Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/rlSu8PBi6nqeGqAf18qNJl44Mq4.roa
File: rlSu8PBi6nqeGqAf18qNJl44Mq4.roa (raw, json)
Hash identifier: OJVJSdfw2izkHPFtKDpWYbt59YAxHvGayaJxgK3I62Q=
Subject key identifier: AE:54:AE:F0:F0:62:EA:7A:9E:1A:A0:1F:D7:CA:8D:26:5E:38:32:AE
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 0199CE1A0E8F4A8120686C2AEA7EE86A311E
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/rlSu8PBi6nqeGqAf18qNJl44Mq4.roa
Signing time: Fri 10 Oct 2025 12:30:38 +0000
ROA not before: Fri 10 Oct 2025 12:30:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 83.136.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:1a:0e:8f:4a:81:20:68:6c:2a:ea:7e:e8:6a:31:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Oct 10 12:30:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae54aef0f062ea7a9e1aa01fd7ca8d265e3832ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:24:dc:43:ed:a5:b7:a5:95:40:0b:9d:b7:
26:25:cc:1e:ad:de:59:04:d1:7a:05:4f:14:58:48:
81:f4:ac:7a:07:b9:39:3b:73:c8:eb:93:36:87:69:
f4:38:28:cb:af:e9:53:53:44:4c:cc:54:b1:b3:b8:
d0:5f:84:16:dc:d2:f7:82:f2:a0:1b:a8:cc:60:c7:
70:dc:d8:97:1d:fd:a5:f0:f2:8d:e1:5d:a7:c2:27:
e5:c3:7f:55:96:3e:a5:a1:ab:6f:4f:59:87:6c:86:
14:d1:f7:ed:14:ac:1f:c1:e8:60:93:bc:fc:29:e2:
25:ca:f7:5a:a5:c3:25:e9:2f:cb:5e:9a:85:4c:03:
86:df:c4:b4:91:bf:6f:92:a2:3f:87:d2:13:5f:ef:
45:f3:f2:f5:28:9b:80:ce:81:cb:40:73:47:4b:58:
b2:95:fe:5c:8c:80:e0:03:91:6f:87:5d:21:6f:6a:
e0:3c:69:ba:04:dd:dc:f4:63:6d:2e:7a:8a:7e:8c:
ed:16:14:75:7c:c5:de:09:a1:ae:86:b5:8a:2e:67:
1c:51:3b:b7:07:11:5e:20:14:5b:8c:0b:a2:62:fc:
69:69:63:ae:f5:0d:48:68:fe:8b:75:e4:a2:73:9b:
47:1f:2e:ab:95:81:87:02:cf:3c:58:2d:02:3e:57:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:54:AE:F0:F0:62:EA:7A:9E:1A:A0:1F:D7:CA:8D:26:5E:38:32:AE
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/rlSu8PBi6nqeGqAf18qNJl44Mq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c1:7c:2b:64:77:6f:9e:35:ab:bd:04:f8:2c:9d:9a:66:fe:
41:d6:a6:3c:a5:a3:51:06:a2:d5:13:d6:15:39:15:d2:e8:f4:
c8:63:ac:75:46:0f:61:7d:6f:c5:e7:89:68:65:99:15:b1:f9:
6c:3a:81:18:1e:c9:c3:99:9e:eb:9f:5e:63:5a:d5:46:89:fa:
ef:41:30:7e:80:19:ad:be:18:98:00:c9:8a:c3:7a:07:82:0a:
3b:eb:59:c8:37:e9:2f:cc:35:2c:db:87:02:7a:dd:55:33:cb:
a7:43:19:1b:38:13:06:09:39:4d:25:39:d4:8b:72:76:df:c4:
8f:4f:a7:1b:b5:42:cf:85:87:a9:c7:8e:5d:00:86:cd:ef:18:
28:87:c9:35:14:7f:09:5e:88:47:0b:47:44:d7:72:4b:30:f1:
36:6c:f8:a1:39:23:56:9e:9c:1c:5b:51:ea:7d:bb:dd:36:db:
e9:ab:99:cf:30:fd:e0:42:0c:48:66:a7:86:d0:10:cf:8e:84:
05:0e:1b:8d:c7:31:b3:06:08:21:f0:da:e7:3c:11:e0:0b:85:
32:a2:14:37:48:50:24:f2:1b:fe:11:88:af:e0:41:0c:85:7f:
a4:6e:c1:9c:4a:a8:d8:64:e8:6c:22:a2:b9:bd:cb:d4:75:ac:
75:33:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:49 2025 by rpki-client