Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/CfvLO-ngsrsxaXPjjitCx4EMCPg.roa
File: CfvLO-ngsrsxaXPjjitCx4EMCPg.roa (raw, json)
Hash identifier: AJVHkzQLJA63L5gaz1iFFl0jYuxf6m7AczUPipJlpsI=
Subject key identifier: 09:FB:CB:3B:E9:E0:B2:BB:31:69:73:E3:8E:2B:42:C7:81:0C:08:F8
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0199E84BB2BE7009CE70BE577FA702B7C171
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/CfvLO-ngsrsxaXPjjitCx4EMCPg.roa
Signing time: Wed 15 Oct 2025 14:34:59 +0000
ROA not before: Wed 15 Oct 2025 14:34:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 213.185.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:4b:b2:be:70:09:ce:70:be:57:7f:a7:02:b7:c1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Oct 15 14:34:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09fbcb3be9e0b2bb316973e38e2b42c7810c08f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:49:d8:af:15:d9:cd:25:d4:fb:c7:f9:70:
5e:90:d8:5e:81:02:84:5c:9e:06:52:d2:0d:83:ce:
9b:e5:6f:36:21:c5:01:c2:c0:32:67:3a:cf:92:14:
e6:4d:a9:0f:69:77:7d:44:50:24:61:9f:e9:bf:31:
72:97:16:df:75:9e:57:b0:ac:20:e8:8b:09:26:4e:
b5:de:25:fd:eb:53:25:0c:db:6f:24:ba:e2:f0:1c:
2e:d8:79:f4:7d:e1:58:f9:0d:d5:70:92:a5:5c:41:
b6:ae:ab:ef:b5:82:fb:ac:63:5d:2c:0d:11:d8:c5:
22:03:1d:bf:0a:48:50:b5:8b:bc:ea:b9:6e:81:09:
fb:16:21:f6:10:e1:dc:3c:bf:cc:cb:24:31:8c:d3:
7f:ca:4c:16:42:d4:60:7b:78:1e:52:c2:41:1f:a9:
f7:55:e7:1e:48:ca:2c:ca:ff:09:98:07:50:2d:41:
30:15:9a:57:6f:a2:65:3b:e7:c2:99:f7:55:cd:04:
37:c1:d9:79:fd:af:36:b1:98:bb:8d:c3:25:11:26:
c7:90:7d:18:c8:66:57:f5:7c:4e:97:0e:4d:7d:00:
82:b3:cc:ea:01:42:ce:fe:9b:7e:1c:6c:3d:3f:22:
13:78:e7:2c:40:eb:0c:2e:ec:bf:12:7c:b7:f2:b0:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FB:CB:3B:E9:E0:B2:BB:31:69:73:E3:8E:2B:42:C7:81:0C:08:F8
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/CfvLO-ngsrsxaXPjjitCx4EMCPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.185.92.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:4a:93:da:22:7a:53:18:07:06:41:b1:b2:1c:1d:28:3d:fc:
97:8f:b2:33:d6:81:a3:f6:a1:ee:c0:9f:30:5c:91:f4:47:ed:
09:6e:cb:3b:cb:6b:bb:40:e5:29:af:8e:58:82:67:09:c1:5c:
e6:ce:fe:d8:58:5c:79:64:cd:cc:4f:7c:9b:4b:cc:d5:f9:ed:
b1:c5:15:65:e3:9f:61:5a:ab:d8:92:70:c7:f1:78:11:5c:65:
f5:ae:b7:44:cb:21:e6:f4:f2:9e:0c:74:fd:13:d5:b4:7a:21:
36:e9:22:40:aa:93:f8:3c:ca:a0:31:2c:f6:c3:ee:de:92:9c:
66:db:d0:2b:19:ee:43:77:05:f9:49:13:62:10:c7:a4:4e:e3:
db:2c:85:fa:f3:ef:58:0c:89:7d:c4:61:02:cb:dc:9c:74:92:
5b:7e:da:22:98:48:a6:df:c7:73:dd:3a:5b:95:f5:f4:18:32:
30:98:d8:b3:49:e7:d4:4a:5b:fa:31:3b:11:3b:72:2b:cb:7d:
27:8f:bb:05:00:fb:8c:d5:9d:d3:b4:6d:34:93:e3:1c:1c:92:
d3:ad:77:df:fb:ae:b8:4a:46:fa:27:70:7c:f6:60:2f:08:2f:
d0:6a:96:72:0d:8a:b4:45:29:31:e1:43:d2:2e:68:b8:e8:13:
7c:6d:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:11 2025 by rpki-client