Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/n7XNxY-sa2O-8oAFuyK34I07FxU.roa
File: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (raw, json)
Hash identifier: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=
Subject key identifier: 9F:B5:CD:C5:8F:AC:6B:63:BE:F2:80:05:BB:22:B7:E0:8D:3B:17:15
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 0196D3C8BE8CAF3BAC3E1646F0BEA165DB2F
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/n7XNxY-sa2O-8oAFuyK34I07FxU.roa
Signing time: Thu 15 May 2025 11:51:10 +0000
ROA not before: Thu 15 May 2025 11:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6910
IP address blocks: 194.176.162.0/24 maxlen: 24
2a01:4700:1::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:c8:be:8c:af:3b:ac:3e:16:46:f0:be:a1:65:db:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: May 15 11:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fb5cdc58fac6b63bef28005bb22b7e08d3b1715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:5b:25:1a:c9:21:dc:23:1c:ed:72:d4:4d:
70:32:9f:8f:8a:99:81:91:87:84:b0:e0:8c:74:42:
6a:26:e4:a8:99:43:45:26:2a:35:b8:4a:c8:66:a8:
86:69:de:63:60:75:db:a3:7f:ec:c8:99:c2:0f:95:
50:8b:3d:59:d4:88:ad:9d:4e:86:15:7f:59:b5:ae:
e1:fe:46:2f:ad:e6:8c:8e:70:a4:de:79:2a:b2:83:
84:b7:6a:24:75:42:10:4b:3e:1e:bf:e7:40:78:59:
18:af:6f:c1:e1:42:7b:36:63:b3:45:5e:19:72:07:
9e:9e:36:e2:cd:d6:cb:40:ce:50:ea:89:0a:59:f5:
bd:d1:7a:19:90:20:56:fd:f3:62:93:ca:2c:e5:4c:
2f:e1:aa:40:d9:c7:42:04:0f:ee:43:d5:77:f0:b9:
71:59:90:76:da:6b:a0:19:c4:e7:a4:0f:5c:27:b3:
0a:be:c8:60:f8:93:20:72:5d:3f:4b:38:a0:4f:4c:
42:a7:19:96:f1:2f:ec:eb:de:d7:2f:5f:1d:85:3a:
23:53:32:7a:e8:a2:87:2d:9f:c9:14:d9:5f:53:59:
d6:d4:3a:65:69:44:93:32:07:de:2f:c4:de:f2:73:
8f:56:be:7c:49:b6:cb:fa:9f:63:a3:49:71:fb:f9:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B5:CD:C5:8F:AC:6B:63:BE:F2:80:05:BB:22:B7:E0:8D:3B:17:15
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/n7XNxY-sa2O-8oAFuyK34I07FxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.162.0/24
IPv6:
2a01:4700:1::/48
Signature Algorithm: sha256WithRSAEncryption
3e:ae:24:4b:1d:2d:28:a1:34:81:5f:cc:08:fa:24:0b:41:76:
cd:2b:61:62:22:be:b1:99:2b:50:cf:67:e5:a6:d8:01:48:fc:
a7:fa:5d:b9:73:fa:0a:6b:00:f8:fd:77:83:fb:02:82:13:89:
d4:25:31:1f:ba:1e:12:fc:54:76:a3:a5:bb:9d:5d:dd:eb:55:
56:03:70:05:d6:81:c7:1f:96:94:58:90:13:59:1e:4c:ef:44:
0f:44:d4:ee:78:84:e8:c5:a3:49:de:37:e9:9f:cb:2e:0f:77:
f7:c1:fe:50:1c:c6:75:67:a4:c5:78:90:16:77:f3:ac:27:5f:
07:e1:ef:3b:bf:0d:65:27:2a:1b:57:fe:57:36:f6:d1:7f:37:
e3:dc:d6:e8:d0:30:08:ce:ac:56:98:2f:bb:91:b5:62:44:6f:
bc:c7:50:17:e8:2b:31:e2:8a:12:00:bf:bc:06:cb:68:2d:a6:
1d:23:70:93:82:d1:9a:67:4b:85:ea:6f:59:f4:10:a9:42:56:
d2:94:cf:bd:24:f9:6d:42:0a:7a:ed:8d:5e:3f:18:71:21:91:
7f:f4:5f:d5:4a:d5:e7:77:b7:1b:3d:96:33:01:9b:77:d9:05:
47:90:25:87:70:6a:84:a6:70:47:d8:e8:5f:4b:ed:20:73:b1:
06:35:90:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:40:44 2025 by rpki-client