Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ckBvqfM3u_V7uUkB9pSkjt0UNJk.roa
File: ckBvqfM3u_V7uUkB9pSkjt0UNJk.roa (raw, json)
Hash identifier: tZ3bkRvHuU4RD3cr3X1W85IMyRc31Pd+llXosInd61Q=
Subject key identifier: 72:40:6F:A9:F3:37:BB:F5:7B:B9:49:01:F6:94:A4:8E:DD:14:34:99
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01983D85578F300F6999CFE12A0DE16E48BD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ckBvqfM3u_V7uUkB9pSkjt0UNJk.roa
Signing time: Thu 24 Jul 2025 17:40:05 +0000
ROA not before: Thu 24 Jul 2025 17:40:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 93.115.203.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:85:57:8f:30:0f:69:99:cf:e1:2a:0d:e1:6e:48:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 24 17:40:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72406fa9f337bbf57bb94901f694a48edd143499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:ef:2b:51:ac:f5:f3:d8:4f:e4:89:ce:d8:
d7:f5:ef:ff:26:19:14:94:2a:9f:e4:26:1c:72:a9:
8d:cf:f7:9d:c2:93:f5:dd:dc:ad:98:a7:3b:c6:39:
2b:7a:4b:47:65:c1:78:12:a1:6e:cb:83:c6:dd:19:
3b:e3:30:20:b3:81:d5:5a:0c:b3:06:1e:46:20:41:
bd:a8:72:ca:4e:23:52:78:bf:5d:b3:e7:77:a7:49:
bc:ae:74:06:e8:fd:90:c1:8b:3b:f8:36:cc:fb:65:
6e:b3:c7:c8:e4:ca:7a:27:8a:62:23:53:f9:15:64:
bb:c9:c4:81:5a:f3:43:36:2a:37:f6:68:de:de:3c:
83:32:1f:d5:0d:e5:c9:a3:7b:50:2f:fa:d1:3a:db:
30:92:68:46:c0:1e:c1:23:7a:cc:81:31:e3:f8:d5:
80:de:62:de:e3:a9:d8:ac:ae:e3:23:50:39:6c:32:
33:78:96:b9:d3:e2:e3:e3:2a:0e:8a:e9:ef:17:75:
b4:1a:02:82:c5:01:1f:e7:a6:a2:3a:22:76:f7:53:
6f:45:ec:78:f6:ae:7b:ac:02:67:e8:f0:b0:1a:b2:
18:52:84:b1:bc:0c:ed:78:dd:b0:92:a0:69:67:66:
c2:8d:a4:49:c4:7e:e3:66:e2:0a:af:b0:f0:7b:2b:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:6F:A9:F3:37:BB:F5:7B:B9:49:01:F6:94:A4:8E:DD:14:34:99
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ckBvqfM3u_V7uUkB9pSkjt0UNJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.203.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fb:20:33:93:a1:fa:0d:46:78:52:94:47:57:a6:56:e7:bd:
9e:e5:fb:e9:d6:a5:5b:b6:5d:57:b6:c0:fc:8f:97:d3:50:81:
3f:26:43:0b:57:11:b8:1c:62:f1:4f:37:0c:38:07:ee:2a:69:
48:b4:49:17:68:14:1f:1f:9b:f6:4a:f9:4d:ae:5e:7e:da:d9:
b9:4b:ea:46:fd:65:a2:1d:32:1f:00:b7:40:1d:b1:8f:67:c6:
32:85:7c:9f:cb:a6:a0:9a:0f:d9:84:eb:31:37:2c:6b:f5:8b:
e4:c2:16:99:64:df:20:35:61:2b:0f:dd:f0:63:ff:73:f1:6b:
0e:cc:e7:92:84:38:2e:29:b9:f8:29:80:e5:8a:72:8e:e8:0c:
ab:fc:1e:ab:3f:ef:51:40:41:88:c4:78:a6:1f:bc:84:3a:a0:
10:75:16:d1:1c:e6:0f:5a:17:08:68:9d:ae:64:f3:80:20:8a:
f4:6e:4a:5f:f3:55:5d:a4:d9:d6:e9:18:5d:0f:bf:f3:52:73:
da:c0:6e:7d:de:a9:e1:f1:cb:fd:24:47:f8:84:99:a1:64:c5:
42:83:49:8e:b8:c7:ec:e1:b4:bb:15:22:c6:d2:4b:71:1c:aa:
36:07:b6:52:3c:6d:ba:68:2d:0d:88:6c:93:f7:dc:de:ae:39:
0d:a5:96:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:44:18 2025 by rpki-client