Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/Djx6QNMoJb-cW9yeKmXUOuLZGxc.roa
File: Djx6QNMoJb-cW9yeKmXUOuLZGxc.roa (raw, json)
Hash identifier: kSdS/jX6rRQff6lKohOcXS4NIaspZuS+tTFddGQqIfY=
Subject key identifier: 0E:3C:7A:40:D3:28:25:BF:9C:5B:DC:9E:2A:65:D4:3A:E2:D9:1B:17
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 01997BD99FCC87BAD0AE3660ED1690C8D0AC
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/Djx6QNMoJb-cW9yeKmXUOuLZGxc.roa
Signing time: Wed 24 Sep 2025 13:11:23 +0000
ROA not before: Wed 24 Sep 2025 13:11:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42926
IP address blocks: 178.210.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:d9:9f:cc:87:ba:d0:ae:36:60:ed:16:90:c8:d0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Sep 24 13:11:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e3c7a40d32825bf9c5bdc9e2a65d43ae2d91b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:62:43:b6:d3:89:ea:47:34:08:e0:c4:4f:
a7:0a:94:13:cf:0e:45:a4:27:ef:55:d8:2c:1b:41:
23:7f:90:36:d5:84:dc:75:79:dc:53:c0:f0:df:0b:
f1:46:02:2b:3a:b1:31:cf:ad:27:57:72:ee:84:82:
1e:58:a8:84:be:a3:a4:ea:21:bc:b1:05:12:17:65:
dd:64:a7:c3:fe:4f:fd:44:ee:27:a5:c4:e6:05:0f:
15:43:85:3b:f0:db:d3:47:dc:81:97:8a:0d:72:19:
d4:4a:a7:31:a2:49:05:9e:ea:75:75:65:bd:bf:90:
c5:7c:1c:42:98:7d:90:63:7d:a3:76:03:4f:fd:d4:
a4:a0:54:0b:42:22:15:79:1b:94:ac:09:a1:93:da:
97:af:02:58:62:ce:14:dc:34:79:0e:04:2f:09:34:
1f:02:17:54:1b:22:de:46:d5:6b:92:0c:37:27:f0:
fe:53:d3:a9:d2:e0:58:84:b3:7e:16:1c:60:7e:44:
1f:94:21:88:3e:8c:08:52:ef:df:64:d0:ac:fc:2b:
43:d8:26:f9:d9:44:f1:42:31:54:ac:9a:b7:40:83:
62:e7:03:d0:67:47:a8:a6:0d:d9:62:32:5d:cf:47:
20:fc:5f:79:fc:59:0c:75:4d:9d:38:f4:d3:e4:40:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3C:7A:40:D3:28:25:BF:9C:5B:DC:9E:2A:65:D4:3A:E2:D9:1B:17
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/Djx6QNMoJb-cW9yeKmXUOuLZGxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.169.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b7:54:86:e4:56:a0:c5:1f:44:ce:4a:15:ac:db:ed:f9:ee:
fc:0d:e0:a3:86:51:87:5c:60:af:11:16:d7:8e:d0:4f:02:18:
5a:e5:da:56:b6:f0:81:0a:f1:d4:7a:63:b1:98:4e:cb:ef:5c:
7c:38:42:72:fd:4e:ed:32:1a:b8:5f:a1:57:cd:fb:cc:39:71:
12:8b:d5:36:62:6f:57:33:b1:ee:77:58:3a:c9:32:0d:20:e9:
62:7f:d7:b2:a4:c0:36:b7:16:3e:3c:27:12:e8:f4:ec:b4:a2:
33:ff:fa:01:9e:bf:99:95:dc:e7:7c:33:6b:50:b1:10:30:4b:
ec:0b:80:04:3f:da:2c:af:69:c9:16:f0:2e:60:59:12:68:7d:
50:01:2e:80:c4:3e:42:41:45:93:96:11:8a:a6:7a:e4:c4:c8:
80:83:d2:d8:29:32:b1:ed:1a:f9:72:95:d2:32:13:e6:25:c4:
bc:52:0f:33:52:e3:08:1f:8b:5d:1f:04:a0:77:e4:f1:b8:7f:
e0:2c:86:50:63:73:7f:19:77:d8:bd:68:c4:c5:a6:8e:0a:11:
d1:4c:8b:cd:a4:c4:96:18:1f:81:ad:c3:06:16:9d:8d:10:fd:
a0:eb:61:0f:03:cc:9d:64:59:0a:83:24:5a:ed:53:77:d4:e1:
8f:33:47:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:01:09 2025 by rpki-client