Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/lDebapMVKq7c3cdLNAzBSuTVL9I.roa
File: lDebapMVKq7c3cdLNAzBSuTVL9I.roa (raw, json)
Hash identifier: JLLBlWGQZm0pTsOl8c3P+gghkK2T0TR/9bgigt6vPnw=
Subject key identifier: 94:37:9B:6A:93:15:2A:AE:DC:DD:C7:4B:34:0C:C1:4A:E4:D5:2F:D2
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0199C586A12E60E31DB7E2FB5E3290E1852B
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/lDebapMVKq7c3cdLNAzBSuTVL9I.roa
Signing time: Wed 08 Oct 2025 20:32:38 +0000
ROA not before: Wed 08 Oct 2025 20:32:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395517
IP address blocks: 207.244.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:86:a1:2e:60:e3:1d:b7:e2:fb:5e:32:90:e1:85:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 8 20:32:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94379b6a93152aaedcddc74b340cc14ae4d52fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:fa:9e:14:3d:24:24:8c:b7:ae:32:99:3d:
14:0b:25:1c:67:36:d8:6b:ed:d1:bc:2c:95:2b:e7:
af:18:c3:1c:55:c3:31:8f:96:cc:13:ef:55:dc:40:
6e:a9:74:53:ad:71:22:d4:be:81:dd:b3:2a:fc:76:
e1:f2:f2:10:25:ac:af:df:28:43:ae:26:31:65:07:
8a:4e:1a:2d:45:d8:1f:11:f4:b1:97:6b:90:73:b9:
54:54:b7:76:c6:87:f4:86:dc:5f:76:e9:74:94:61:
c3:79:ff:f1:e0:52:02:e5:30:2a:9d:80:17:97:51:
2f:f6:71:2a:f7:58:53:2b:06:b7:7b:ee:2f:74:c4:
95:30:18:56:f8:b8:13:37:c2:e5:49:be:22:14:5a:
d2:04:c4:69:ba:fb:ba:88:b5:89:d1:da:7d:4d:0b:
67:2f:61:01:ef:7f:9c:fe:5f:14:4c:e4:d4:c6:15:
65:ae:1a:8b:9c:ef:69:13:1e:54:20:91:fd:d1:8a:
c8:0e:e9:f2:7c:90:b0:43:1d:bd:98:c2:43:9f:da:
b3:6e:ae:41:67:88:58:32:20:b4:ff:8a:23:fd:68:
b0:e7:6f:61:80:74:48:b7:85:20:a6:2d:ad:da:fa:
61:ef:ad:d8:d5:f1:1c:6e:c1:b9:27:8b:57:40:d0:
a9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:37:9B:6A:93:15:2A:AE:DC:DD:C7:4B:34:0C:C1:4A:E4:D5:2F:D2
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/lDebapMVKq7c3cdLNAzBSuTVL9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.208.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f7:94:21:7a:69:65:8b:29:70:4e:8f:fa:c8:3d:91:12:94:
64:d6:c5:38:19:ee:36:3b:a6:9c:36:e8:59:bc:bf:c2:80:a2:
15:4a:63:b6:ce:2c:24:e6:99:90:c3:1f:1b:54:4a:bb:f4:d9:
c5:6f:1b:e9:0e:b7:19:96:62:0a:57:03:ac:99:45:e5:ab:bd:
e2:d8:e3:48:71:c9:04:54:32:7f:e0:8b:20:ae:53:81:bb:3e:
9a:46:6b:5f:94:56:a5:b8:68:dd:80:35:cf:66:6b:0a:d8:c3:
59:10:74:e3:27:99:c7:7c:19:4b:25:b0:ca:f1:4d:dc:92:87:
2a:d2:86:89:5c:3b:92:11:83:77:cc:0c:dc:3d:de:d2:9f:0c:
a3:df:16:0d:9d:e7:92:49:52:43:90:79:79:f6:a1:4f:31:89:
c7:2e:5b:3e:bb:f9:59:5e:8a:ba:fc:6c:d2:b0:66:88:4f:71:
d6:90:82:5d:ad:e6:fb:5b:33:9d:4c:d0:78:84:98:23:ae:4a:
36:70:06:ae:55:7e:dc:ae:87:3a:42:b9:44:20:4d:cb:d9:24:
5e:00:6c:71:85:78:1e:59:da:48:b1:67:df:ef:ee:26:37:fd:
43:ae:e2:d6:3f:75:54:ff:bf:c7:d5:2b:24:d7:0c:ce:ee:a9:
0c:e6:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:13:57 2025 by rpki-client