Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/CfeQnBnwZnkX1exlA_8E_9J0HQY.roa
File: CfeQnBnwZnkX1exlA_8E_9J0HQY.roa (raw, json)
Hash identifier: zgoZGw80fZLZ+LHAElH5ez4Hyw5+xxVl0f9aIIP8B/0=
Subject key identifier: 09:F7:90:9C:19:F0:66:79:17:D5:EC:65:03:FF:04:FF:D2:74:1D:06
Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial: 01985169B3FBDE28A52058FF16948903B6BB
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/CfeQnBnwZnkX1exlA_8E_9J0HQY.roa
Signing time: Mon 28 Jul 2025 14:22:18 +0000
ROA not before: Mon 28 Jul 2025 14:22:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132707
IP address blocks: 46.16.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:69:b3:fb:de:28:a5:20:58:ff:16:94:89:03:b6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Validity
Not Before: Jul 28 14:22:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09f7909c19f0667917d5ec6503ff04ffd2741d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:5b:0f:42:71:b8:22:0a:b9:eb:9b:46:b3:
e7:16:03:d9:7e:a6:d4:eb:b3:8d:0c:58:3f:9f:7a:
d9:97:fc:26:a9:b8:44:37:68:7e:1e:9f:5f:61:0b:
b6:f5:6c:41:ec:95:e7:d5:a4:3c:e7:9f:1e:02:f2:
c1:a2:e4:ae:a2:9b:32:e9:ca:cb:68:ea:19:7e:52:
0b:b8:d4:b0:3f:f0:e9:c1:da:4d:28:42:c0:98:ee:
cb:69:7d:7a:cd:f5:81:ec:b7:2b:26:66:ba:e7:38:
32:b6:68:13:70:a1:04:44:e2:88:55:2e:cd:f1:8a:
b4:83:45:f3:1e:7c:ae:fa:43:bc:cb:37:4b:df:c3:
57:e8:b0:50:fc:fc:61:92:dc:87:0e:43:ba:ce:63:
23:c5:be:9e:1f:74:b0:f1:a3:1e:98:ce:f9:a3:c6:
b2:f6:91:27:6f:f2:c1:57:c3:91:e2:a6:5f:10:21:
9c:f4:64:fa:02:97:61:c8:0a:65:b8:99:07:cd:6f:
76:fb:24:7a:3d:e9:07:a8:48:87:46:b8:bf:6d:23:
c5:1f:d8:01:36:a0:54:90:d5:79:78:33:30:93:be:
69:fe:fb:f1:6b:15:01:66:cf:0a:ba:f9:47:68:bc:
3c:94:80:a4:3b:6d:f5:2d:1d:57:8c:77:48:a7:ab:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:90:9C:19:F0:66:79:17:D5:EC:65:03:FF:04:FF:D2:74:1D:06
X509v3 Authority Key Identifier:
keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/CfeQnBnwZnkX1exlA_8E_9J0HQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.162.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6c:72:31:f3:8f:81:32:fc:13:21:a7:42:f6:ab:e6:ac:31:
af:24:6e:66:c3:fd:19:c8:e2:64:b5:35:cd:be:38:9c:ce:00:
d1:0f:21:33:02:12:29:9b:8f:9e:95:ff:72:c6:1c:f8:7d:38:
27:32:ce:4b:aa:e4:ee:94:48:85:3d:32:0e:67:7d:47:22:d1:
99:47:8c:8a:9b:1d:31:b7:9e:3c:7f:77:ea:63:41:eb:06:f2:
17:08:dd:8d:df:2d:cc:90:19:da:00:22:a0:76:de:67:60:9b:
9b:30:25:c9:b9:6c:a5:6d:94:6d:ef:52:fc:e5:81:10:60:24:
fb:ec:3a:b9:9c:c6:36:67:81:85:1b:3e:2b:70:13:1c:e0:25:
9b:07:2b:e4:c5:0e:3a:69:91:8a:00:f8:41:c4:31:90:c2:e0:
b1:df:ed:5d:c4:ca:7f:83:a7:17:3b:d5:b2:17:61:32:df:aa:
16:37:30:55:ce:87:51:67:4c:db:72:e4:79:5c:2f:58:dd:96:
80:26:c7:e2:94:1a:62:d0:34:68:b3:0b:bc:09:d2:92:fb:ac:
5f:41:a8:f7:64:76:b8:32:c8:72:e7:48:cb:a3:bc:a3:82:c0:
35:bc:5c:72:b4:0a:3d:34:9f:85:3c:47:d3:02:88:3d:c7:8a:
d8:f7:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:49:37 2025 by rpki-client