Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/RlN2uWoEv14xO_LzTk-v1HnMkwg.roa
File: RlN2uWoEv14xO_LzTk-v1HnMkwg.roa (raw, json)
Hash identifier: HXztpEDkMFeAncbH7mSYQ++noWePPH+qDgK3dcnLFvo=
Subject key identifier: 46:53:76:B9:6A:04:BF:5E:31:3B:F2:F3:4E:4F:AF:D4:79:CC:93:08
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0198611B322E096F5373F72641595CAC1ED0
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/RlN2uWoEv14xO_LzTk-v1HnMkwg.roa
Signing time: Thu 31 Jul 2025 15:30:28 +0000
ROA not before: Thu 31 Jul 2025 15:30:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200740
IP address blocks: 95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:1b:32:2e:09:6f:53:73:f7:26:41:59:5c:ac:1e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 31 15:30:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=465376b96a04bf5e313bf2f34e4fafd479cc9308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:07:32:29:f5:c8:d9:1c:ce:13:49:4f:22:
ad:53:1f:76:71:f5:d0:6d:8a:3d:73:f2:b3:76:1b:
03:31:cd:50:c4:c8:80:90:99:53:e1:cf:b1:5a:94:
a2:39:0a:6d:5f:2a:8c:2f:43:a7:c6:d5:64:f1:66:
c4:3e:4c:71:06:f3:3e:a4:eb:00:56:10:a7:ed:e5:
55:b2:3a:78:12:75:6c:ac:1f:37:73:19:88:bb:d4:
02:fe:6f:71:77:eb:a7:ee:2d:e8:fc:71:e5:4b:92:
86:8d:2d:14:c6:c1:f4:6e:0c:c0:39:ae:7d:0b:35:
24:2c:88:b4:bc:59:61:68:52:b1:ba:35:97:62:dd:
98:9b:88:d2:ce:d1:74:e1:a8:d1:a0:97:dc:01:80:
d9:bf:5a:ff:4e:e0:a2:4a:89:5b:e2:ab:b0:89:41:
9e:ef:22:87:f4:51:60:1d:2a:15:2b:e3:31:04:d1:
fc:9d:a4:82:be:d7:a4:b7:72:10:b9:ab:9d:0b:68:
bc:a2:c0:1c:ba:d5:80:78:63:ba:f1:7c:02:c2:a6:
b0:98:20:30:63:26:20:a7:03:1c:37:d6:94:5d:ee:
da:b5:fc:37:f3:35:55:fe:5b:88:67:93:48:af:68:
23:23:a7:56:bd:e3:ce:68:ff:4f:25:19:80:1b:97:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:53:76:B9:6A:04:BF:5E:31:3B:F2:F3:4E:4F:AF:D4:79:CC:93:08
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/RlN2uWoEv14xO_LzTk-v1HnMkwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.112.0/23
95.81.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:fd:2b:86:2e:b2:f3:1f:9b:de:ae:39:33:41:57:6f:8e:f5:
9b:da:0d:8f:29:37:b8:53:97:7b:9a:9a:37:b7:fd:05:19:b5:
a4:74:10:d4:bd:d7:8f:a3:e4:b2:71:c4:8f:58:53:4f:c1:5d:
ce:57:78:8e:6f:eb:74:c2:f8:fa:ef:49:90:8f:c8:80:30:63:
8e:c4:67:a2:e1:29:3f:26:96:8b:76:21:f2:b2:d9:a2:fb:09:
5e:8d:9f:b0:fa:89:a5:ae:d4:ee:27:40:25:cd:29:89:7b:0d:
bb:b5:ef:c8:89:78:c3:c0:e5:97:0e:8d:32:19:94:3c:24:00:
60:8e:5a:f0:cf:a5:ac:12:ac:e4:88:81:1c:1d:93:dd:f8:46:
00:15:16:cb:55:18:b8:09:2c:b3:f6:16:f4:2f:d2:1b:46:be:
dc:0d:be:76:35:3d:68:3b:e9:3a:dc:1b:09:92:04:26:a6:c4:
60:53:3e:12:28:9c:c6:ba:71:d0:b0:c2:fc:34:60:72:5e:9e:
b4:d9:d8:7a:89:78:6e:ed:86:48:7f:c3:ac:99:db:50:52:26:
a9:18:d9:07:c8:73:bd:cd:ed:f6:9a:c6:68:6e:0f:22:9a:bd:
67:2e:53:8c:aa:06:8b:0a:78:c6:a0:fe:8e:41:5d:f9:c0:78:
e6:dd:64:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:16:52 2025 by rpki-client