Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/DcxV2Ja9K-zHvG6LH4NvtzIy1nk.roa
File: DcxV2Ja9K-zHvG6LH4NvtzIy1nk.roa (raw, json)
Hash identifier: /62oYziaLdSG11/y5rZiLPbV2bYO0W8kgYnInVqSzt8=
Subject key identifier: 0D:CC:55:D8:96:BD:2B:EC:C7:BC:6E:8B:1F:83:6F:B7:32:32:D6:79
Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial: 019A01CB77F7A31E75D883A273613A49BA00
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/DcxV2Ja9K-zHvG6LH4NvtzIy1nk.roa
Signing time: Mon 20 Oct 2025 13:25:02 +0000
ROA not before: Mon 20 Oct 2025 13:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202128
IP address blocks: 185.78.208.0/22 maxlen: 22
185.122.199.0/24 maxlen: 24
185.148.16.0/22 maxlen: 22
185.148.16.0/23 maxlen: 24
2a05:6d40::/29 maxlen: 29
2a07:5b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:cb:77:f7:a3:1e:75:d8:83:a2:73:61:3a:49:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb190d102ac9603b405b36374d429868604937af
Validity
Not Before: Oct 20 13:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dcc55d896bd2becc7bc6e8b1f836fb73232d679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:ba:21:98:70:ac:1b:e5:a3:f3:b3:a1:1a:
16:9e:d9:6d:8c:24:bf:c7:11:81:bb:98:17:bf:6f:
5d:ee:8b:75:f3:45:fe:0b:5e:0a:68:8b:2f:45:f2:
ad:8a:3a:8f:1f:1f:47:5b:c0:24:91:f1:fc:1b:80:
d6:16:f8:7a:c2:10:70:5c:1b:2b:67:5b:be:fd:40:
b3:5e:79:22:67:2e:51:80:b3:d6:26:c7:2a:06:60:
71:98:56:f7:d2:8e:1d:7b:0c:7c:7d:52:5c:33:5c:
76:e5:53:13:d3:d0:6c:6a:ee:8e:08:a2:5f:62:14:
52:2b:ee:4a:0a:cb:f7:a9:40:f3:82:60:13:85:5c:
d5:ed:a8:81:57:ca:6e:07:f3:60:4d:84:34:c9:46:
b6:42:03:a7:0a:be:fb:d8:98:6d:ed:f7:4c:1a:78:
04:10:52:e9:87:2d:89:bc:c2:75:16:b2:95:5a:1e:
f7:fb:01:ca:f9:cd:b8:8f:53:c7:cc:67:44:38:c2:
44:a5:dd:0a:eb:98:27:a8:4f:9c:6b:6a:e0:70:8c:
61:b3:9f:ea:56:b2:59:b1:1f:7e:55:52:ce:c1:50:
e2:f2:a0:b7:44:27:62:70:d0:79:75:6f:6d:e3:75:
2b:fb:d8:6a:33:06:90:53:f7:a0:47:02:5e:28:b4:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CC:55:D8:96:BD:2B:EC:C7:BC:6E:8B:1F:83:6F:B7:32:32:D6:79
X509v3 Authority Key Identifier:
keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/DcxV2Ja9K-zHvG6LH4NvtzIy1nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.208.0/22
185.122.199.0/24
185.148.16.0/22
IPv6:
2a05:6d40::/29
2a07:5b80::/29
Signature Algorithm: sha256WithRSAEncryption
1e:88:19:ac:0f:b0:be:e6:2b:9f:52:f6:0b:70:e3:7a:5f:a5:
5e:3e:e3:6e:00:8e:70:08:ee:51:32:c0:90:80:4e:50:23:b0:
66:07:f1:9d:e1:45:29:35:70:75:04:c2:17:f1:16:f3:81:00:
ca:5a:3d:7d:82:ab:36:2e:4c:fc:89:00:62:b9:2c:42:1b:be:
41:c1:2c:99:ab:c7:1e:63:dd:e4:87:eb:84:cb:fe:ba:7d:c0:
78:72:99:b1:d0:20:ed:98:a8:3e:77:5f:ca:ef:45:96:48:20:
e5:a1:66:f0:5c:45:56:22:00:d9:2a:b9:ea:e4:0b:97:32:e3:
4c:b9:7c:89:1a:db:18:be:2c:6b:8b:67:3a:d6:de:7d:1c:2d:
b5:ab:3e:ff:78:06:37:8c:51:90:42:fa:b1:84:29:54:ab:7e:
9a:0d:66:27:05:ec:d5:2f:00:41:d4:7b:b9:d0:e7:0f:6b:ff:
c9:fc:f9:c9:37:82:a1:c4:c5:43:94:4b:05:a9:75:75:a0:20:
7e:35:0f:a6:8a:91:a3:cd:99:3c:ed:ad:7b:7a:30:be:b1:ea:
5d:4b:1a:6d:a5:09:4f:53:e2:83:9a:28:ae:95:2d:17:20:b5:
be:dc:32:a6:42:fc:37:5f:98:bc:ab:a0:b6:19:c9:b3:36:b7:
87:51:8a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:30:09 2025 by rpki-client