Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/XhNIRKox72ceLxS-HicNdteAlnc.roa
File: XhNIRKox72ceLxS-HicNdteAlnc.roa (raw, json)
Hash identifier: QNRbEve8iPmaf5PJ3d4wKSJFvAQJTgfZsNNYbZDbIlc=
Subject key identifier: 5E:13:48:44:AA:31:EF:67:1E:2F:14:BE:1E:27:0D:76:D7:80:96:77
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01975F73DB94C743244D58269F2EC5D9AE52
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/XhNIRKox72ceLxS-HicNdteAlnc.roa
Signing time: Wed 11 Jun 2025 14:45:17 +0000
ROA not before: Wed 11 Jun 2025 14:45:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25098
IP address blocks: 93.94.48.0/24 maxlen: 24
93.94.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:73:db:94:c7:43:24:4d:58:26:9f:2e:c5:d9:ae:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jun 11 14:45:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e134844aa31ef671e2f14be1e270d76d7809677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:c2:ff:61:b7:9a:b0:2a:b7:fd:41:a9:16:
f0:56:7a:f0:a2:b2:73:11:c8:fe:66:44:26:cc:fe:
b5:6a:a8:bf:04:0d:fe:b6:72:c7:6c:66:3a:28:97:
96:b8:0a:8f:58:1b:b9:bd:b0:45:a1:ec:c6:a4:65:
a5:f3:0f:12:1e:ec:06:9c:47:a8:0c:0a:66:39:16:
e2:67:6c:c4:19:90:73:08:23:38:25:de:92:50:0f:
c8:76:0e:97:89:7f:bb:fd:3e:40:c9:fc:72:3e:6f:
c3:55:7f:b5:53:8c:67:26:97:e3:2f:42:f0:78:d1:
20:2d:e1:85:3b:17:02:3f:42:62:e3:1d:84:af:ba:
6b:ea:0d:76:ef:ea:93:53:87:da:e8:90:93:0b:fa:
5a:20:ff:52:a3:b8:75:77:83:36:3c:40:f3:c1:74:
71:3d:60:62:d4:5d:1c:9c:5e:73:8c:f8:98:dc:86:
41:5c:bd:10:eb:8e:9a:d6:a3:c4:0e:68:b0:c0:b4:
79:6d:31:38:8c:78:34:fe:16:55:39:d5:cf:8c:82:
14:c9:94:cf:36:e4:15:67:02:fd:ee:ea:ba:a9:f7:
88:66:74:9a:75:5f:80:3f:18:89:31:c1:54:dd:a5:
59:b1:3c:59:8f:74:02:b9:d5:1a:6d:29:5b:63:ce:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:13:48:44:AA:31:EF:67:1E:2F:14:BE:1E:27:0D:76:D7:80:96:77
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/XhNIRKox72ceLxS-HicNdteAlnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.48.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:37:df:b9:13:71:88:d0:5e:d1:d3:10:b6:f2:ae:3b:a2:ea:
d0:87:dc:a0:0b:d6:6d:b4:e8:cb:4f:43:2f:d0:0a:97:fb:29:
60:f5:09:1d:c0:05:0d:e9:f5:cc:e9:c3:ba:95:ea:05:86:98:
41:e7:d7:02:b9:91:5a:5e:4f:a4:b4:1f:96:cc:cb:b6:c2:6a:
a7:ca:4e:5f:e5:3e:fe:b6:00:ce:2c:2e:d7:0c:78:0f:c4:c5:
44:0d:bb:c1:9d:48:d8:35:55:6e:d6:04:42:b2:f8:ee:6f:ee:
c8:58:0c:f9:b9:bd:10:10:22:98:91:9a:9a:23:e4:25:61:41:
f0:c1:dc:f3:10:2e:24:d8:75:cc:94:7b:82:67:ea:08:3d:22:
5e:de:5a:c9:c7:c9:f0:a8:e4:06:23:53:32:58:f1:28:a9:c6:
95:51:a8:97:a9:9e:da:82:f1:55:ca:98:2c:0c:ba:db:2e:78:
07:1e:4e:32:13:56:b7:b3:76:04:a3:b3:f8:48:6a:75:62:d8:
00:af:d4:1f:ae:b7:28:58:18:5e:da:be:c1:29:6d:cf:c2:b6:
40:ad:77:44:dc:15:15:36:b7:80:51:8a:c6:49:26:9b:b5:23:
c1:2b:e7:d7:dd:da:3b:4b:cf:c0:76:ca:08:1d:cb:67:39:64:
e3:1e:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:25:07 2025 by rpki-client