Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xlVhatP5PHgqxzeTQvY1OyRXO4s.roa
File: xlVhatP5PHgqxzeTQvY1OyRXO4s.roa (raw, json)
Hash identifier: VdBfWbqENqhIkgvMU9Mo+8ftnuylormZl3iSC4aUByg=
Subject key identifier: C6:55:61:6A:D3:F9:3C:78:2A:C7:37:93:42:F6:35:3B:24:57:3B:8B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019861D24EC39F5814F83337E4A64D8DC45D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xlVhatP5PHgqxzeTQvY1OyRXO4s.roa
Signing time: Thu 31 Jul 2025 18:50:29 +0000
ROA not before: Thu 31 Jul 2025 18:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 64.188.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:d2:4e:c3:9f:58:14:f8:33:37:e4:a6:4d:8d:c4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 18:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c655616ad3f93c782ac7379342f6353b24573b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:f0:2f:a8:80:4a:88:50:6d:38:28:e1:33:
1b:bc:21:fc:12:0d:bf:a9:86:1c:38:c8:1d:8b:62:
d8:8e:a3:71:e0:41:50:42:c9:7f:44:92:3d:ab:ad:
74:61:5b:ef:5f:bc:04:24:b9:78:96:1e:ac:4a:85:
97:dc:87:b8:12:fd:a4:2f:3d:84:39:b7:45:16:df:
97:14:ed:3c:bd:03:04:ea:00:9d:0a:03:c3:9b:d5:
9b:57:a1:a0:1a:ca:0c:b7:f3:b5:06:b0:bc:c6:df:
4f:b7:3d:6f:3a:68:a1:2a:98:69:d0:a8:9e:c4:c2:
07:ec:d6:90:0b:9e:24:af:fa:5e:1d:47:7f:82:30:
09:a6:ae:f8:81:a4:31:ac:7c:99:a7:4d:47:2a:9f:
c6:58:1e:6d:f0:be:ac:15:1b:82:29:f2:a7:e1:7f:
0f:76:a7:e3:55:20:15:23:f8:09:6b:b3:0a:90:14:
aa:fd:bb:a4:9b:48:98:41:20:bf:4d:9d:4b:4a:c6:
58:df:57:f1:fb:88:89:4c:dd:c2:1e:ec:ae:23:78:
66:ae:8e:6f:2f:57:af:78:80:62:75:52:c7:9e:ad:
77:f2:2c:d1:a1:8e:28:a8:ac:65:ce:37:33:74:dc:
58:39:c9:dc:cf:59:45:a9:24:59:64:c7:9b:ea:70:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:55:61:6A:D3:F9:3C:78:2A:C7:37:93:42:F6:35:3B:24:57:3B:8B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xlVhatP5PHgqxzeTQvY1OyRXO4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.84.0/22
Signature Algorithm: sha256WithRSAEncryption
16:05:cd:01:10:bf:73:45:43:fe:9e:14:10:8b:fc:8f:c5:f4:
d7:3e:69:b0:0f:04:2f:e1:0d:a3:73:15:70:d0:98:b6:e0:08:
b0:b1:76:97:e4:ea:3a:03:35:9c:44:9e:67:06:92:b4:ea:e7:
bb:ab:fb:45:13:ce:dc:5a:58:ee:59:57:4f:5e:7e:0e:39:f8:
42:0a:1f:24:63:68:f7:de:fb:5e:08:42:27:d2:ff:17:58:69:
11:9f:c1:27:7c:0f:2e:3c:b4:b7:91:b4:64:cd:32:77:67:c7:
fd:de:5f:67:65:c1:80:f3:d8:ad:0c:db:d7:27:93:b2:c5:17:
43:6b:67:41:f4:3f:64:07:00:85:22:ed:8a:a6:af:3f:57:ba:
74:a3:e4:4d:d4:79:d8:ec:44:fe:bb:0d:4b:b3:5e:bd:c5:87:
2c:6a:3b:c5:e3:f8:63:f5:ce:6b:3f:eb:23:fc:02:75:cc:24:
c8:42:71:86:48:22:ff:c3:bc:24:49:7f:59:25:9b:6d:d4:f8:
60:23:64:21:93:bc:62:60:c0:7d:ab:e3:1d:9d:75:33:1e:bb:
65:62:69:b7:0c:6e:41:3b:9d:f3:87:80:92:10:0d:c3:1e:ef:
ad:b9:5d:5b:ba:46:46:91:fc:a1:15:55:af:9c:92:f2:34:18:
4f:c0:9e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:04:29 2025 by rpki-client