Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/V2uTQCIG7cpvASw3b1o6E1FEC9w.roa
File: V2uTQCIG7cpvASw3b1o6E1FEC9w.roa (raw, json)
Hash identifier: lSRRwHc5aUwf96o9oByRNWmxPAHRtbICzuXtltcIQaU=
Subject key identifier: 57:6B:93:40:22:06:ED:CA:6F:01:2C:37:6F:5A:3A:13:51:44:0B:DC
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019958E17924E0A8E25D15AF7277F8D5CF29
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/V2uTQCIG7cpvASw3b1o6E1FEC9w.roa
Signing time: Wed 17 Sep 2025 18:13:15 +0000
ROA not before: Wed 17 Sep 2025 18:13:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 146.19.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:e1:79:24:e0:a8:e2:5d:15:af:72:77:f8:d5:cf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Sep 17 18:13:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=576b93402206edca6f012c376f5a3a1351440bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:76:d9:97:27:7a:6e:6c:4f:e4:cb:f2:46:
e2:53:43:fb:43:32:5b:df:2c:d0:f1:4d:08:3f:fc:
a5:87:a4:ec:17:95:1c:94:48:e6:d6:38:d4:26:ee:
71:36:54:70:55:35:34:91:59:7e:d3:3f:95:49:7c:
99:0d:38:cb:ab:b8:a9:fa:0a:08:1d:83:58:b5:8f:
49:cf:57:50:31:f0:7b:8a:ac:2d:87:37:46:ab:e5:
6b:d9:20:02:dc:ff:86:ed:f5:1e:ce:47:3d:e7:a0:
03:7f:10:22:fe:64:34:dd:02:b5:1a:d6:d7:33:cc:
a3:36:c1:b8:eb:8a:50:88:a0:6c:99:00:0b:52:18:
fe:11:10:ec:9a:f8:79:19:1e:92:5c:38:6d:c0:82:
a1:9c:5b:41:b5:5b:cd:6c:5e:aa:ab:92:a7:c0:63:
bb:6d:a1:13:6f:29:ba:5c:d2:64:1d:8c:92:82:dd:
00:f0:be:df:3d:27:4d:2d:29:b1:43:f6:e5:aa:58:
b1:c7:41:7b:74:ff:76:35:3d:58:9e:02:a6:ab:fd:
43:89:b1:94:7d:57:d7:71:7a:32:4a:02:9e:cb:d9:
31:22:9e:1f:65:b1:12:4e:87:fc:21:a2:50:95:a0:
47:40:12:0f:e7:11:3e:47:87:bc:ec:02:2b:07:2e:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6B:93:40:22:06:ED:CA:6F:01:2C:37:6F:5A:3A:13:51:44:0B:DC
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/V2uTQCIG7cpvASw3b1o6E1FEC9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:8b:4a:7d:58:95:ef:28:53:9e:08:24:ba:6d:da:05:5d:9a:
34:ae:5a:b2:ae:6b:78:15:ed:ad:e7:d6:3c:db:34:88:6e:93:
09:f9:2a:91:ff:26:81:de:b1:eb:fb:19:49:73:1f:03:ff:fc:
e7:93:dc:d6:c0:c9:89:cf:74:ac:70:1f:cf:11:57:c3:da:11:
92:51:7c:b6:8b:11:78:93:ad:ee:12:08:b8:66:3c:e3:39:f4:
17:6e:65:22:fe:3d:fe:2e:57:5b:b6:3a:a4:5f:7e:39:41:3d:
32:66:97:12:15:bb:d9:85:ba:6e:56:22:e8:06:a9:3a:06:5a:
8f:f2:30:8f:7c:f7:4f:78:51:7f:94:ac:3c:30:dd:57:2b:5f:
a5:f9:52:f0:5d:ad:a1:7e:89:8c:a4:45:42:e3:16:03:c5:47:
d7:b5:f8:45:39:f5:0f:0c:93:95:a5:6b:ee:86:57:c8:0e:4b:
fa:c9:04:9a:54:e3:ee:25:98:9b:8c:7e:ad:ae:ff:cf:a9:b1:
d3:82:17:6f:05:8a:c3:b2:2a:c6:77:87:8e:79:dc:83:38:a5:
9a:c9:66:a7:86:3d:75:45:0f:56:8e:19:69:4c:52:8c:6b:24:
35:cb:30:73:4f:99:49:9c:f8:b8:d7:d6:93:9c:ca:51:5e:df:
13:8b:66:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:53 2025 by rpki-client