Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/_DnWQD0CMumMdByDOpwzfoBcOTo.roa
File: _DnWQD0CMumMdByDOpwzfoBcOTo.roa (raw, json)
Hash identifier: cPbtQFfSB4dPoJ85o+FHzqAzBi3SqJWlECATby1tFa0=
Subject key identifier: FC:39:D6:40:3D:02:32:E9:8C:74:1C:83:3A:9C:33:7E:80:5C:39:3A
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0199DC6BD4126EFF6D43EDA5CDF797AF2849
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/_DnWQD0CMumMdByDOpwzfoBcOTo.roa
Signing time: Mon 13 Oct 2025 07:14:38 +0000
ROA not before: Mon 13 Oct 2025 07:14:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 185.157.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:6b:d4:12:6e:ff:6d:43:ed:a5:cd:f7:97:af:28:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Oct 13 07:14:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc39d6403d0232e98c741c833a9c337e805c393a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:fc:be:30:41:19:54:f3:d5:92:63:5d:ce:
97:6c:bd:32:7f:39:da:0b:f2:5e:8e:c1:fc:e8:19:
39:66:b9:73:64:10:ad:f9:22:6f:74:8f:fc:0d:fd:
15:b9:16:6b:ae:53:33:ac:f5:60:3f:16:73:eb:71:
c1:77:54:a9:30:f1:29:c7:28:1d:26:42:15:d7:8e:
12:37:0d:0d:aa:52:9a:b2:cc:53:87:5f:67:15:79:
c7:1e:ee:09:dc:ac:e8:af:6b:db:c2:db:ce:78:8b:
be:dd:48:2f:fd:72:43:2f:82:5a:3c:4a:15:d9:6a:
be:67:74:bd:e2:91:c5:23:09:fc:f1:2f:b7:8a:82:
06:c6:a1:d3:a7:c0:62:7e:5c:b0:35:c3:13:c0:ab:
a6:01:fc:35:07:40:c7:45:e0:45:c3:ab:42:f6:3d:
a2:42:b9:bb:03:9a:62:bd:62:20:bd:3b:a3:06:b5:
90:32:00:24:7a:2e:4e:ed:b3:8a:28:0b:f9:a7:8b:
6f:15:0f:04:a4:42:03:d1:88:b2:19:ea:d0:2e:6f:
3d:0b:d4:4f:a0:00:f9:f4:81:58:d9:0c:99:00:bb:
3a:ab:89:9d:39:7e:25:4c:cb:34:09:be:de:c7:36:
26:2b:a5:e5:b5:3e:0a:fe:ce:a9:ad:21:91:fa:98:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:39:D6:40:3D:02:32:E9:8C:74:1C:83:3A:9C:33:7E:80:5C:39:3A
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/_DnWQD0CMumMdByDOpwzfoBcOTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:cb:82:fd:7d:58:b8:c2:67:cd:2b:8e:32:4c:05:bc:8c:dc:
51:ea:10:59:69:74:2a:9d:9e:e5:31:0b:29:04:9e:d2:c7:ed:
94:1a:1f:7b:3a:2e:83:0d:f4:9b:df:e3:7d:59:c7:c1:c9:7f:
7b:7d:ca:49:8b:65:22:f6:d8:c9:d4:e2:ae:41:b4:de:a1:5c:
ac:48:47:d1:04:c2:98:ae:2b:49:f2:e4:10:26:96:72:f9:ce:
ae:82:a3:81:ed:6c:e1:b2:4e:e9:7b:e0:4e:36:a0:02:12:9c:
2e:98:b1:c4:c1:2d:a4:e0:42:a4:ab:6d:c7:5c:79:80:18:7a:
a1:d2:d9:f4:1c:94:2b:da:11:9d:c1:f5:4a:9a:a2:ac:07:78:
df:13:cf:8c:8d:42:8c:00:74:7c:83:95:c6:21:d2:4d:41:27:
81:4d:33:09:af:39:f4:0e:a5:8a:21:96:3b:dc:19:13:07:07:
3c:0c:94:21:60:35:9b:47:74:32:c5:19:ca:e3:54:b7:b9:1e:
a3:c6:a7:9b:a7:ee:0d:89:8d:8c:37:01:98:fc:94:ff:43:31:
d1:2d:a8:43:18:88:25:c0:5c:89:2c:92:41:e7:c5:bc:fd:1d:
e6:c9:c8:b1:e6:7f:2f:46:53:cc:17:b0:2b:6c:4d:39:5a:5d:
ff:82:cd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:35:27 2025 by rpki-client