Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/xmPH32QYxN9sQH_6cI7fXoqHUEs.roa
File: xmPH32QYxN9sQH_6cI7fXoqHUEs.roa (raw, json)
Hash identifier: 1zn6wk2gZUPdlnR+sqdNWEYJ3GwxThzty4kNMpAjtSw=
Subject key identifier: C6:63:C7:DF:64:18:C4:DF:6C:40:7F:FA:70:8E:DF:5E:8A:87:50:4B
Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial: 019885E6FE479013E534F90049B32BCB3C40
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/xmPH32QYxN9sQH_6cI7fXoqHUEs.roa
Signing time: Thu 07 Aug 2025 18:59:24 +0000
ROA not before: Thu 07 Aug 2025 18:59:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42989
IP address blocks: 185.231.4.0/24 maxlen: 24
2a0c:3500::/48 maxlen: 48
2a0c:3500:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:e6:fe:47:90:13:e5:34:f9:00:49:b3:2b:cb:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Validity
Not Before: Aug 7 18:59:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c663c7df6418c4df6c407ffa708edf5e8a87504b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:29:2d:5d:da:e2:c5:6c:13:27:1d:a0:b3:
aa:d7:33:d8:9a:e0:74:2c:b7:2c:c8:0c:38:55:7a:
2e:c2:5a:49:78:d3:c2:58:34:aa:ec:9b:21:da:e5:
8c:33:51:4d:62:42:ec:08:61:22:69:84:8f:49:1e:
ea:8f:12:28:fa:dc:92:e6:37:a3:9c:25:3f:c6:2d:
77:32:c0:c1:7c:4e:43:4c:53:ba:4c:92:93:c5:fc:
e1:60:85:a2:13:61:93:a3:21:8b:51:f9:56:22:d0:
e9:64:7a:2c:01:99:7b:59:b3:76:74:01:df:e4:05:
6c:84:55:45:5c:50:d9:2d:f5:b8:28:ba:77:bd:83:
03:9d:91:da:91:f7:d0:4d:36:52:82:c1:72:30:bd:
7c:d2:70:a6:0d:25:bd:a7:2e:77:af:93:02:ae:8c:
fa:fd:a3:f6:a0:3a:c6:80:8a:d4:aa:1f:3e:04:8f:
61:f8:f0:17:52:04:cc:a2:6e:a7:96:f9:50:ec:3c:
1f:1f:ba:c2:e0:40:79:5a:13:b9:85:7d:8d:96:d2:
8f:77:bc:b0:48:13:6d:ef:f4:c4:84:7b:c6:da:d6:
d0:92:49:2f:fa:df:a5:f1:4a:39:6a:86:0d:78:8f:
38:00:51:ac:7b:7b:fc:b9:eb:20:1d:a1:96:c2:f9:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:63:C7:DF:64:18:C4:DF:6C:40:7F:FA:70:8E:DF:5E:8A:87:50:4B
X509v3 Authority Key Identifier:
keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/xmPH32QYxN9sQH_6cI7fXoqHUEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.4.0/24
IPv6:
2a0c:3500::/48
2a0c:3500:2::/48
Signature Algorithm: sha256WithRSAEncryption
b6:bb:41:a5:a3:ae:f9:df:72:1f:7c:39:23:17:4d:d2:96:b2:
fa:e6:27:c5:5c:f7:29:41:27:a4:10:2b:f3:2e:ee:04:46:6d:
4d:18:2d:b9:8d:9f:e6:bf:02:04:0c:4a:67:f1:15:47:5a:49:
43:b0:b6:59:5c:13:ef:55:b7:15:88:41:60:0a:c6:27:d1:20:
59:cc:69:a8:22:51:52:da:2d:9b:3d:e4:92:47:46:03:dd:40:
e0:26:6c:8c:2c:ad:11:9a:cd:0b:d7:9e:1b:bc:a6:3b:01:43:
7f:aa:8e:74:ef:e9:9e:04:a9:af:ca:00:e6:ff:0a:21:3e:07:
87:06:0b:64:68:c2:b7:28:9e:62:5b:86:fd:80:ee:82:46:a9:
54:3f:fc:59:70:6e:e8:cd:ef:21:f8:5a:aa:c9:c0:c9:25:11:
c5:cb:e8:2d:37:59:c9:dd:e5:1d:39:26:29:ad:d4:65:5b:3a:
5a:9a:37:8a:51:66:62:7c:fa:d3:34:4b:74:ca:06:4e:6a:92:
a2:19:04:90:33:d9:92:e3:68:bc:61:36:9d:c3:56:90:bd:4d:
ba:85:2e:84:97:89:24:f4:97:34:e6:10:24:a0:cf:9f:bf:04:
9a:53:37:aa:2f:8e:ac:26:57:5c:5f:df:4a:51:ba:4f:ac:a9:
24:44:5f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:16 2025 by rpki-client