Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/aEkNJUT61sGLTRPZbM8A8m6bdBA.roa
File: aEkNJUT61sGLTRPZbM8A8m6bdBA.roa (raw, json)
Hash identifier: Oa5uK8ZTSu+K2eTr8GSg09GYxr4c/ZbA9ZN9SGGpyMM=
Subject key identifier: 68:49:0D:25:44:FA:D6:C1:8B:4D:13:D9:6C:CF:00:F2:6E:9B:74:10
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 0199E7091C952223F0BA696B216A80EE6F91
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/aEkNJUT61sGLTRPZbM8A8m6bdBA.roa
Signing time: Wed 15 Oct 2025 08:42:38 +0000
ROA not before: Wed 15 Oct 2025 08:42:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 185.113.220.0/24 maxlen: 24
185.113.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:09:1c:95:22:23:f0:ba:69:6b:21:6a:80:ee:6f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Oct 15 08:42:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68490d2544fad6c18b4d13d96ccf00f26e9b7410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:21:f1:24:ba:92:2d:f3:b9:f7:2f:08:0b:
47:c3:7b:92:ae:52:2e:2e:4f:59:be:39:f6:c3:15:
90:a4:2c:a7:54:c0:69:eb:70:ba:93:a3:57:0c:b3:
41:88:37:91:ec:aa:1b:26:6f:7c:d3:18:e4:78:d1:
14:26:49:59:a0:f1:b1:7a:b2:b0:ac:13:6b:5f:43:
9c:ca:71:da:53:a9:fe:bd:3a:8e:47:e4:63:03:27:
fb:f6:a1:6c:8f:0d:33:6d:75:31:a5:71:19:e9:2f:
fd:e0:a1:8d:aa:da:1a:47:9a:a6:90:87:79:21:2e:
d1:a6:5d:54:68:6a:0c:ee:1e:90:02:9f:6b:36:8f:
8a:1b:45:9b:eb:0d:b7:7d:c6:69:36:08:15:d2:17:
7d:e6:ce:6d:fa:f8:ab:99:dd:bc:e5:7b:3c:1b:60:
e7:92:98:85:fe:93:08:2b:78:6b:1c:f6:53:4b:6f:
be:41:76:07:5b:00:14:29:a0:bd:f5:fe:67:11:f0:
4b:13:89:27:23:ec:43:94:b3:8c:3e:56:74:a2:2d:
96:94:ca:e8:5b:79:24:da:b7:15:31:a2:8c:68:8c:
65:44:0e:04:dd:de:e6:e9:b3:57:fa:f0:d5:19:af:
7a:16:a2:b7:2c:93:0b:1a:69:64:83:72:db:77:2c:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:49:0D:25:44:FA:D6:C1:8B:4D:13:D9:6C:CF:00:F2:6E:9B:74:10
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/aEkNJUT61sGLTRPZbM8A8m6bdBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.220.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:07:e1:98:e2:68:d6:ca:9d:26:d4:5d:1b:af:49:18:64:a7:
b8:21:f7:34:9c:7f:28:b5:93:17:e0:a2:1b:6c:7d:84:e1:46:
35:c1:ae:44:90:65:7d:94:6e:07:7b:88:f4:b0:e2:e8:d3:eb:
7b:39:de:72:3b:37:fb:51:02:79:d6:83:0a:79:ad:7c:24:d5:
13:dc:b6:91:23:81:4a:29:78:ed:ee:89:9b:d5:66:65:d9:cd:
e0:60:2c:da:99:5b:61:43:04:a6:84:6c:3c:95:35:cd:0b:ac:
3d:f3:69:75:05:1c:a7:f1:f2:16:a9:17:75:8a:34:57:f8:bc:
4c:9e:70:28:1e:cc:e2:88:f0:5e:5e:37:93:d0:b3:21:ee:26:
08:31:5d:f2:44:d1:49:5f:f8:57:e0:bd:17:b4:52:b0:be:3f:
da:e6:55:71:4d:00:03:81:ce:f3:b3:4c:b9:09:b1:fe:4a:db:
23:57:78:7c:18:56:f7:e0:af:e1:4a:93:1c:72:c2:2e:0a:46:
54:ec:4b:f4:f3:b7:50:5f:92:a6:f2:42:8e:41:06:be:80:eb:
d8:4e:d5:a9:fa:ed:1d:16:74:f5:84:7f:54:2c:8f:5c:06:8b:
5a:e4:13:39:07:b1:49:0e:53:54:c9:de:67:62:9b:51:56:30:
a0:b2:61:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:41 2025 by rpki-client