Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/I-x_UPcw9sQTN9WaL1gNO5Jv8pU.roa
File: I-x_UPcw9sQTN9WaL1gNO5Jv8pU.roa (raw, json)
Hash identifier: kQYNPTEIQCpAe0+UIMCFb30JlCdHhzOSGG9E3Bksfn4=
Subject key identifier: 23:EC:7F:50:F7:30:F6:C4:13:37:D5:9A:2F:58:0D:3B:92:6F:F2:95
Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial: 0199497D0A549A362973C3A7F20F48139198
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/I-x_UPcw9sQTN9WaL1gNO5Jv8pU.roa
Signing time: Sun 14 Sep 2025 18:29:15 +0000
ROA not before: Sun 14 Sep 2025 18:29:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198981
IP address blocks: 213.165.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:49:7d:0a:54:9a:36:29:73:c3:a7:f2:0f:48:13:91:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Validity
Not Before: Sep 14 18:29:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23ec7f50f730f6c41337d59a2f580d3b926ff295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:88:56:6b:87:a6:d3:b0:01:d3:93:5a:26:
4b:32:3e:8d:ef:c3:70:19:bf:5e:50:2d:6b:14:9c:
3c:55:d2:9f:5a:91:3e:07:07:21:8c:6b:2b:00:e6:
ee:17:95:03:6a:7f:4a:dd:25:f7:64:5b:01:c8:6d:
5a:69:92:b0:89:c8:9f:6b:9b:44:eb:4d:0f:73:9f:
29:b8:be:77:45:74:2c:06:b9:13:1c:32:90:d9:40:
1c:18:7e:8e:e6:6a:b7:6b:ac:39:86:04:26:9b:df:
1d:dd:7d:5c:97:4a:ff:06:fe:14:e8:f7:5f:04:ac:
8f:6a:3a:53:12:6d:38:a5:5b:10:d4:28:75:f6:de:
56:99:2b:31:bb:2b:d1:7f:d8:77:38:63:38:2f:12:
02:ef:28:87:b5:7f:5e:e7:1e:f7:d5:dc:01:80:c2:
07:4d:8a:f7:1f:7c:bb:8a:74:c8:a8:0f:f5:20:93:
fe:c2:eb:72:3f:f3:84:9b:60:87:32:8a:be:c4:46:
fa:06:ee:22:2e:5a:4f:22:b3:27:57:a9:fc:9b:b8:
b9:5a:3e:92:9b:70:7a:94:a9:7f:1f:ee:14:7c:2f:
50:03:5f:42:d2:ab:14:9d:b2:76:63:72:15:67:e0:
fb:c3:66:c2:33:2c:34:4a:01:39:72:87:68:41:60:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EC:7F:50:F7:30:F6:C4:13:37:D5:9A:2F:58:0D:3B:92:6F:F2:95
X509v3 Authority Key Identifier:
keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/I-x_UPcw9sQTN9WaL1gNO5Jv8pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.165.53.0/24
Signature Algorithm: sha256WithRSAEncryption
97:37:de:0d:f8:c9:3e:17:8d:70:23:f6:89:5e:29:a9:c0:d8:
39:10:d7:58:c9:b2:ed:17:28:58:11:94:1a:61:b6:5e:c5:2c:
6e:19:e9:6c:be:b8:6c:6b:c4:cb:6e:31:74:0c:8a:02:35:9d:
fe:83:e5:f3:f5:82:9e:51:d7:d3:e7:34:61:45:46:c8:9f:ec:
99:fa:7c:be:03:7a:56:df:68:99:a0:98:58:32:a4:c2:7c:74:
89:58:6d:cb:03:b2:a0:af:9d:68:1e:d5:1e:00:39:4a:6f:c4:
3d:28:20:25:85:21:97:47:80:22:40:95:4f:8a:33:18:aa:29:
f3:38:45:af:04:61:9e:d7:21:e0:94:a5:cf:97:0f:d6:14:2b:
58:c5:de:44:7d:c2:c6:d7:61:1b:a3:06:52:ca:09:da:67:8d:
59:42:d5:13:d5:58:7b:37:5b:9f:93:19:8d:c8:6f:b4:4f:83:
7b:a6:76:8b:b1:47:64:da:df:bd:1b:52:e6:00:b4:94:5a:df:
a4:a9:f1:77:a6:10:57:29:0a:e2:f0:e1:c0:2b:ef:c7:9a:28:
73:88:65:38:31:b3:dd:b7:56:fb:b0:92:6d:ea:51:19:c0:6a:
d9:4c:1d:7a:be:47:aa:8d:14:b2:48:8d:aa:93:f4:93:7f:29:
58:b0:ec:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:41 2025 by rpki-client