Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/k1Xc3mWeEmmCaFh4ckEWpLNdpb4.roa
File: k1Xc3mWeEmmCaFh4ckEWpLNdpb4.roa (raw, json)
Hash identifier: GH7ewlueeqCkKF8FdnLHf1UDx0BAMbcdhJEt7chNpzU=
Subject key identifier: 93:55:DC:DE:65:9E:12:69:82:68:58:78:72:41:16:A4:B3:5D:A5:BE
Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial: 019874603711A32ADECDCC8CF726FB066429
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/k1Xc3mWeEmmCaFh4ckEWpLNdpb4.roa
Signing time: Mon 04 Aug 2025 09:18:39 +0000
ROA not before: Mon 04 Aug 2025 09:18:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197726
IP address blocks: 212.86.110.0/24 maxlen: 24
212.86.111.0/24 maxlen: 24
212.86.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:60:37:11:a3:2a:de:cd:cc:8c:f7:26:fb:06:64:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
Validity
Not Before: Aug 4 09:18:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9355dcde659e126982685878724116a4b35da5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:08:fb:d4:68:5b:36:ea:95:0c:47:2e:e9:
11:50:31:6d:27:20:46:1d:c6:54:a2:6c:3c:57:a2:
6c:d5:29:4a:32:fe:f8:0f:72:a0:93:0d:73:00:21:
bd:74:fe:42:6b:ab:c7:66:4e:52:ff:db:18:d5:eb:
ca:39:e2:07:87:ab:e1:5f:76:0d:a8:c2:dc:91:2c:
41:5c:2c:3d:1e:93:8c:e0:ab:69:6d:f8:cc:b7:f0:
cc:58:2b:91:08:35:b5:e2:35:52:fa:41:83:76:a6:
c7:7a:f9:af:ea:c8:d8:ff:4b:e3:0c:20:aa:70:a7:
cf:0a:24:09:06:43:f5:77:7f:30:2b:b0:9b:9b:7b:
ca:1f:57:0b:f6:7a:dd:ec:96:49:aa:38:c1:02:3d:
4c:9d:74:bc:fb:97:0f:e5:6d:ea:22:9c:75:08:c7:
e2:79:47:c3:a0:a7:59:94:1d:08:4a:17:0b:36:a7:
1c:cd:95:dd:b1:3f:2f:29:e3:15:1a:ec:fd:df:46:
83:21:f0:11:10:b5:db:87:33:cd:82:6b:1f:09:46:
da:4f:85:5a:50:7e:37:27:ff:e9:42:78:41:44:f3:
f2:b2:66:8f:46:68:dc:db:f8:c9:6b:37:f3:80:8b:
96:19:27:18:7f:2f:e6:9f:a8:73:ca:35:d6:b6:fe:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:55:DC:DE:65:9E:12:69:82:68:58:78:72:41:16:A4:B3:5D:A5:BE
X509v3 Authority Key Identifier:
keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/k1Xc3mWeEmmCaFh4ckEWpLNdpb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.86.110.0/23
212.86.113.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:b2:05:68:02:a6:48:e4:c8:cc:1a:60:9a:c6:5e:e7:08:65:
f9:0d:1f:5a:06:74:08:45:61:64:32:3f:ea:00:a9:52:ce:f2:
d5:f6:f6:eb:3c:05:4b:ea:61:f6:1c:db:5d:17:32:5d:0f:14:
30:64:3c:08:09:d5:17:e8:52:49:1b:97:7b:1b:d8:93:11:39:
aa:ae:8f:c3:4b:48:98:93:06:b4:64:f3:81:42:8a:a2:43:f4:
c1:6f:a2:b1:d9:3d:e3:17:da:4c:1a:45:3e:99:5c:57:fb:3f:
e9:78:fd:bf:41:86:0c:d5:52:49:75:41:24:6c:c4:c0:b6:a5:
be:8e:61:6e:00:44:67:74:2a:1a:61:fc:b7:10:fc:db:39:29:
a5:cb:ce:2d:94:1c:0d:26:8e:28:01:2c:28:b5:23:c3:dd:26:
9d:04:98:2b:64:46:09:e2:17:6d:41:3d:96:cd:9c:68:60:bf:
9f:8d:33:2b:cd:5f:56:b5:c4:bc:41:07:0f:e2:dc:85:5a:b4:
88:15:6f:0d:40:84:e1:a4:90:d9:dc:00:e3:bb:c8:8e:98:44:
93:69:12:d9:bf:12:45:ef:90:80:27:79:bb:0a:4a:2c:00:ed:
ee:86:48:bd:88:00:b7:4a:51:10:34:76:68:3a:3b:c8:87:0d:
17:01:99:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:02:47 2025 by rpki-client