Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/rnjXuQ1jvIZtd3ofdSDvAnJTdh0.roa
File: rnjXuQ1jvIZtd3ofdSDvAnJTdh0.roa (raw, json)
Hash identifier: 0BWjtnz0dvROb8BSYgsrsPvNfL11ilpff5syBRFzFkI=
Subject key identifier: AE:78:D7:B9:0D:63:BC:86:6D:77:7A:1F:75:20:EF:02:72:53:76:1D
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 01986C7F2667CF3BF35A0CF5E8BF11A14490
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/rnjXuQ1jvIZtd3ofdSDvAnJTdh0.roa
Signing time: Sat 02 Aug 2025 20:35:28 +0000
ROA not before: Sat 02 Aug 2025 20:35:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.233.51.0/24 maxlen: 24
2001:3580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6c:7f:26:67:cf:3b:f3:5a:0c:f5:e8:bf:11:a1:44:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Aug 2 20:35:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae78d7b90d63bc866d777a1f7520ef027253761d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:c1:74:68:25:95:ee:46:23:ea:de:99:fd:
53:40:4a:4a:1b:13:3d:5b:69:cc:ef:ec:e8:d5:97:
a7:4c:bb:7e:58:a3:74:e2:48:e5:c3:e5:6a:3e:27:
42:5e:88:93:bc:be:31:54:d0:26:c6:94:88:61:ea:
b5:06:27:e1:7b:fd:cd:99:57:50:71:e1:b0:01:16:
f7:84:65:90:9b:c9:c2:2f:ae:7d:c2:c0:34:54:c6:
2d:81:6d:dd:18:89:f0:64:96:8b:50:3a:2f:be:a2:
1b:7e:fd:ea:bf:23:4e:69:4a:95:4a:05:2a:90:c4:
c3:32:06:78:cf:68:3c:5a:45:be:12:a5:c8:86:24:
c9:3d:82:59:6d:12:d4:b2:11:a3:2f:b5:9c:7f:40:
76:1c:99:49:32:88:af:45:cc:3a:17:0f:63:c1:87:
93:11:6b:d4:2b:eb:90:23:aa:f2:20:6f:56:ec:d7:
87:25:e2:86:6d:1f:c0:6f:bb:6e:be:6f:78:9c:fa:
dd:4b:e3:df:05:48:fa:c5:70:8f:ee:7f:88:c8:9f:
3f:e8:85:ee:1d:0a:45:92:ce:81:26:1d:0b:2b:bd:
f7:65:c2:f5:ee:16:18:7f:e7:fe:33:8f:81:f2:75:
19:83:d9:17:2a:ef:fa:34:67:4d:de:58:38:9a:1e:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:78:D7:B9:0D:63:BC:86:6D:77:7A:1F:75:20:EF:02:72:53:76:1D
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/rnjXuQ1jvIZtd3ofdSDvAnJTdh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.51.0/24
IPv6:
2001:3580::/29
Signature Algorithm: sha256WithRSAEncryption
8a:5c:18:b0:67:6b:98:01:05:57:70:3e:7d:b3:3a:2e:0a:f7:
30:c1:78:dc:0a:b9:14:10:ff:e4:04:55:13:f9:bb:47:cf:7e:
a7:04:67:27:c7:05:91:c2:d0:18:97:b2:e3:f6:97:29:6c:64:
c6:7e:70:8b:df:a2:1c:dc:63:8d:0d:d7:e2:51:0b:f3:53:37:
56:2c:25:e4:38:88:bd:b7:ef:3f:cc:03:e2:f6:7b:be:e2:3e:
6f:2e:b2:3b:fd:0d:62:5e:a1:d3:40:6d:a3:86:4a:fb:2e:29:
73:ad:a9:5e:ad:77:de:43:48:4f:3b:1b:14:7b:e5:bd:3f:0f:
43:ad:5c:f6:55:cb:f3:4e:5f:33:87:aa:57:8c:82:2b:b9:33:
92:ec:91:b8:dd:a4:f6:88:b4:17:89:07:48:fe:3d:13:3d:e7:
6c:70:8a:1b:7e:53:b9:da:18:6a:01:4c:b2:2a:b4:dd:ff:b6:
7f:fb:60:0a:79:6b:c1:32:b0:ef:7b:c8:72:71:a3:82:bb:fc:
67:76:a3:7e:a6:4a:64:5d:d4:15:fb:61:42:a6:5e:7d:54:65:
6e:8a:b3:a7:e4:ef:0f:a7:1f:f8:ae:37:42:b1:c0:35:a0:61:
1c:9d:5e:81:b5:64:08:03:bc:3d:34:18:44:24:4b:ca:43:ec:
0b:90:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:13:56 2025 by rpki-client