Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DfbsEZHRLHImXjiWsCLRkF7fAnc.roa
File: DfbsEZHRLHImXjiWsCLRkF7fAnc.roa (raw, json)
Hash identifier: ywnxliBraExWLIXgU/ffRgritJRKYZ329GHl9tLWUzE=
Subject key identifier: 0D:F6:EC:11:91:D1:2C:72:26:5E:38:96:B0:22:D1:90:5E:DF:02:77
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0199D00B2FEA4E6F100E441F48E93560550C
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DfbsEZHRLHImXjiWsCLRkF7fAnc.roa
Signing time: Fri 10 Oct 2025 21:33:38 +0000
ROA not before: Fri 10 Oct 2025 21:33:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214880
IP address blocks: 2a14:67c1:30::/44 maxlen: 48
2a14:67c1:d300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d0:0b:2f:ea:4e:6f:10:0e:44:1f:48:e9:35:60:55:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Oct 10 21:33:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0df6ec1191d12c72265e3896b022d1905edf0277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:11:48:eb:2a:5f:91:aa:cc:e0:c9:32:b3:
2b:c0:73:d8:50:56:4c:80:ce:7f:2c:ce:2a:cf:3e:
1d:9f:40:63:26:7c:96:58:e7:ca:ea:a5:a8:94:fe:
00:43:43:9c:b7:ad:a7:92:cd:cd:8e:e7:7c:9a:39:
85:12:2c:f2:60:a0:dc:bd:7b:db:31:95:b7:44:e7:
8f:71:89:c4:7d:23:6f:ae:f6:24:62:04:ed:67:33:
6d:d7:c6:a6:07:28:d0:44:ac:ef:ba:83:3a:e4:17:
06:0d:f6:3e:3b:8c:2a:54:20:0e:98:01:dd:f9:a2:
a3:f5:b2:f4:b7:71:76:b5:29:d9:78:ca:12:0a:61:
c6:f5:0f:fe:f3:12:7d:b3:b0:ba:19:01:f4:f5:ec:
7f:20:4b:fa:46:dc:10:d4:e7:a6:23:e5:9b:88:77:
97:be:27:dd:57:89:7c:1d:b7:4e:af:e0:ef:e1:99:
10:94:e0:0f:54:05:63:97:45:3b:26:9c:d6:c4:e5:
3f:64:a5:56:5d:5d:59:25:19:16:86:19:26:0d:8a:
13:f2:f9:0c:dd:ed:dc:b1:6c:be:5c:a2:17:a3:a3:
5a:77:ca:d9:35:d7:26:e8:9e:bb:8d:d6:f5:de:3e:
3f:c1:4c:1c:c0:2a:2a:ca:45:b1:39:66:9d:8e:db:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F6:EC:11:91:D1:2C:72:26:5E:38:96:B0:22:D1:90:5E:DF:02:77
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DfbsEZHRLHImXjiWsCLRkF7fAnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:30::/44
2a14:67c1:d300::/40
Signature Algorithm: sha256WithRSAEncryption
d7:23:02:c0:12:16:df:b6:92:e4:03:26:ea:1c:e7:ce:f4:56:
8f:22:2a:e0:7e:02:df:11:c5:f1:2c:03:90:3b:1d:60:29:bd:
26:ac:99:91:b5:84:57:e7:6b:ca:28:1d:6a:9b:c8:ff:68:e2:
e7:8a:38:93:4d:5b:64:6a:94:6a:19:a9:10:8d:d6:68:0e:07:
60:b6:7a:8f:80:bd:f1:11:a4:6e:eb:8c:c1:df:b5:7a:de:18:
dc:0c:99:a7:84:e9:0b:be:a9:85:4f:e3:31:f4:f7:0f:36:ed:
b1:0f:14:f5:e9:97:d9:94:40:f6:c1:06:c9:3d:d5:5d:a9:89:
8b:89:2b:fb:c9:86:59:71:74:b8:ed:9d:45:cd:76:f7:15:e1:
ce:bd:20:32:ef:00:58:86:f3:9d:a8:8f:1a:20:7d:3c:be:9a:
f7:f5:93:00:a4:06:e4:da:35:05:aa:02:ba:40:1a:5c:32:0e:
06:ee:de:40:0f:9c:2d:fa:69:99:71:a4:d7:72:05:4c:b8:53:
32:ab:62:68:23:f3:59:0f:9f:5d:d9:df:7e:59:0f:97:93:23:
e1:12:d7:d4:60:96:1f:c2:9e:80:69:db:65:24:cc:69:33:2f:
eb:28:f0:ec:76:e0:62:82:90:41:fe:dd:02:d8:a5:6c:83:f9:
c3:a7:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:16:59 2025 by rpki-client