Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/DaHb-AgbaohKBsaZFPAVDGbt_RI.roa
File: DaHb-AgbaohKBsaZFPAVDGbt_RI.roa (raw, json)
Hash identifier: T2KsBuhVxG35+5zMSgS7xBXEVKNyKlB23AKVgPghBi4=
Subject key identifier: 0D:A1:DB:F8:08:1B:6A:88:4A:06:C6:99:14:F0:15:0C:66:ED:FD:12
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 01999AF0E5B79B91AAA379D9B7275D774F34
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/DaHb-AgbaohKBsaZFPAVDGbt_RI.roa
Signing time: Tue 30 Sep 2025 14:05:02 +0000
ROA not before: Tue 30 Sep 2025 14:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210008
IP address blocks: 185.230.181.0/24 maxlen: 24
185.230.182.0/24 maxlen: 24
185.230.183.0/24 maxlen: 24
2a13:d00:a100::/40 maxlen: 48
2a13:d00:a680::/48 maxlen: 48
2a13:d00:c180::/48 maxlen: 48
2a13:d00:cf01::/48 maxlen: 48
2a13:d00:da30::/48 maxlen: 48
2a13:d00:da80::/48 maxlen: 48
2a13:d00:dc80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:f0:e5:b7:9b:91:aa:a3:79:d9:b7:27:5d:77:4f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Sep 30 14:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0da1dbf8081b6a884a06c69914f0150c66edfd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:04:c6:ee:6f:43:e3:48:34:e0:62:3b:8c:
84:2e:4f:a0:ea:0f:97:c7:99:6d:fa:86:92:fe:3a:
a3:4f:4a:1b:67:c4:6b:ce:56:93:36:7c:c7:17:64:
cf:7d:61:a2:af:1d:b6:9d:26:70:2d:13:45:1a:d9:
2d:ce:c7:ca:a5:1f:e2:5b:49:40:ed:24:eb:3c:42:
88:c6:c8:14:2d:0b:35:76:4e:e2:27:d8:10:20:44:
1d:37:62:fe:46:ef:ea:9d:1b:58:c2:46:f5:56:c4:
02:7e:8c:ee:19:8f:3f:63:27:46:b8:a5:e4:23:25:
51:68:5f:8c:23:5a:c3:0a:33:02:17:3c:3b:23:e2:
51:ca:0d:c7:af:ef:74:a8:69:c4:93:05:8a:fd:1f:
6f:0a:f5:c1:25:c3:7d:6a:94:49:21:75:8e:09:8d:
55:99:dd:fe:ce:d8:f9:3a:81:ce:72:a0:a5:fa:b8:
59:cf:88:77:19:7b:fa:11:a7:27:63:07:dc:66:a7:
e4:6a:aa:08:6c:53:2a:16:18:1c:3f:22:c8:b0:26:
18:c0:9c:30:08:48:1d:01:74:07:e2:12:ea:7c:0a:
80:ab:06:63:b7:26:b6:11:7d:03:51:19:0d:77:43:
1e:4e:25:21:0b:8c:72:22:51:b4:e5:6c:e7:45:9f:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A1:DB:F8:08:1B:6A:88:4A:06:C6:99:14:F0:15:0C:66:ED:FD:12
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/DaHb-AgbaohKBsaZFPAVDGbt_RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.181.0-185.230.183.255
IPv6:
2a13:d00:a100::/40
2a13:d00:a680::/48
2a13:d00:c180::/48
2a13:d00:cf01::/48
2a13:d00:da30::/48
2a13:d00:da80::/48
2a13:d00:dc80::/48
Signature Algorithm: sha256WithRSAEncryption
5b:bd:df:93:60:3e:14:cb:f2:8c:2e:f7:a6:15:d7:a4:9f:51:
fe:63:bc:b1:94:96:f9:23:90:f1:0d:14:ba:83:a5:66:90:18:
af:17:7a:16:00:db:b8:22:3e:3c:3a:b4:2a:33:a3:7e:3d:a5:
0e:51:fd:53:4a:1a:3a:da:4a:d5:96:26:b8:fc:57:df:c8:da:
25:3b:e2:80:1f:7c:2b:cd:ef:97:d6:ff:d3:58:19:b6:ca:b5:
40:78:53:1d:21:26:5f:bc:1d:d7:28:b3:1e:6b:8e:59:40:cb:
2f:30:a5:83:45:33:6e:ae:1d:5a:87:a0:38:e2:55:ee:cd:b2:
b1:56:88:0e:31:23:61:af:5b:13:90:c7:bb:92:c4:b0:3b:11:
5c:02:08:6b:73:b6:92:b2:0d:0f:c5:91:12:47:61:1a:3b:2c:
3c:15:d1:46:2c:12:23:f2:6a:0d:53:5f:fb:32:33:ce:88:5d:
df:d2:fc:52:b1:fe:1f:ce:ff:3a:ad:86:41:c2:82:b4:42:9d:
5e:1a:e1:e9:3f:4c:d6:e5:90:4b:dd:79:1d:5e:3e:bb:a7:47:
a5:04:26:fe:f1:12:48:a8:64:94:07:6b:59:f3:06:2a:a5:3f:
22:e5:38:43:8f:92:b4:31:2a:c5:c5:3e:54:58:bc:c4:3d:4b:
45:8f:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:55 2025 by rpki-client