Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/DPBiMkfZcMPnWu4HuBAMRqRAx3E.roa
File: DPBiMkfZcMPnWu4HuBAMRqRAx3E.roa (raw, json)
Hash identifier: RRc9ujZ9wYKMEBB2jrXKo0UcJxSJ/KgGd/cdw5jOUv0=
Subject key identifier: 0C:F0:62:32:47:D9:70:C3:E7:5A:EE:07:B8:10:0C:46:A4:40:C7:71
Certificate issuer: /CN=669e212d70111b44de66f575027e000cd441fdce
Certificate serial: 01997AEAD3A13875E90E348FF999DA14DE83
Authority key identifier: 66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/DPBiMkfZcMPnWu4HuBAMRqRAx3E.roa
Signing time: Wed 24 Sep 2025 08:50:33 +0000
ROA not before: Wed 24 Sep 2025 08:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213383
IP address blocks: 185.83.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:ea:d3:a1:38:75:e9:0e:34:8f:f9:99:da:14:de:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669e212d70111b44de66f575027e000cd441fdce
Validity
Not Before: Sep 24 08:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cf0623247d970c3e75aee07b8100c46a440c771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:65:23:dd:ef:ea:0a:3a:68:c0:6a:56:b5:
3f:f1:7a:94:d5:2f:f6:ab:eb:88:8d:f6:34:08:82:
d3:1d:e4:46:8a:60:1f:03:59:0a:2b:c7:0d:91:31:
4e:33:16:09:ef:c4:83:3c:89:a4:48:ea:d7:01:86:
9a:63:7a:a5:92:4d:5b:44:01:7b:e0:ac:c3:2d:c8:
dd:88:66:a9:72:bf:61:3a:03:af:fb:5e:d0:ac:da:
5e:01:f8:cc:f2:ff:b4:0b:6c:03:dc:95:b7:9b:0a:
6e:29:4f:c5:f5:31:84:50:d3:95:40:f6:d9:78:14:
fb:38:6d:bd:25:92:90:67:9c:71:56:e1:f6:11:3e:
0f:a8:93:ef:2f:6f:e4:ca:62:1c:f5:de:de:18:77:
8c:99:79:fc:35:77:a1:10:f3:df:f7:b3:97:6d:02:
71:5d:d3:ce:77:32:07:30:80:92:23:8f:81:05:64:
85:b9:8b:ba:72:00:ee:16:0f:1a:44:a3:95:e1:f0:
0a:5d:ad:49:d2:8c:72:bf:26:99:45:78:2c:d9:1b:
b5:ba:83:73:c5:55:c5:ec:b6:11:59:d9:71:7c:91:
d6:38:bf:4a:92:b8:17:24:bd:8c:3d:a0:73:45:5c:
1a:81:d1:b2:31:d3:49:38:72:c2:cc:b5:7a:f8:22:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F0:62:32:47:D9:70:C3:E7:5A:EE:07:B8:10:0C:46:A4:40:C7:71
X509v3 Authority Key Identifier:
keyid:66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/DPBiMkfZcMPnWu4HuBAMRqRAx3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.84.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:10:11:78:d4:b0:48:82:8d:ec:34:bf:1a:56:7e:fd:61:e1:
92:02:4c:15:7f:01:3f:10:a7:cd:c5:0b:be:96:66:aa:49:56:
5a:51:6a:e1:29:a9:23:19:e9:5a:a4:05:5e:f1:f1:50:fb:d3:
05:89:51:d6:18:a1:46:3b:1a:d3:49:9a:e0:74:2e:c8:f7:51:
2c:99:3f:c5:ec:7e:2c:73:04:3b:2c:7c:c2:bf:46:ed:7f:76:
7c:77:eb:8b:d1:06:cb:e1:cd:40:9f:55:88:28:d6:b7:f7:b3:
ec:3d:b3:77:52:ff:22:06:df:f4:a2:2c:c9:fe:d4:39:17:aa:
e3:e2:79:3c:e6:a7:b6:fc:6e:d3:93:a8:7e:df:e8:de:48:c0:
cb:2e:1b:0d:f1:4b:d3:09:2e:26:f2:29:10:9e:89:b7:e6:e2:
34:3e:93:a3:79:4a:71:69:79:d0:a4:7c:4a:5a:a9:df:e6:e3:
5a:44:a1:a6:78:c9:d8:60:61:2e:cf:f7:e5:ea:1d:8c:db:dd:
6b:d1:1a:5b:9b:2f:73:32:a0:d3:fb:03:62:09:8b:8f:ea:78:
76:c9:fe:f6:29:b5:f2:4f:2e:fa:6e:4c:a4:e0:42:56:ee:9a:
a0:7d:c3:c4:e1:02:dc:b2:2b:8c:46:19:99:45:99:cc:21:ef:
02:e6:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:30 2025 by rpki-client