Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/xIyXjBVQ6PY7db0-kU0MPNqfG_k.roa
File: xIyXjBVQ6PY7db0-kU0MPNqfG_k.roa (raw, json)
Hash identifier: hoQlQ49AMRXyr8IYH6xHVURJ84d0LGLOqucCIHUfGFM=
Subject key identifier: C4:8C:97:8C:15:50:E8:F6:3B:75:BD:3E:91:4D:0C:3C:DA:9F:1B:F9
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01976841E284A5D10365BF4060DFE6F9FE0C
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/xIyXjBVQ6PY7db0-kU0MPNqfG_k.roa
Signing time: Fri 13 Jun 2025 07:47:17 +0000
ROA not before: Fri 13 Jun 2025 07:47:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211736
IP address blocks: 88.210.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:41:e2:84:a5:d1:03:65:bf:40:60:df:e6:f9:fe:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Jun 13 07:47:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c48c978c1550e8f63b75bd3e914d0c3cda9f1bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:bf:77:80:cc:14:44:72:f1:d8:2b:d1:c9:
bf:27:5c:fb:af:23:a4:cc:9e:95:9a:c1:94:bb:82:
cb:a5:f2:60:cc:ea:22:e8:a3:de:77:53:cb:5f:5f:
42:97:2c:43:2b:e5:dc:ba:61:4b:36:aa:58:51:c8:
94:b7:cc:98:e8:58:2e:39:78:bc:dc:68:f5:2c:5e:
1c:02:14:2a:95:4e:be:33:3e:f4:e5:8b:93:66:8e:
38:cc:da:97:5c:46:2c:bb:94:8f:16:b4:f4:a5:b2:
4f:14:75:23:b3:ef:e3:0d:ad:b4:23:0f:d9:03:79:
c6:6b:2f:f3:14:0c:7b:28:cd:a5:01:8b:ca:a0:70:
8f:22:2f:f7:07:af:6a:27:7b:92:c2:91:df:aa:eb:
66:43:df:b4:f6:39:7d:b6:6e:1e:c9:58:02:e7:fa:
e8:c2:86:5b:14:83:26:01:53:6e:61:45:fb:4c:b3:
38:65:e8:bf:28:61:3d:d7:49:62:1d:e5:ad:a1:b3:
c5:6e:1f:b4:f2:6a:87:d3:f5:e8:61:d1:54:30:0c:
58:75:35:4a:05:05:63:46:ed:08:19:83:ce:8e:f8:
6f:5b:cd:10:89:55:30:d8:7d:dc:fe:fb:d7:dc:94:
e4:33:dd:0a:d1:ea:13:9e:fe:15:e2:fc:25:4e:16:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:97:8C:15:50:E8:F6:3B:75:BD:3E:91:4D:0C:3C:DA:9F:1B:F9
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/xIyXjBVQ6PY7db0-kU0MPNqfG_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:77:e2:95:55:af:b8:d8:18:b3:e3:57:bb:54:1c:2c:50:ae:
72:c9:0d:c7:c4:a4:b8:30:76:ab:74:17:e9:55:28:21:88:ba:
54:92:1e:e0:11:b8:70:08:ef:49:02:7a:c5:96:1c:d3:3d:f5:
d9:29:9e:89:00:8b:33:df:44:3b:70:20:35:cb:58:7f:dc:92:
0e:ed:c9:52:74:51:5b:f9:8c:ef:22:ae:c0:1d:47:6c:a5:86:
c3:30:a0:da:ed:8e:65:81:3c:14:f3:33:36:0e:8b:16:02:29:
fb:51:43:b8:39:8e:3a:71:b2:fc:35:0a:90:a7:b8:8b:8e:54:
28:ae:da:ac:7e:0a:f6:4b:04:b3:97:b2:ea:bc:e8:50:5e:22:
65:99:e1:df:ae:98:61:bc:1e:41:67:24:0c:88:37:ca:a5:9a:
7b:d4:7a:b2:a6:02:1a:05:b6:8c:5b:46:3d:8e:73:99:0a:c0:
e7:ac:4f:db:59:0b:24:01:74:a1:ec:34:30:76:2b:b3:6a:fe:
92:9e:78:11:59:08:9c:e3:32:04:e4:f4:f4:36:15:d7:e0:31:
88:b2:9f:87:51:20:d5:3a:48:3d:48:cf:16:64:ee:3d:cc:7b:
d7:31:41:4a:48:76:f6:40:65:09:c8:44:48:6d:36:4d:3b:d9:
4d:8c:30:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:07:35 2025 by rpki-client