Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/p35nG8WnKus4OTOs7KI5F65sYzo.roa
File: p35nG8WnKus4OTOs7KI5F65sYzo.roa (raw, json)
Hash identifier: RVbXfLYb/+mFr+HMiMKT1IcR5Oe18VB+slW6Nc/dCTU=
Subject key identifier: A7:7E:67:1B:C5:A7:2A:EB:38:39:33:AC:EC:A2:39:17:AE:6C:63:3A
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 0199A8C628AF18265A2EF8A5B5805D03DC58
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/p35nG8WnKus4OTOs7KI5F65sYzo.roa
Signing time: Fri 03 Oct 2025 06:33:02 +0000
ROA not before: Fri 03 Oct 2025 06:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.36.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a8:c6:28:af:18:26:5a:2e:f8:a5:b5:80:5d:03:dc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Oct 3 06:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a77e671bc5a72aeb383933aceca23917ae6c633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:f1:9c:71:b3:e2:6a:b8:5d:3b:96:5b:e7:
7c:93:ab:cd:d0:2b:21:80:ee:4f:91:5d:2a:fd:39:
92:bf:15:5a:11:fe:cc:05:ac:6c:53:7c:c7:31:1f:
a5:15:1d:4e:0a:7d:3c:e1:9f:4d:e3:f9:a6:6e:20:
d8:5f:f7:06:36:1a:71:82:32:7d:a9:7b:ec:11:e2:
03:e0:fe:fe:aa:74:3a:d2:7b:87:c3:7a:e8:ec:c0:
e2:74:06:29:f2:9b:97:e9:41:aa:23:10:35:dc:86:
eb:64:42:50:a3:83:ba:f3:28:0a:b4:a2:0c:58:3d:
84:ea:d9:fe:c4:c7:85:a9:ce:31:b6:cd:54:9a:bc:
63:04:fd:f9:fd:2e:53:ce:98:fe:d1:61:ea:41:85:
9b:12:01:2d:cb:c1:53:58:a6:ee:56:c4:c2:b6:c9:
1b:17:e8:e8:0a:23:92:59:b3:68:7d:78:5e:83:86:
81:ed:db:94:f7:eb:bc:a5:f4:98:16:3e:e5:ed:47:
e9:a1:8c:d0:f6:3f:bd:00:b4:36:d3:2f:f8:40:71:
23:8b:3e:47:cb:eb:c5:00:79:2e:c1:39:24:c2:d4:
18:88:3e:5a:8e:04:bc:7b:bc:41:28:22:10:89:64:
48:24:81:f3:b1:4d:f9:cf:b8:84:2b:f6:8f:f9:e5:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7E:67:1B:C5:A7:2A:EB:38:39:33:AC:EC:A2:39:17:AE:6C:63:3A
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/p35nG8WnKus4OTOs7KI5F65sYzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.125.0/24
Signature Algorithm: sha256WithRSAEncryption
95:99:a4:52:cd:d2:8d:77:35:0f:1d:ce:02:24:e6:55:83:7e:
0a:91:f1:ff:ee:33:10:95:7c:5c:5f:a7:d1:5c:da:b8:dc:d6:
4c:a4:39:59:ae:c8:79:b4:eb:a8:8e:dd:44:42:f4:b1:e9:bd:
74:bb:98:9c:da:9e:a2:ce:97:63:27:55:a5:23:76:f4:9d:5c:
4c:08:a3:6b:05:25:f3:7a:28:a8:27:a8:c5:fd:13:4e:90:db:
5d:84:c2:ac:fc:34:50:e8:52:44:9f:66:a3:11:c6:03:c1:6c:
5b:6e:a8:33:3a:f9:43:f8:4e:28:1a:9c:af:3e:d9:c8:38:91:
76:6c:09:32:d8:3f:b9:08:f9:b1:0e:28:47:70:91:b9:71:10:
8d:a7:92:49:98:c1:d2:07:af:da:36:22:1d:d6:5c:1d:f1:8f:
d2:e2:3a:15:a9:b6:a5:82:1e:35:fe:7d:79:5b:57:62:44:6c:
b8:06:87:00:38:71:a6:85:7d:c2:57:c7:6f:99:41:9c:ab:53:
c0:c7:b7:88:20:8a:33:01:c5:ec:1e:3e:fa:e8:e2:ba:5f:8a:
46:25:c4:cf:52:80:a7:88:32:4d:0b:0d:41:1e:10:6a:60:5a:
53:bd:98:f1:79:34:ed:47:1d:91:1d:3b:f5:64:38:8d:75:62:
47:51:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:08 2025 by rpki-client