Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/1-i2LAxW-tjEoNC4ZpT6usTL7gdY.roa
File: 1-i2LAxW-tjEoNC4ZpT6usTL7gdY.roa (raw, json)
Hash identifier: mWMUsyZTQBURIQak8OdjUvSqzoXJtVHx7l8rGKDmzC4=
Subject key identifier: FA:2D:8B:03:15:BE:B6:31:28:34:2E:19:A5:3E:AE:B1:32:FB:81:D6
Certificate issuer: /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial: 0199E1CF15C4985CDF209E3449593BEFD33A
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/1-i2LAxW-tjEoNC4ZpT6usTL7gdY.roa
Signing time: Tue 14 Oct 2025 08:21:09 +0000
ROA not before: Tue 14 Oct 2025 08:21:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49432
IP address blocks: 185.210.224.0/24 maxlen: 24
2a0b:5cc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:cf:15:c4:98:5c:df:20:9e:34:49:59:3b:ef:d3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Validity
Not Before: Oct 14 08:21:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa2d8b0315beb63128342e19a53eaeb132fb81d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:af:ea:26:02:5d:15:7d:57:42:1f:e8:8b:
bf:b5:74:77:f5:77:7d:15:f2:4f:17:db:67:18:6e:
79:7c:e3:dd:63:17:50:05:90:69:1e:5b:48:2b:1b:
c4:63:6f:4c:6d:1e:bb:c4:36:69:93:2b:4e:70:63:
aa:c6:75:a1:ba:b1:35:b7:27:1d:13:18:0b:a5:11:
73:58:b7:57:86:13:b5:98:c8:63:77:31:18:ef:cd:
8e:d5:e3:ff:91:8d:4e:e0:87:9d:ee:12:7b:a1:6f:
a9:83:ff:e3:80:85:7f:4f:ff:a7:8b:53:71:2a:3f:
cd:30:ad:b3:74:97:91:09:bb:f9:a2:f9:59:4f:89:
26:5d:c8:53:35:46:84:94:50:3d:44:a8:f3:35:d9:
5c:7c:d5:7a:f6:4e:fc:7d:ac:da:d8:c3:92:d3:55:
6d:09:ca:69:7c:b6:74:17:6b:df:c6:9f:4d:f4:10:
c8:fd:50:26:33:ac:99:96:aa:8a:22:92:00:bf:42:
c0:9f:03:62:a7:b7:a4:72:14:f4:45:77:91:54:70:
20:85:53:1f:64:d6:c8:74:4c:5c:53:8f:b3:c4:0c:
46:94:2d:f6:d3:67:d1:c4:1e:b3:4f:5b:0e:be:6f:
19:f9:bf:32:4d:e2:7c:73:98:d2:36:b7:ba:60:01:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2D:8B:03:15:BE:B6:31:28:34:2E:19:A5:3E:AE:B1:32:FB:81:D6
X509v3 Authority Key Identifier:
keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/1-i2LAxW-tjEoNC4ZpT6usTL7gdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.224.0/24
IPv6:
2a0b:5cc0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:e1:9e:8a:ff:41:d3:66:6f:5e:c8:24:33:eb:44:08:05:11:
97:4d:29:07:a4:a5:23:c7:1a:13:a6:3a:20:8e:0f:a3:fa:9b:
d7:9e:13:8a:fa:49:d9:04:65:f3:51:2b:05:54:86:ef:1a:6c:
12:ad:a9:a9:36:2d:7a:0d:a5:56:6b:09:b2:a2:bb:45:5d:cb:
12:d8:4d:39:c8:a2:82:7c:b2:bb:10:2a:f8:38:e7:31:91:e8:
30:3f:de:38:65:75:39:4b:c7:ac:20:17:8d:42:76:9a:56:76:
c1:28:f3:41:5f:a8:4d:2b:5f:db:9e:b0:d3:24:07:ff:9d:10:
79:29:ed:c2:a2:55:9f:94:d8:7a:25:a5:6e:d1:28:d9:21:59:
d5:cf:c2:a3:71:81:07:7d:c8:c7:ca:9b:d1:90:61:76:bd:dc:
c0:a7:df:53:e8:0a:f6:75:45:c9:70:2a:83:40:ef:ee:66:41:
66:0b:42:f2:df:4c:5b:fb:f2:79:f6:f6:d7:56:07:88:64:5c:
be:ad:79:cd:f0:eb:85:e0:25:16:c2:6d:ad:da:e0:4b:b9:bb:
4b:b0:f3:91:57:e9:2d:d0:5e:4a:36:ac:65:4b:fa:9a:70:3d:
60:97:76:be:d9:5f:81:af:d0:58:27:fa:85:20:38:24:43:2d:
5c:31:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:58 2025 by rpki-client