Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6DVPDCQohGQiaNds16rdPlZiRvw.roa
File: 6DVPDCQohGQiaNds16rdPlZiRvw.roa (raw, json)
Hash identifier: XeGD5J4Hpow9txd/2EVxLTyVWVtpgaF4ntUOsHRKUzI=
Subject key identifier: E8:35:4F:0C:24:28:84:64:22:68:D7:6C:D7:AA:DD:3E:56:62:46:FC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019956B3EAB0E23A422ABB68927423A77E9A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6DVPDCQohGQiaNds16rdPlZiRvw.roa
Signing time: Wed 17 Sep 2025 08:04:15 +0000
ROA not before: Wed 17 Sep 2025 08:04:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213738
IP address blocks: 178.219.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:b3:ea:b0:e2:3a:42:2a:bb:68:92:74:23:a7:7e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 17 08:04:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8354f0c242884642268d76cd7aadd3e566246fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:c0:15:63:53:10:09:cb:26:de:bc:89:14:
b2:fe:07:00:44:88:f8:fc:37:6b:a6:58:1b:f8:6e:
c9:4a:bc:c7:b6:66:a5:15:54:5f:60:29:f4:79:51:
47:06:8e:20:5b:23:84:fe:ea:b7:23:a4:09:f9:32:
5a:23:fa:c0:cf:3a:8f:ff:df:5a:2e:51:b1:98:5a:
4a:93:4f:b1:74:b6:06:9a:de:5a:ab:a1:52:83:a4:
bf:2f:06:36:fe:84:f6:a1:7c:ec:9f:52:37:85:e3:
e2:70:35:4d:c6:5b:6b:46:0a:1e:1e:02:fb:70:e4:
14:47:a4:85:e8:d6:93:b4:64:0f:63:2a:fb:fc:f5:
d5:b3:dd:a6:64:cc:32:bc:27:06:fc:e2:da:1d:48:
0f:18:8f:b5:31:aa:3b:6d:13:28:38:1b:96:2c:4a:
cc:82:05:eb:03:11:62:d8:4d:ae:53:ac:ea:69:0a:
b4:6e:ef:fb:0b:f5:28:b0:75:99:5f:c6:61:da:da:
2c:92:85:b1:16:3f:15:07:5e:20:5a:3a:a1:3a:e8:
5d:3f:40:1e:90:52:e0:1f:f9:bc:dc:f9:7b:04:0b:
80:8f:4c:c0:b0:5d:20:2d:e2:fd:e2:82:64:3d:8b:
28:21:8c:2b:44:29:aa:d7:08:ba:f4:2c:ef:d1:c6:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:35:4F:0C:24:28:84:64:22:68:D7:6C:D7:AA:DD:3E:56:62:46:FC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6DVPDCQohGQiaNds16rdPlZiRvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.7.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d9:58:39:1f:49:a7:ea:4a:3f:22:ec:eb:f7:41:00:32:a7:
35:0d:c0:4f:d0:79:e2:b5:47:63:dd:35:1f:b3:38:43:ec:e3:
bf:24:ea:22:ba:75:73:8e:a1:9e:f8:d8:e3:26:6c:25:9d:c3:
66:d7:77:d7:18:6e:73:61:e9:c3:24:4b:4b:ae:fd:f7:45:1a:
12:0b:6d:40:3f:07:49:f0:80:6a:15:de:ba:09:fa:e5:3e:9b:
c4:f6:91:0f:4c:b0:cb:0f:59:be:c3:d3:08:5e:e6:eb:0d:76:
b5:35:c1:57:b3:ed:35:98:72:94:c6:59:ae:1e:8d:b7:54:40:
2d:8b:e6:84:f6:3b:b4:41:ee:42:cc:d9:93:af:52:e6:45:c4:
8b:c5:ce:61:cc:ae:e3:30:34:97:25:70:24:e2:7d:ee:5d:35:
49:2e:85:42:57:b6:78:ab:cd:48:42:87:22:f2:30:b8:07:64:
33:43:6e:57:11:b7:f2:93:ed:01:7c:36:ec:7a:e7:fc:e9:ce:
7d:a7:f3:21:42:d4:ba:50:58:3d:13:2b:69:10:a2:44:06:99:
01:2a:5c:3e:19:7b:de:a1:b2:94:f2:69:0a:02:90:a0:5c:43:
58:3d:b0:d6:b2:b0:fb:b9:da:74:9d:fc:d1:59:6c:d1:86:25:
62:dc:3c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:21 2025 by rpki-client