Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/t0ukQ5CSEan3v8t7w6xA6LKAlPA.roa
File: t0ukQ5CSEan3v8t7w6xA6LKAlPA.roa (raw, json)
Hash identifier: 0NRhgZITCHjsjwAYQth1zntdOiq0gcrilmGiiV4E8WI=
Subject key identifier: B7:4B:A4:43:90:92:11:A9:F7:BF:CB:7B:C3:AC:40:E8:B2:80:94:F0
Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e
Certificate serial: 01983FE9D36AF23D2D3C8889499E4941530F
Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/t0ukQ5CSEan3v8t7w6xA6LKAlPA.roa
Signing time: Fri 25 Jul 2025 04:49:05 +0000
ROA not before: Fri 25 Jul 2025 04:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 95.128.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:e9:d3:6a:f2:3d:2d:3c:88:89:49:9e:49:41:53:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e
Validity
Not Before: Jul 25 04:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b74ba443909211a9f7bfcb7bc3ac40e8b28094f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:9d:dc:15:12:55:8d:96:03:45:50:be:d8:
77:ae:75:94:2b:2e:23:18:f3:79:39:06:25:79:51:
ed:09:da:5f:a7:8f:0d:7c:b9:dd:be:53:2f:c1:91:
70:ed:3a:35:a4:8e:24:bf:01:c6:c4:84:b5:a8:ea:
6e:1e:d5:69:c2:13:9d:d7:31:04:e9:33:0c:cf:75:
59:1b:1a:c7:5d:86:1b:41:d2:80:b9:d8:24:17:9a:
f0:0e:be:e4:c0:83:7d:dc:40:6d:1f:da:e2:6f:96:
6c:03:ae:b3:ec:74:bc:65:b1:6f:2e:de:ec:0f:e9:
f6:67:27:65:62:73:a9:30:a1:eb:3c:92:16:39:c8:
38:f5:f0:0a:9d:52:a2:2c:d3:ec:44:05:d5:2d:ad:
76:a3:5c:2b:6d:d8:e7:59:1d:1b:3e:2c:e5:94:a9:
0a:7e:45:2d:3c:6f:f4:22:24:86:bc:a9:0e:26:58:
4f:89:96:02:3d:15:2f:fd:1a:3d:16:4e:b0:d9:d3:
d8:41:41:11:07:de:ac:1e:3a:09:1b:87:79:af:50:
e3:c1:e1:01:9f:57:74:58:59:6b:2d:96:2d:9d:b2:
89:29:a8:a4:e6:cd:ab:ee:8c:18:b5:18:65:2f:88:
d1:0e:f7:40:92:4e:02:91:58:17:b6:70:1e:ed:ce:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:A4:43:90:92:11:A9:F7:BF:CB:7B:C3:AC:40:E8:B2:80:94:F0
X509v3 Authority Key Identifier:
keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/t0ukQ5CSEan3v8t7w6xA6LKAlPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.157.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2b:23:e3:cc:c1:67:7b:44:5f:8e:61:e2:02:cd:95:69:a6:
26:d8:d3:dc:ca:13:15:42:96:07:b7:e4:2a:87:fc:5c:9d:c2:
b9:39:4c:34:35:ad:85:e5:0f:0f:2f:77:cc:5f:89:19:44:9b:
7b:04:25:10:60:b0:61:fe:04:84:27:e4:0a:48:f8:88:7d:27:
49:dd:9e:d4:78:88:6e:49:51:4a:61:7d:4c:dc:93:8d:7b:dd:
8a:ad:ef:e2:5d:74:72:55:89:f9:0b:a6:99:d8:2d:c5:58:ba:
f8:7c:ad:e3:43:2c:e4:f9:10:63:8a:5f:12:b9:ee:2e:11:37:
0a:2a:87:14:34:bc:ac:ba:e5:71:c5:df:f6:8f:1b:7b:8e:4b:
db:de:a2:9e:5a:5a:e0:01:d1:ee:7d:8e:cf:f5:a5:50:33:93:
f3:32:28:35:9b:c4:da:0f:9b:37:3d:42:dc:86:df:6f:d8:2e:
a9:9a:b2:00:ba:74:0d:6f:35:b8:1e:d3:a4:fa:e5:8e:2e:32:
ed:92:31:27:10:42:91:c4:98:b4:e6:95:45:a8:4e:5d:39:78:
0a:2e:95:f8:b4:ec:95:3c:7a:17:2e:93:08:e5:08:de:01:ca:
b4:25:32:4b:b0:16:4e:51:49:a4:a1:8f:3d:6e:a3:fb:1a:14:
96:3a:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:50 2025 by rpki-client