:64:8f:b2:78:c1:16:fe:be:0a:e1:
90:3e:38:1f:c3:52:4d:c2:d4:43:86:e7:a0:fa:8b:
d8:07:b6:10:ed:4f:4e:95:33:98:cc:81:75:8b:1a:
f5:55:b7:9f:08:98:52:e2:11:e5:de:1f:14:52:8b:
a8:37:79:79:8f:d3:74:eb:6d:36:5b:df:89:14:3f:
75:ec:c0:f6:bd:55:5a:66:8c:21:0d:a7:8a:5d:88:
80:1a:53:a5:c3:73:35:e8:36:7f:7b:62:6d:19:5d:
0b:00:54:81:41:be:1a:18:fa:f1:e7:e9:36:5f:24:
69:8b:37:bd:a6:42:16:ef:80:17:51:4b:7b:d6:ae:
65:6a:06:5d:8a:22:1d:e4:a8:e6:90:f7:b3:89:0d:
bb:6f:cb:5b:bf:f4:1a:5e:ed:34:87:1f:c5:2b:d4:
b3:ce:65:d5:37:70:e8:b1:34:32:00:fc:2d:3f:e2:
dd:20:9c:9e:2c:e4:a9:78:37:94:29:6c:57:f4:73:
51:f8:2b:a0:cd:b1:6b:92:be:2a:39:dd:fc:67:25:
8a:03:9e:9a:46:a2:43:a1:5d:52:c9:a9:95:c4:04:
ad:8e:66:bd:24:56:07:e9:1e:c6:75:3d:50:a1:a6:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:63:91:97:29:B9:68:D5:E6:FF:2B:51:EC:3B:BB:0C:CC:36:75
X509v3 Authority Key Identifier:
keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/8eJjkZcpuWjV5v8rUew7uwzMNnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.162.0/24
209.145.40.0/24
Signature Algorithm: sha256WithRSAEncryption
60:43:7e:a4:86:f4:b8:76:13:07:89:4d:8f:56:0b:be:60:53:
90:eb:c1:4f:41:9f:ce:b2:3d:e3:92:35:44:41:6b:e7:3f:fe:
e7:d4:88:b6:d1:6f:8d:1d:dd:c7:fb:ec:39:52:08:96:45:b7:
57:38:b3:b0:56:d9:f3:d4:8b:a7:e6:00:b3:42:25:6d:ee:a3:
60:d9:74:32:7d:de:be:65:2c:70:30:b4:c5:7b:9d:9b:b6:68:
5b:fd:22:10:f2:c3:66:3f:6d:9c:ed:90:78:38:c3:43:91:f7:
21:fe:16:ce:3f:42:f9:ef:c0:ad:ae:9b:26:c2:fd:94:b5:9e:
b2:35:8d:5f:24:74:84:4e:08:68:b4:a4:f0:f4:7a:22:94:fb:
4b:70:3c:f1:eb:f1:d0:40:ba:9d:98:65:0c:cd:7f:e4:6e:6b:
a9:00:9c:b3:f7:db:8f:e0:4d:c5:df:32:18:ff:61:d7:d8:36:
92:6f:c2:f7:28:8c:4b:17:05:c8:58:4b:0c:59:c2:76:47:38:
98:1a:33:72:d0:ab:4c:b2:16:fb:2e:d6:41:fb:61:11:b7:1f:
f9:b3:5d:d2:2e:d6:c5:b2:3c:24:2b:1f:f3:6a:84:d8:71:75:
10:70:55:f5:f7:4b:d4:91:cc:12:e4:22:dd:c2:85:6e:48:54:
71:55:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:39 2025 by rpki-client