Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pH2myNTapVaRMb1vIKSY-j1gQAk.roa
File: pH2myNTapVaRMb1vIKSY-j1gQAk.roa (raw, json)
Hash identifier: VyYIuuB2lASzOywoXfXVwPswU99oB/DW5uDbfLyHo/k=
Subject key identifier: A4:7D:A6:C8:D4:DA:A5:56:91:31:BD:6F:20:A4:98:FA:3D:60:40:09
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01993DD46D6BA04828D46264D35807A77497
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pH2myNTapVaRMb1vIKSY-j1gQAk.roa
Signing time: Fri 12 Sep 2025 12:09:15 +0000
ROA not before: Fri 12 Sep 2025 12:09:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210734
IP address blocks: 93.186.64.0/24 maxlen: 24
188.255.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:d4:6d:6b:a0:48:28:d4:62:64:d3:58:07:a7:74:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 12 12:09:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a47da6c8d4daa5569131bd6f20a498fa3d604009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:62:a7:aa:ab:58:a6:dc:fa:6e:30:67:ff:
10:10:36:0a:fd:f2:a2:91:c6:0b:f7:62:18:41:0e:
b8:0a:5b:80:55:2c:91:49:95:73:a9:2f:c4:d7:19:
d2:21:74:1a:2b:0a:ed:8b:f5:1a:aa:fe:94:42:49:
6f:ab:ee:8e:65:52:40:a1:87:4b:09:f5:97:e0:0c:
70:67:5b:f5:1e:a5:9b:56:14:52:50:77:06:7d:37:
8e:1a:d5:cf:aa:da:59:52:40:1e:03:d7:7c:c9:26:
89:8a:1d:81:da:75:42:56:62:4c:95:01:e5:d9:3b:
c3:cc:d8:f6:d1:d8:30:bf:66:93:32:4d:38:24:ce:
de:f7:10:a9:2f:d5:83:a7:30:53:72:2d:c0:b2:15:
36:09:d2:a4:4e:e3:95:57:e4:06:ab:0b:3b:b1:db:
e3:d2:f5:7f:4f:fd:9d:1c:38:ed:58:e6:d9:42:37:
21:06:20:40:35:7f:8a:77:51:4a:e1:7a:e3:76:e5:
d0:dc:21:01:a8:64:82:89:08:d6:9b:af:16:c8:64:
b2:c6:07:34:f9:f3:b0:8c:49:13:f6:c8:11:5a:1f:
a8:d3:9f:ff:94:7b:97:be:d7:ac:78:79:61:6b:ed:
ef:05:52:e4:60:a3:25:ea:61:06:9d:a8:63:4d:74:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7D:A6:C8:D4:DA:A5:56:91:31:BD:6F:20:A4:98:FA:3D:60:40:09
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pH2myNTapVaRMb1vIKSY-j1gQAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.64.0/24
188.255.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:07:3e:74:5b:10:0c:9d:1d:9e:9b:2d:bb:4c:6a:c3:21:76:
13:9f:89:79:d0:be:bd:f5:00:ba:7b:8f:72:7f:58:73:2c:1c:
bc:74:5b:17:cd:8c:41:a6:eb:82:bd:87:96:1e:cd:41:53:17:
99:9b:38:85:6c:eb:89:e4:05:04:14:b3:03:cf:f8:48:22:08:
b4:60:c9:27:dc:b2:f8:25:58:30:6f:e8:3c:55:58:6c:22:7c:
f1:d5:cd:c3:e1:67:1c:15:5b:6f:64:74:01:3d:1f:f6:23:d5:
e0:67:ef:32:8e:89:a3:21:69:c0:fe:80:d7:c3:4a:4b:b8:39:
7d:01:6d:9a:74:78:bc:70:be:ca:59:d7:0c:4e:e2:7b:b3:4a:
9f:a7:1f:ba:af:0a:18:17:ad:fa:91:93:c0:98:55:04:d9:14:
da:00:f7:1e:84:53:9d:c1:f9:fc:d2:aa:8c:22:09:bd:1a:15:
eb:88:b5:9e:dd:6f:41:df:b5:25:be:cd:af:ef:a4:f1:6b:a2:
90:b3:44:b1:c4:77:5f:05:5b:86:04:45:a1:d1:03:f0:d7:dd:
fa:13:08:8e:35:73:30:18:1e:22:52:04:37:ad:94:9c:db:05:
37:1c:56:81:d1:72:3f:c3:29:e6:dc:7f:8a:06:db:c0:89:b1:
46:e4:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:27 2025 by rpki-client