Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/a-UID-98VYiSR2_TJaUZRdxXWLs.roa
File: a-UID-98VYiSR2_TJaUZRdxXWLs.roa (raw, json)
Hash identifier: Dymfx7MB13mD1yEt3h4Sjr9KTZtCCDPx93QFSgvSSFA=
Subject key identifier: 6B:E5:08:0F:EF:7C:55:88:92:47:6F:D3:25:A5:19:45:DC:57:58:BB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0199E6BA606E6B372C207D0C0353AA502456
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/a-UID-98VYiSR2_TJaUZRdxXWLs.roa
Signing time: Wed 15 Oct 2025 07:16:38 +0000
ROA not before: Wed 15 Oct 2025 07:16:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 185.244.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:ba:60:6e:6b:37:2c:20:7d:0c:03:53:aa:50:24:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 15 07:16:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6be5080fef7c558892476fd325a51945dc5758bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:57:be:3a:01:00:c7:e3:0c:0c:13:f1:56:
da:75:5b:a9:7f:92:fc:04:ed:07:55:20:9d:51:27:
27:0a:28:94:c7:d6:0d:a1:9e:0a:7d:18:ec:4e:45:
05:ca:7d:ad:86:de:ef:b3:61:0f:02:e9:c2:4e:fc:
b9:92:5c:f0:e1:5f:37:4d:c7:25:87:eb:c6:11:da:
d2:25:27:d5:b7:35:5c:c0:64:b8:ac:db:d9:ce:a1:
31:71:23:5a:4b:52:ab:98:1b:c4:7c:e6:fd:67:e9:
df:7f:4b:de:7d:19:4d:5c:1f:5c:5d:00:ea:de:10:
b7:ba:b9:06:a6:62:a3:81:cb:ff:05:c0:89:0e:5e:
13:25:33:3f:e0:6d:a1:05:70:f1:58:a4:46:4f:57:
71:63:82:08:0a:91:b5:e7:94:67:ba:89:44:c7:ca:
d4:b1:5d:50:4e:50:7e:fc:97:5b:93:b7:41:89:55:
b3:fe:54:a9:92:46:0d:6a:3f:0a:f1:09:9e:a0:a3:
9a:cf:7c:ec:3c:30:fb:14:d9:6f:38:91:74:d4:d6:
22:ed:aa:bf:43:92:4b:13:0e:c1:33:de:fc:d1:8a:
bd:8e:6b:48:4e:ac:ee:8f:f0:c2:6e:51:9f:02:34:
79:db:0a:a1:15:e0:fe:31:16:a6:0c:6c:99:1e:e1:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E5:08:0F:EF:7C:55:88:92:47:6F:D3:25:A5:19:45:DC:57:58:BB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/a-UID-98VYiSR2_TJaUZRdxXWLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:bd:f0:55:f0:05:7b:e0:67:62:9a:66:7f:3c:34:10:a7:75:
93:e5:3e:16:3b:e9:c1:82:ba:7d:17:ea:36:3b:e0:18:43:72:
57:39:b6:07:f4:15:87:43:2f:67:7d:bd:91:e3:19:fc:6b:56:
34:94:8f:e2:75:27:0d:aa:2c:7a:1a:f7:c7:cc:8d:db:80:27:
07:67:56:8f:78:2d:76:ab:ca:b9:d2:8f:ba:58:57:bb:cc:c5:
81:1c:58:18:62:91:dc:90:24:03:5f:62:eb:fd:1c:b7:f7:c3:
21:be:aa:a6:35:d8:33:61:0e:30:db:4a:52:f6:99:05:a9:4c:
e5:77:3e:88:3e:d6:0a:f7:6b:d2:f2:23:c1:94:bb:d9:8e:5f:
b8:95:de:6a:18:15:65:12:15:ad:43:12:36:1b:c1:36:8e:f5:
0a:9f:25:25:33:4b:22:47:5e:47:e5:21:17:d0:95:84:db:0c:
ff:9a:53:87:0b:6b:b0:4f:e0:21:a2:96:67:61:3c:1b:50:4e:
e3:9f:3f:90:21:14:48:17:33:10:0e:a0:73:c0:03:b6:80:bb:
27:4a:15:78:a3:16:e0:af:22:a5:28:23:ad:fa:5b:01:dd:4b:
df:25:19:ac:e3:98:5e:e8:55:ba:a7:bf:a9:7a:cb:f7:ab:52:
39:99:06:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:29 2025 by rpki-client