Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/xSkXwWCOlg6_ioygd_qfBU1TATM.roa
File: xSkXwWCOlg6_ioygd_qfBU1TATM.roa (raw, json)
Hash identifier: msLfYoPACWnC9efjzP1En1KctLUpy3p6Axa1osuGUS0=
Subject key identifier: C5:29:17:C1:60:8E:96:0E:BF:8A:8C:A0:77:FA:9F:05:4D:53:01:33
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01985AE059824D21AE7A9569AA1146D00D88
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/xSkXwWCOlg6_ioygd_qfBU1TATM.roa
Signing time: Wed 30 Jul 2025 10:28:28 +0000
ROA not before: Wed 30 Jul 2025 10:28:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 193.36.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:e0:59:82:4d:21:ae:7a:95:69:aa:11:46:d0:0d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jul 30 10:28:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c52917c1608e960ebf8a8ca077fa9f054d530133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:0d:82:ef:85:83:69:a5:07:50:d8:d1:dc:
e0:b8:44:db:77:ac:04:c9:51:1f:30:0f:f3:ed:a8:
c3:30:7d:6f:14:07:9e:4e:6b:09:ad:d6:bb:ac:8e:
99:10:90:02:44:86:bc:bd:46:e7:de:14:00:70:af:
65:3a:13:11:e2:6b:40:c9:e0:d1:df:74:6c:f2:f4:
4d:2d:e3:49:11:82:bb:7f:14:2e:b3:ea:6e:2f:d1:
2e:d8:bb:b1:79:91:86:42:77:da:2e:6b:93:68:8b:
3f:96:ba:9d:ea:7f:21:d9:3e:06:fc:42:8c:e2:1e:
67:70:b6:9f:43:45:b2:ab:4d:18:7f:1f:5d:74:d4:
a6:2c:8e:46:d0:72:83:33:39:bb:df:f6:d1:e8:8d:
34:8b:cb:7c:69:74:35:43:35:e6:72:88:87:99:78:
50:44:ce:aa:65:21:f4:f8:7b:ea:5d:b4:47:81:1b:
20:19:54:8d:78:86:ba:89:28:90:2a:81:f8:14:bf:
ff:22:f5:38:45:f8:ce:e8:fc:91:97:e0:89:3a:2b:
9a:d2:87:cb:c5:73:11:c6:a4:6f:2e:89:2e:e7:c5:
52:84:e9:34:ab:8b:b2:17:fc:48:22:89:a7:e3:d4:
a4:45:92:a5:5d:54:fa:77:fb:5d:ea:b3:b4:3c:e2:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:29:17:C1:60:8E:96:0E:BF:8A:8C:A0:77:FA:9F:05:4D:53:01:33
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/xSkXwWCOlg6_ioygd_qfBU1TATM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:94:d8:b5:e8:6d:be:6b:66:6d:95:41:6c:26:99:78:29:a1:
c8:97:9b:16:70:f8:44:98:21:7f:41:b7:19:ff:4b:76:78:7b:
fe:e8:fb:85:6c:0d:d6:e2:96:2c:d3:27:c1:f6:81:e5:da:c4:
f4:f2:05:ba:ed:5f:07:3a:44:37:8e:b0:7c:68:6b:bf:3a:be:
2d:28:66:33:84:b0:95:7e:c6:3a:7e:33:2a:f5:14:27:b9:c2:
40:e1:26:f8:df:48:2d:7e:39:e2:e1:7c:dc:aa:dd:6d:fc:ea:
76:5a:18:ff:36:0d:7c:41:29:07:3c:e7:12:95:f7:22:61:42:
85:0b:1a:32:34:cd:ea:f2:01:29:67:66:cc:f6:4c:b2:4a:f5:
41:13:59:c1:07:c7:c1:cb:f9:92:37:a5:bb:e0:aa:8f:aa:50:
12:fe:4d:8c:12:c9:df:43:26:57:27:c8:cd:b6:68:cf:74:31:
4d:b6:2f:d6:e7:73:1e:68:b8:6a:80:1e:1e:37:5d:e4:6d:c1:
f3:1d:4a:e5:11:19:d3:9d:33:17:94:f2:7a:39:76:c8:81:d8:
41:44:25:01:dd:0b:bc:c5:d3:f3:71:6d:93:1f:67:3b:2a:55:
be:6c:c1:e7:bc:fb:06:e3:9a:8a:48:f7:e9:c7:32:f0:2d:c7:
df:0b:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:50 2025 by rpki-client