Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/DV4eV0bz0BV_l9ZAbntV44Eglw0.roa
File: DV4eV0bz0BV_l9ZAbntV44Eglw0.roa (raw, json)
Hash identifier: wnq0IXxOxpXaYEifWhivUR0CW5t4jvpNWroJwGm7DbM=
Subject key identifier: 0D:5E:1E:57:46:F3:D0:15:7F:97:D6:40:6E:7B:55:E3:81:20:97:0D
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 019905E47E58057D7C47DBC728576F3F97CD
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/DV4eV0bz0BV_l9ZAbntV44Eglw0.roa
Signing time: Mon 01 Sep 2025 15:28:04 +0000
ROA not before: Mon 01 Sep 2025 15:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31050
IP address blocks: 185.101.12.0/22 maxlen: 24
185.101.12.0/24 maxlen: 24
185.101.13.0/24 maxlen: 24
185.101.14.0/24 maxlen: 24
185.101.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:05:e4:7e:58:05:7d:7c:47:db:c7:28:57:6f:3f:97:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Sep 1 15:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d5e1e5746f3d0157f97d6406e7b55e38120970d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:58:d2:58:60:f5:70:4a:46:89:e2:d6:75:
a0:c0:63:e6:87:1a:8d:8c:54:e8:b1:3a:6a:94:52:
a9:f6:5a:43:3d:4c:2a:27:32:62:9c:05:0e:12:cc:
d3:ea:96:2e:b8:37:ab:ed:3a:70:63:a6:af:be:b3:
7b:7a:b7:b0:00:54:4b:63:e5:db:8e:3f:03:e4:64:
e6:4f:df:d3:d4:67:62:5b:a9:0f:21:fa:7e:84:88:
c6:5e:80:ad:f5:d3:b7:2c:cd:9d:47:e2:0e:ce:65:
59:de:41:fa:fc:3b:a2:bd:e9:73:8f:51:db:3a:2b:
4e:20:35:b8:2a:1b:bc:09:a1:17:9a:8b:4e:5b:40:
e7:26:54:c7:03:65:30:81:19:48:bb:90:58:5c:fc:
dc:4f:b0:58:0c:29:f5:79:a0:e2:3b:55:ee:a4:3f:
0e:47:f8:d0:87:b3:0a:a1:cb:df:cb:9e:f1:51:7f:
1d:5d:c2:73:6c:35:59:64:bf:6e:80:d1:6c:b4:1e:
7c:0e:bc:5c:6a:cc:a9:fe:41:7f:77:8d:10:0a:eb:
43:4e:53:d9:06:63:f7:f1:b8:ad:c8:0d:57:34:bb:
2f:30:36:d4:47:28:df:a5:97:96:bd:85:1d:84:29:
82:9b:ac:0d:7c:79:22:63:eb:75:88:d7:50:20:a2:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5E:1E:57:46:F3:D0:15:7F:97:D6:40:6E:7B:55:E3:81:20:97:0D
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/DV4eV0bz0BV_l9ZAbntV44Eglw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:e9:6f:66:f8:a7:5c:82:75:ae:be:4e:09:e9:54:c9:b7:65:
e8:0f:8f:af:67:3f:4d:85:21:f0:b3:87:c0:a3:20:fb:95:18:
42:26:a3:c0:65:2c:8f:7e:4f:6c:2d:e5:d5:bd:4a:af:b7:01:
2c:9d:48:c4:47:85:04:6a:42:02:5d:d4:1c:f9:63:9a:9a:e6:
c7:a5:5e:10:21:56:f6:51:a6:cf:05:7e:37:d4:73:1b:74:79:
27:ef:00:a2:b4:c5:a0:d3:4f:b8:73:8f:b4:9a:f6:55:af:9d:
39:44:85:45:af:79:c9:8c:4a:6c:4e:16:8b:9e:f4:bd:6d:17:
69:ac:df:07:a7:3f:38:3b:27:99:7a:dc:72:eb:49:bc:a6:d7:
af:fa:fa:71:0f:a9:f3:11:06:32:8e:c4:ca:af:2b:f6:3e:75:
96:e1:65:64:cb:d8:d3:5b:24:37:e3:25:0f:a8:b3:bc:a2:95:
d3:52:14:5c:be:fd:5b:bd:ac:e8:07:5c:3a:a1:00:67:1b:75:
8c:35:d0:dd:75:f8:35:8f:93:a5:c7:5e:e9:96:c4:31:5a:a2:
ba:fa:8f:89:20:2c:d3:b6:f7:5d:84:93:b8:c8:25:37:09:1e:
75:aa:20:25:02:89:c2:61:c9:7f:36:1d:79:65:30:28:b3:73:
05:75:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:33:40 2025 by rpki-client