Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/9L54EUQDrSQbGEvAwVt0tZoi-Uw.roa
File: 9L54EUQDrSQbGEvAwVt0tZoi-Uw.roa (raw, json)
Hash identifier: o6ynacAiEqoceTEtJPDu7iMTJ+MrYoRzYB7BFREjSAA=
Subject key identifier: F4:BE:78:11:44:03:AD:24:1B:18:4B:C0:C1:5B:74:B5:9A:22:F9:4C
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 01997B062372A09660FD9B673B12360B0399
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/9L54EUQDrSQbGEvAwVt0tZoi-Uw.roa
Signing time: Wed 24 Sep 2025 09:20:23 +0000
ROA not before: Wed 24 Sep 2025 09:20:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60255
IP address blocks: 158.94.185.0/24 maxlen: 24
185.190.196.0/22 maxlen: 24
2a0e:2e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:06:23:72:a0:96:60:fd:9b:67:3b:12:36:0b:03:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Sep 24 09:20:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4be78114403ad241b184bc0c15b74b59a22f94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:e6:af:83:3d:36:d9:1a:da:0a:fd:1c:8a:
c1:27:e7:f0:2e:f4:dc:d4:2a:0c:f5:81:bb:06:69:
4c:34:79:72:f5:ee:3e:e7:91:41:2b:f5:e7:29:57:
c8:97:a3:dd:56:c2:49:90:06:c4:4d:a5:15:4c:f8:
32:f6:50:15:7f:34:5b:6c:12:6d:13:98:8c:d9:f1:
04:11:9a:e6:e4:af:79:5e:91:8b:5a:37:7d:0b:34:
ec:af:18:40:02:e4:21:74:98:81:ae:1a:c2:13:06:
ad:9b:31:0e:66:be:67:b8:2e:4f:fc:75:ca:d3:97:
42:17:22:6f:b6:0f:e6:00:3b:0f:f2:94:aa:59:8a:
b5:0d:44:e3:3a:9f:6e:89:53:5c:8b:4c:a9:47:21:
b8:3a:08:36:c6:84:25:1f:2a:aa:01:b7:38:d7:93:
e5:ca:af:f3:54:4c:c8:22:04:1b:b7:e4:d5:2f:93:
43:98:12:34:5e:81:49:9d:d8:66:63:11:dc:71:9a:
e3:a9:5f:6f:31:72:6c:eb:9a:17:79:cf:ca:f7:e9:
69:cb:98:29:30:11:53:0d:2a:34:f2:da:12:01:ba:
75:75:4c:e3:5a:21:98:ec:a9:8b:c3:7d:d9:25:0d:
07:17:60:82:de:02:83:76:1c:d0:a7:ad:91:00:01:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:78:11:44:03:AD:24:1B:18:4B:C0:C1:5B:74:B5:9A:22:F9:4C
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/9L54EUQDrSQbGEvAwVt0tZoi-Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.185.0/24
185.190.196.0/22
IPv6:
2a0e:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
63:26:f1:9b:93:18:95:1d:4a:db:64:c5:ad:0f:26:03:df:8a:
53:0f:cf:2d:df:15:8e:02:9e:3b:9a:54:69:a9:9f:a7:90:ec:
c0:41:16:bb:d9:1d:b9:fa:8c:69:3d:33:40:2f:f1:de:3b:41:
08:8b:6b:38:ed:ac:50:b2:de:eb:1e:ff:f6:ba:82:a9:7a:87:
dd:e2:36:1a:2a:04:5d:f4:36:a8:23:be:08:2a:bb:b0:c4:ab:
77:30:71:03:23:3f:b1:90:9b:1a:51:db:fa:5a:41:6a:d2:b9:
2e:46:27:bb:45:b1:de:18:21:2a:b6:1a:66:bb:23:6c:d7:48:
ab:17:34:d2:93:61:f7:4a:49:71:ad:15:43:b3:b3:75:07:45:
1f:e9:a9:d8:f2:cd:ad:a0:8a:57:d1:a2:bb:68:76:a9:84:2c:
af:b5:56:f8:fc:64:09:9e:f2:9e:05:71:af:d3:c9:90:5f:0e:
90:8c:8a:f7:05:ba:c9:3c:12:b4:92:d8:f4:0b:c0:25:47:d7:
8a:8f:c0:ba:7c:af:5a:df:a0:bc:8b:5b:f9:cb:a2:a4:d6:4c:
e6:20:d9:73:98:28:7f:e6:47:bb:3c:14:01:e2:3e:a7:11:95:
17:eb:0b:08:3c:c1:31:9a:06:27:b9:bc:b8:59:2c:35:48:85:
32:aa:9f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:07 2025 by rpki-client