Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/nYjnPoEoN3ZHlAzcMa8VZJ2j8oY.roa
File: nYjnPoEoN3ZHlAzcMa8VZJ2j8oY.roa (raw, json)
Hash identifier: P+I02oucoaC1H0VvjLvNE62O5P5V8Eh93rkj/mxsPug=
Subject key identifier: 9D:88:E7:3E:81:28:37:76:47:94:0C:DC:31:AF:15:64:9D:A3:F2:86
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 0199DD746C25C6FF55D8E9B27FEC64F2A4B2
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/nYjnPoEoN3ZHlAzcMa8VZJ2j8oY.roa
Signing time: Mon 13 Oct 2025 12:03:38 +0000
ROA not before: Mon 13 Oct 2025 12:03:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211381
IP address blocks: 188.137.176.0/24 maxlen: 24
188.137.177.0/24 maxlen: 24
188.137.179.0/24 maxlen: 24
188.137.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:74:6c:25:c6:ff:55:d8:e9:b2:7f:ec:64:f2:a4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Oct 13 12:03:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d88e73e8128377647940cdc31af15649da3f286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:e9:12:06:39:9d:e8:0c:6b:fa:c4:d4:02:
6f:40:02:9d:0d:69:8a:a9:44:73:64:b6:d3:cc:f4:
d0:6b:be:c4:ff:53:93:1b:49:ae:b3:52:21:48:e2:
03:be:d9:21:74:9e:18:cc:90:df:b8:11:b5:50:85:
b8:8c:37:73:c2:67:87:89:59:98:50:4b:d7:a6:15:
d6:a9:f0:1f:4b:70:85:67:d9:8b:7c:8c:1f:c5:ec:
df:31:bc:3e:df:38:13:69:06:90:fc:04:78:cd:c9:
76:db:48:c4:d3:8b:77:32:bd:ef:4b:28:1b:27:cc:
be:39:03:11:c2:ef:dd:a8:bf:b0:5e:03:d0:aa:31:
d4:1a:f1:46:9e:93:fe:e8:c5:11:3c:09:0e:98:6d:
d2:41:30:52:04:c2:9a:28:2b:60:ad:e6:dd:2c:a3:
e4:d5:aa:6c:5e:73:98:46:3d:6f:b6:b1:ec:bc:46:
34:be:06:70:7e:25:07:c6:81:75:df:75:cb:c7:07:
a3:2b:5e:11:cb:88:3f:e9:ca:96:45:1d:13:af:ce:
5b:b3:d8:1a:da:ba:34:20:da:05:74:3b:47:5e:04:
aa:75:8d:6b:20:c4:de:87:c0:b4:d2:af:2d:e3:df:
36:97:10:4d:d7:8e:40:5f:26:37:b9:12:d8:ef:6f:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:88:E7:3E:81:28:37:76:47:94:0C:DC:31:AF:15:64:9D:A3:F2:86
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/nYjnPoEoN3ZHlAzcMa8VZJ2j8oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.137.176.0/23
188.137.179.0-188.137.180.255
Signature Algorithm: sha256WithRSAEncryption
49:5f:fc:94:df:9e:b9:6c:f2:79:be:42:f8:1a:ab:e7:ae:52:
10:e6:ad:00:9a:25:f4:19:74:4d:19:cf:ed:a8:ad:7d:34:76:
43:a5:2e:00:75:8a:bf:7b:f8:4b:ba:26:30:0e:f5:43:08:6f:
9b:52:a6:6a:90:db:76:79:96:e1:32:27:85:9b:74:71:ef:b2:
24:1f:22:34:1d:28:69:a6:47:a6:46:89:1d:e1:5f:4b:6e:c0:
59:5e:ba:32:a2:8b:97:9a:02:80:68:70:30:1d:cc:03:92:85:
e1:9a:cf:4b:b8:05:8d:5d:a0:1f:c4:94:c4:50:2e:f3:fb:76:
d1:19:83:63:28:e5:cc:1e:b4:89:ec:61:27:e4:32:02:9d:50:
43:47:81:91:22:7b:9d:5f:b2:23:48:d9:31:4e:27:a1:9b:eb:
c1:12:57:9d:ba:33:e9:f7:82:af:65:7b:48:21:f0:35:72:9d:
7f:cf:72:8e:51:04:e5:77:06:ad:09:30:7a:ed:61:b1:d3:5c:
42:f1:55:c8:37:e7:fc:57:d1:db:bb:27:f8:c5:1a:b3:e4:b0:
6a:45:b0:41:8e:1a:18:91:cd:0d:d7:87:9f:93:f0:64:c0:36:
58:f1:6e:a0:fd:95:ba:b2:bf:06:d0:6a:57:fc:df:0b:8d:fd:
1d:ca:b2:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:21 2025 by rpki-client