Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/pwCEwqx7wOXdSyzzlUjrkyZY8go.roa
File: pwCEwqx7wOXdSyzzlUjrkyZY8go.roa (raw, json)
Hash identifier: 6xeXkvyhUMiZNvcsvLCq5I4Gh/+dgUUld1BGQwC1oWA=
Subject key identifier: A7:00:84:C2:AC:7B:C0:E5:DD:4B:2C:F3:95:48:EB:93:26:58:F2:0A
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 019888D3E46B9FD89633A975B91648E02570
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/pwCEwqx7wOXdSyzzlUjrkyZY8go.roa
Signing time: Fri 08 Aug 2025 08:37:24 +0000
ROA not before: Fri 08 Aug 2025 08:37:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21320
IP address blocks: 83.97.88.0/21 maxlen: 21
2001:799::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 13:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:d3:e4:6b:9f:d8:96:33:a9:75:b9:16:48:e0:25:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Aug 8 08:37:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a70084c2ac7bc0e5dd4b2cf39548eb932658f20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:8c:d7:3d:90:71:30:54:3b:0b:d7:70:c3:
6a:7b:fb:50:c2:e7:bb:9c:3a:f9:35:7b:e3:8c:62:
b7:56:fe:d1:43:a9:f3:4e:6e:09:a4:af:45:ab:42:
ae:82:0f:b0:88:90:2d:d5:c8:84:4b:45:86:a9:de:
28:ae:0e:3b:50:74:66:ae:32:a7:96:ba:1c:61:b7:
d2:65:16:71:34:1c:11:a0:9d:84:6b:f4:1e:a4:c1:
10:d7:cf:6d:e1:80:9a:d0:10:82:ce:28:44:17:fb:
f7:f1:84:e6:0c:3c:28:b9:a2:e2:9f:07:77:b5:a6:
48:6e:69:f7:33:44:4a:b7:c9:a9:5c:d9:bc:b7:2b:
93:ca:5e:7e:fd:18:71:6d:44:88:bc:df:43:ca:b9:
cf:6e:e9:eb:cc:45:75:31:9e:88:b0:23:5e:14:00:
65:ef:2f:c6:20:1f:44:79:a9:b8:5a:22:98:14:2d:
d4:13:72:11:7b:f5:2d:13:8a:29:91:f3:0e:b7:a2:
bc:9e:0a:34:db:cc:db:8a:e5:af:3d:3c:1c:72:35:
5f:19:4a:95:92:3e:ac:9b:8d:6c:9b:56:8f:98:6b:
b3:67:67:a8:11:0a:06:a9:52:1b:fc:3a:e4:47:8b:
54:ea:e2:10:83:31:53:01:92:74:50:29:f5:5e:a1:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:84:C2:AC:7B:C0:E5:DD:4B:2C:F3:95:48:EB:93:26:58:F2:0A
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/pwCEwqx7wOXdSyzzlUjrkyZY8go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.88.0/21
IPv6:
2001:799::/32
Signature Algorithm: sha256WithRSAEncryption
53:f1:ef:d3:16:ce:b1:e9:b2:6f:d2:b4:52:23:c8:ff:68:b2:
4b:99:6a:22:fa:d7:17:e7:0c:81:b5:18:60:7f:25:ba:cb:2b:
8f:12:a2:d9:4b:d6:76:b1:8d:19:c6:43:06:52:06:a2:7f:60:
da:b4:c9:0a:62:6d:97:6c:3e:ac:e1:e4:36:00:bd:4d:b1:8b:
47:8d:7a:61:a5:5a:5a:d0:1b:8c:f7:7d:77:96:a4:15:1e:da:
59:39:1f:53:9a:c6:78:dc:49:91:8d:4d:10:68:2e:49:61:a0:
4b:3d:fd:74:4c:52:ee:be:08:dc:2d:39:ab:25:b1:3a:90:16:
88:8a:1d:c9:34:22:2d:df:77:69:2d:48:64:83:ff:c9:42:96:
ef:61:2f:77:c5:a5:2a:98:5d:c5:d4:f5:ec:6b:ee:9f:9c:60:
56:c5:ce:ee:3c:6a:ad:eb:08:b6:0d:c2:ea:ef:a0:94:5e:74:
c2:8a:c1:e1:ca:71:bf:48:5d:a0:c1:a6:85:cb:3a:ab:90:1a:
6f:d7:38:42:66:89:6d:ca:61:7b:8d:f7:c8:11:89:20:65:91:
47:25:e1:31:b9:f3:d1:f2:4f:10:cc:30:3c:37:ba:d3:9b:79:
ed:c1:94:e7:b1:cb:bd:2d:1d:92:8b:4a:09:42:cb:9b:64:c3:
97:15:37:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 20:18:51 2025 by rpki-client