Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/xGHkCj7QXTK91-IzTTuEVkNvzos.roa
File: xGHkCj7QXTK91-IzTTuEVkNvzos.roa (raw, json)
Hash identifier: jRuba4ysEPA//Moy/YkHQHxGDPSKQ/jX38S+l3o0ZrU=
Subject key identifier: C4:61:E4:0A:3E:D0:5D:32:BD:D7:E2:33:4D:3B:84:56:43:6F:CE:8B
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 019889B188BF2B57625D70A18F871A397F8E
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/xGHkCj7QXTK91-IzTTuEVkNvzos.roa
Signing time: Fri 08 Aug 2025 12:39:30 +0000
ROA not before: Fri 08 Aug 2025 12:39:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 193.228.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 13:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:b1:88:bf:2b:57:62:5d:70:a1:8f:87:1a:39:7f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Aug 8 12:39:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c461e40a3ed05d32bdd7e2334d3b8456436fce8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:76:86:28:f4:c8:13:a7:be:36:8d:c8:f5:
23:b5:7a:e6:92:91:cf:7f:a6:98:28:5b:53:38:25:
e2:fa:0e:66:63:e2:40:22:a3:82:1d:c9:5c:9e:80:
81:2d:78:70:63:58:86:0b:a3:e7:c8:27:09:3b:47:
bf:d6:63:cd:98:77:90:e3:b7:a3:d2:c7:d5:46:8f:
70:7d:07:ce:50:5d:e3:96:62:09:b7:87:fd:71:45:
5f:e1:f0:93:a7:ef:57:d8:4d:c6:8e:7e:78:00:65:
a9:1b:d3:22:05:3d:92:5c:1c:c7:5f:9b:c4:44:53:
58:fb:ae:b3:fb:89:25:46:76:a4:d2:ef:18:5a:ef:
3f:92:aa:d9:e9:22:b6:31:4a:0f:fe:0b:25:09:d0:
b7:0e:cd:8f:63:0f:d5:e4:60:10:d7:d1:e8:f2:76:
1e:b2:51:f6:a5:3e:f9:ab:bf:94:13:2d:00:9d:e0:
bc:b6:e5:22:4d:74:42:62:36:09:72:b4:5c:b3:ea:
b8:ee:c3:4d:95:e4:7c:64:0b:af:d4:8a:09:b1:ac:
cd:59:89:16:ea:3b:57:64:c7:71:b8:4e:83:b0:74:
e8:b4:67:7c:f8:4c:77:cd:65:7a:80:c6:4e:be:17:
6a:2d:f5:c6:04:27:60:ea:1d:fc:f6:a7:19:71:2a:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:61:E4:0A:3E:D0:5D:32:BD:D7:E2:33:4D:3B:84:56:43:6F:CE:8B
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/xGHkCj7QXTK91-IzTTuEVkNvzos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b4:99:22:46:3f:db:e9:5e:b4:1c:c2:43:9a:1c:a8:be:39:
44:87:c1:bd:61:b0:41:2b:e8:ae:c9:ab:ec:e7:1e:e0:24:f1:
c8:fb:1f:c2:bb:71:02:a0:3a:00:db:c0:2d:23:57:75:78:2d:
f2:27:35:5f:9f:85:2b:4e:00:1d:c2:fe:63:1c:fc:51:e6:03:
00:75:f6:c6:ed:0b:fa:0e:c3:2f:94:0c:1a:6f:b6:a2:14:5c:
28:ba:9b:57:f2:04:43:62:89:65:ab:f7:bd:55:f6:cb:08:20:
b5:54:00:65:5b:cd:1d:b8:b8:05:78:3d:44:0d:fc:00:e1:0d:
31:96:af:3d:0f:cd:88:cb:0f:d4:0b:67:d6:6f:b0:96:06:55:
81:1c:52:c3:c4:bf:41:fe:93:66:68:ff:ab:52:a0:12:f2:10:
18:99:b5:ec:8f:56:30:51:ca:f7:5d:9a:47:89:f9:e8:1f:2f:
11:b8:af:6b:ad:9a:aa:64:69:fb:6d:da:dc:35:54:db:2e:eb:
a4:ca:b9:f0:7a:39:00:d7:04:d0:bb:c0:c5:aa:b4:93:b2:d1:
61:3b:27:71:d6:21:ad:74:14:8c:b2:c0:76:a7:d9:68:63:39:
64:08:99:f7:aa:17:89:3f:8c:2e:28:a1:90:bd:49:fa:a1:90:
95:3c:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 20:16:34 2025 by rpki-client