Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-zef8ytctlig4W1mdAa34awX6vM.roa
File: 1-zef8ytctlig4W1mdAa34awX6vM.roa (raw, json)
Hash identifier: f0pSivFOL8hvROY8FYNXradBvoFRy7NP+afxtrenblE=
Subject key identifier: FB:37:9F:F3:2B:5C:B6:58:A0:E1:6D:66:74:06:B7:E1:AC:17:EA:F3
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01987F03C20C750C059A91457394D7A6B9AF
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-zef8ytctlig4W1mdAa34awX6vM.roa
Signing time: Wed 06 Aug 2025 10:53:29 +0000
ROA not before: Wed 06 Aug 2025 10:53:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24756
IP address blocks: 81.15.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:03:c2:0c:75:0c:05:9a:91:45:73:94:d7:a6:b9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Aug 6 10:53:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb379ff32b5cb658a0e16d667406b7e1ac17eaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:bf:c8:de:7e:4a:59:14:0f:93:2d:ac:a6:
52:38:86:36:cc:82:fd:8c:b6:34:b3:c6:3e:c8:f7:
9d:d8:0d:32:4b:ba:08:6f:fa:1b:d8:c1:19:1d:50:
a7:9d:4f:6e:c3:b2:aa:0d:ac:29:2e:74:4d:f9:94:
0c:2c:63:67:41:f8:c1:d8:a2:a5:fa:b3:ca:3b:1e:
05:e3:d8:0f:25:76:23:d5:6a:ef:36:c0:16:75:13:
97:65:89:12:b0:61:3a:93:3b:68:fa:c5:87:93:56:
73:5f:bc:e8:33:bd:6a:58:1f:0d:6b:31:35:92:32:
07:24:49:16:8e:44:d3:7b:1f:87:4b:c9:0f:9d:df:
6d:08:66:c3:f9:a0:3e:c6:ed:93:f6:06:e2:f9:72:
ec:85:6f:18:07:20:4d:2a:fd:54:15:1c:3a:1c:df:
df:4d:99:10:15:92:70:d4:2e:7b:54:be:b1:1a:78:
70:9c:6b:d8:f7:8f:4d:b5:5b:9a:7f:24:6f:04:ae:
d8:2d:01:f7:1a:c6:5d:f4:33:72:27:06:90:17:3e:
3e:e7:53:75:1d:df:c8:e7:5b:99:c3:80:31:e5:8d:
6b:01:f5:45:0e:37:2e:d7:ff:93:f0:5c:5b:15:c0:
63:b6:8b:ed:fb:db:a5:e5:a6:28:a7:fd:ed:1e:0d:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:9F:F3:2B:5C:B6:58:A0:E1:6D:66:74:06:B7:E1:AC:17:EA:F3
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-zef8ytctlig4W1mdAa34awX6vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.210.0/24
Signature Algorithm: sha256WithRSAEncryption
54:df:ac:4b:b2:63:c4:9f:77:c7:1c:31:c5:7c:1b:c2:db:f0:
28:67:bd:cb:b6:c3:6f:65:62:17:54:dd:ca:45:de:26:3c:53:
e6:cf:75:fd:57:d1:40:81:81:66:17:54:1b:4d:02:b2:69:23:
a2:04:33:21:1c:b9:22:f9:5c:7d:1d:06:84:bb:df:57:ac:4b:
cb:cf:4d:5a:54:46:b8:fe:58:d3:ae:6a:22:4a:85:ca:33:5e:
1e:ba:0c:13:80:cf:e6:72:49:a4:fb:53:67:64:0f:2d:1e:8f:
36:c0:45:95:c7:65:05:d8:c1:e4:2e:f3:39:e6:23:2d:0d:b3:
ee:23:e9:28:29:98:48:e2:78:a2:f9:d1:61:76:90:66:29:90:
38:96:1c:25:35:c9:24:f0:59:26:b9:0a:cc:2c:2a:24:86:ed:
3c:09:1b:73:47:7a:d6:d5:57:06:85:e3:1d:cd:b1:7c:4e:15:
2a:17:78:0d:f8:f7:e0:43:f0:66:af:07:d8:96:d6:da:e2:3c:
ee:6c:82:72:2d:65:48:ef:4f:a9:a7:bd:40:1a:26:97:70:fb:
bc:38:5f:0a:77:bb:65:e4:02:fb:0b:a8:98:4b:63:0c:b8:74:
8b:ee:79:f5:99:dd:63:fd:40:e0:b1:94:2a:e6:37:27:c0:b4:
9c:d7:0f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:36 2025 by rpki-client