Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/_5i050DixZy2EtKOhz8lOMgCfIg.roa
File: _5i050DixZy2EtKOhz8lOMgCfIg.roa (raw, json)
Hash identifier: /YfNbDhqCMdFRtH+NtU0vFR+Vi8QHGbG/GrA2aaBEwM=
Subject key identifier: FF:98:B4:E7:40:E2:C5:9C:B6:12:D2:8E:87:3F:25:38:C8:02:7C:88
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 0197598C52161E9AA57FF890071A1682051F
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/_5i050DixZy2EtKOhz8lOMgCfIg.roa
Signing time: Tue 10 Jun 2025 11:14:17 +0000
ROA not before: Tue 10 Jun 2025 11:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20804
IP address blocks: 195.137.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:8c:52:16:1e:9a:a5:7f:f8:90:07:1a:16:82:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Jun 10 11:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff98b4e740e2c59cb612d28e873f2538c8027c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:30:2e:52:84:01:72:8b:ab:b8:42:6a:61:22:
f5:27:3b:9a:ee:05:0f:f2:be:67:e2:ca:48:20:85:
32:53:b3:f3:77:b5:a1:8b:62:bd:23:6f:48:b9:1a:
c8:3b:58:38:69:90:c9:63:c8:4b:c2:9a:13:ad:40:
f4:fb:32:50:57:11:ff:d0:8b:24:de:c7:04:86:49:
b5:96:b0:5a:61:19:95:a6:1d:b0:ea:86:be:e7:68:
e8:e4:0e:b1:5c:35:bf:ae:1b:d5:62:48:a4:97:32:
12:94:a2:eb:78:8e:a8:89:ae:8a:6a:0b:ae:32:fc:
b0:ce:1f:8f:88:3f:89:19:a3:2b:df:72:5e:d2:53:
81:b7:34:dd:b3:2f:9d:5b:16:7b:cd:f1:15:70:d1:
c5:50:5d:da:d3:74:79:7e:09:5c:61:b7:f3:7b:56:
32:2c:44:f6:01:87:84:d4:d2:48:0c:d9:63:22:d7:
a2:4d:c5:83:24:a8:f9:6a:be:15:99:68:f6:b9:35:
0d:c7:77:4e:a6:f2:b0:4b:8f:54:ed:43:34:1a:07:
e7:f1:f7:69:aa:48:71:35:ae:e9:68:e9:d6:27:bd:
2d:04:60:70:70:43:0f:88:17:52:ec:33:27:53:c7:
be:c1:3f:7e:7a:6d:db:64:f0:d3:10:ff:8c:b1:71:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:98:B4:E7:40:E2:C5:9C:B6:12:D2:8E:87:3F:25:38:C8:02:7C:88
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/_5i050DixZy2EtKOhz8lOMgCfIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.162.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a9:1e:cd:20:56:84:6b:b9:da:c1:a3:d6:aa:c0:e5:7a:2e:
f3:c4:9e:18:7d:ec:99:f7:e2:e2:44:69:13:aa:b3:54:49:3e:
29:9f:eb:01:0b:01:b0:7a:15:ab:28:14:97:01:bc:8e:0d:51:
13:82:74:08:48:d7:22:d0:6f:92:22:17:dc:fa:76:80:85:f9:
46:8e:40:e4:28:9d:b4:30:8f:56:ed:dd:13:2d:89:9a:6e:b4:
a9:c3:4d:b4:62:c4:7d:d9:6d:99:23:de:a7:ef:2b:90:0f:a3:
e4:a2:46:1c:ba:59:d1:d5:b7:4c:de:78:dc:4c:4b:ce:e9:37:
a8:50:de:51:95:32:b5:a6:86:80:62:7b:09:e4:3a:be:93:3c:
96:d9:ce:8e:7d:0a:88:90:74:f0:20:15:d2:47:90:c3:e4:3c:
bf:da:af:0f:3d:a1:d9:f7:ba:41:90:43:cc:aa:2c:5d:ec:af:
1c:32:c1:db:08:c3:ea:69:00:ca:b1:fe:86:f9:2e:eb:21:69:
bd:7f:16:45:72:d2:ef:92:11:bb:c5:ff:22:ce:20:19:cf:31:
66:69:54:da:67:cf:b5:d4:c7:dd:c0:33:36:35:3c:b5:15:10:
ef:b6:a7:98:58:f1:ae:7d:4d:cd:aa:64:79:2e:c4:1d:c2:d8:
67:34:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:24:52 2025 by rpki-client