Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/XNlRYOrdP4YhxB9m-RjQGIDXydw.roa
File: XNlRYOrdP4YhxB9m-RjQGIDXydw.roa (raw, json)
Hash identifier: yt93xApYhguaF4Zby7MP0nE6qjw1BNUYTRRGsguxdkI=
Subject key identifier: 5C:D9:51:60:EA:DD:3F:86:21:C4:1F:66:F9:18:D0:18:80:D7:C9:DC
Certificate issuer: /CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Certificate serial: 01988444D36F08C206F4CC40BC5BCBACC426
Authority key identifier: 55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/XNlRYOrdP4YhxB9m-RjQGIDXydw.roa
Signing time: Thu 07 Aug 2025 11:22:39 +0000
ROA not before: Thu 07 Aug 2025 11:22:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210125
IP address blocks: 79.174.24.0/22 maxlen: 24
79.174.24.0/24 maxlen: 24
79.174.25.0/24 maxlen: 24
79.174.26.0/24 maxlen: 24
2a0d:ab40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:44:d3:6f:08:c2:06:f4:cc:40:bc:5b:cb:ac:c4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Validity
Not Before: Aug 7 11:22:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cd95160eadd3f8621c41f66f918d01880d7c9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:63:65:d0:d3:48:82:1c:97:fd:14:14:14:
51:90:13:8f:e7:ec:18:6a:a3:28:a0:5f:0b:5b:ab:
e3:8b:91:7b:f6:56:82:0b:b7:48:d8:c6:c7:39:e2:
d3:e8:e5:91:d0:9e:49:01:45:a2:4a:b1:e4:e3:cf:
09:3c:17:1b:95:b3:ec:36:de:14:7a:41:89:ef:94:
6c:79:7c:71:0a:2c:85:fd:76:0d:50:6c:ac:f9:e2:
f2:04:39:73:0c:d1:c0:bf:e8:8f:01:a2:bc:44:8c:
f4:9c:30:80:8c:e1:8c:90:d4:f9:9c:17:34:47:47:
9c:67:01:af:7d:33:f7:b8:f6:82:6e:a1:4f:f2:70:
11:f4:9e:b4:e5:93:09:8f:52:39:ba:0c:27:f1:70:
4f:a4:c6:a8:ba:07:07:1b:a4:74:0e:5f:30:be:5f:
d4:c5:eb:4b:05:76:82:5e:a5:77:30:ab:9c:9c:a9:
a6:ef:76:b1:09:b9:33:eb:88:31:ff:a3:6f:eb:09:
2c:00:f2:12:4a:c1:29:79:4f:28:26:f4:d2:9c:65:
20:31:84:18:bd:f7:91:2f:bf:3b:7a:90:53:53:c0:
5f:d9:d7:c3:e8:c9:3b:9a:ae:b6:58:0d:53:cb:f6:
ce:60:8a:19:ed:0d:cc:37:e3:cc:0c:61:0f:1e:74:
ba:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:51:60:EA:DD:3F:86:21:C4:1F:66:F9:18:D0:18:80:D7:C9:DC
X509v3 Authority Key Identifier:
keyid:55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/XNlRYOrdP4YhxB9m-RjQGIDXydw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.24.0/22
IPv6:
2a0d:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
70:76:01:23:6c:21:77:dd:07:9f:f7:63:57:2c:31:4f:70:96:
40:0f:05:12:84:79:1e:6a:21:fd:f1:4e:08:97:38:c8:a4:c4:
01:51:09:f3:fc:5a:f9:98:0c:dc:53:f1:64:71:0a:47:57:4c:
b0:55:01:0a:94:19:55:31:c1:95:a8:22:58:6a:fa:ca:94:e5:
cd:fd:69:7a:13:d0:b6:4e:e0:dc:cd:f1:84:da:f9:77:c7:f7:
53:7f:33:41:1a:df:8a:5a:bf:ca:9a:a7:fd:a5:61:35:e6:27:
74:90:6b:9f:88:79:72:b5:81:c0:04:e1:bd:9f:e2:7d:f8:d2:
20:d3:80:3d:f9:a5:f9:d7:d0:a4:c6:c4:c4:51:14:f0:d3:5b:
7f:1a:d4:15:86:4f:a7:c4:76:f8:92:8f:d3:83:ff:16:b8:b2:
b5:2f:72:cd:f9:44:db:66:8e:11:7a:74:a7:40:0d:da:29:fc:
2c:2f:9f:7e:73:ce:67:dc:96:0a:15:8b:6d:bc:b2:69:e2:8d:
9d:96:b6:0c:cb:9b:3b:2b:bd:77:7c:a1:c6:07:fa:9b:c4:3d:
66:53:3d:75:d3:6e:38:e3:ed:a4:5a:6d:0b:9c:5d:60:75:d8:
f4:2c:38:f1:5d:42:f6:f5:e0:41:60:ed:fe:f2:8c:60:91:d1:
51:1f:7c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:13:24 2025 by rpki-client