Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uSq6xLBAK0GECNAw8hmDWTykehs.roa
File: uSq6xLBAK0GECNAw8hmDWTykehs.roa (raw, json)
Hash identifier: JGTYAj5I8PUVkpKmdncdmoIpVKDxvmXHwu3rcLsTxxI=
Subject key identifier: B9:2A:BA:C4:B0:40:2B:41:84:08:D0:30:F2:19:83:59:3C:A4:7A:1B
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0199B5D02394CF5F0B6D5842DBE548E1F4B3
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uSq6xLBAK0GECNAw8hmDWTykehs.roa
Signing time: Sun 05 Oct 2025 19:19:00 +0000
ROA not before: Sun 05 Oct 2025 19:19:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b5:d0:23:94:cf:5f:0b:6d:58:42:db:e5:48:e1:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 5 19:19:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b92abac4b0402b418408d030f21983593ca47a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:43:9c:a9:df:47:d0:90:38:40:74:70:a5:5a:
0b:9b:d3:38:6b:55:5e:f7:64:44:a7:3d:23:85:b7:
fa:cb:7f:6f:b0:c2:59:38:3c:1e:f7:a8:22:fd:e8:
15:a1:91:c7:ac:70:30:89:9d:36:7e:3f:61:a0:79:
6c:56:e1:8f:f0:bc:fe:be:3e:10:70:46:04:e9:7a:
d5:25:35:9c:02:54:4d:18:ed:5f:0d:6d:ab:d8:6d:
07:ad:20:4e:bc:6c:b3:e8:88:43:08:b7:00:b2:db:
09:c6:ab:dd:8d:cf:4a:44:ca:c6:6f:cb:36:9c:43:
f0:3e:6e:93:ce:ef:24:5d:47:6e:0d:b9:70:c9:38:
e7:59:69:ee:65:5d:bb:18:f3:92:1a:22:b3:1e:49:
c6:11:30:0d:90:25:eb:bb:b6:46:82:46:e7:cf:34:
62:79:7c:17:a5:79:b2:dc:a1:a3:63:80:ca:11:0e:
eb:bb:8c:cb:02:75:45:09:9d:17:0c:7a:ef:03:00:
7a:a6:8a:5e:3b:56:7a:b9:1b:99:7f:75:83:9b:1c:
ba:7b:98:66:df:8d:49:f3:46:e0:03:ca:33:6c:3e:
ef:07:3b:84:59:43:69:e2:d4:a3:68:38:fe:7c:6c:
2d:16:eb:90:4e:16:e5:67:12:fe:97:09:e6:86:9d:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:BA:C4:B0:40:2B:41:84:08:D0:30:F2:19:83:59:3C:A4:7A:1B
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uSq6xLBAK0GECNAw8hmDWTykehs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a0:d8:8c:0b:49:97:80:bf:7a:f4:95:b8:9a:4d:2c:33:3b:
f3:63:b1:3b:0d:69:ad:94:5e:67:a8:44:69:38:07:ba:96:0d:
87:02:e0:4c:98:b4:90:44:61:a2:13:7c:b5:b4:1e:6d:98:23:
e8:6d:c3:9e:e8:06:bd:75:27:12:d1:82:97:84:b8:8d:73:bd:
b6:b1:2d:c4:84:6d:43:cc:cf:03:b3:54:88:56:cb:70:09:67:
3f:2f:c4:8d:f0:c2:ee:13:8e:a9:8e:4b:1a:7a:d8:19:08:d1:
ca:0d:93:79:d4:fb:f9:ed:2a:1f:4d:7d:23:73:b1:ea:f0:58:
14:e5:22:b3:22:8d:d7:38:0d:ce:2a:f3:de:82:4a:b5:b5:54:
3e:43:30:a6:a4:5c:72:a0:8b:b0:c4:46:ea:55:6e:14:76:51:
f6:01:24:69:e5:40:eb:7d:a6:3d:bb:87:96:38:a7:74:5c:cf:
4f:af:9a:07:48:ec:c2:b0:b6:6f:21:7a:2e:f7:6f:b6:ef:78:
d0:5b:5d:7c:80:dc:de:9c:6f:d3:31:b2:3c:87:91:21:1c:3f:
7b:fa:81:a5:0b:7d:5a:87:c2:4f:3f:89:a5:ad:10:8b:0e:37:
0d:67:48:7e:95:59:5c:cc:5b:76:25:66:1a:c3:89:6a:00:73:
47:6a:72:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:29 2025 by rpki-client