Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/Df7DTn2zEEq5-3nYcXjduzyZcpE.roa
File: Df7DTn2zEEq5-3nYcXjduzyZcpE.roa (raw, json)
Hash identifier: K9WfaPyx3uuwdfYwGbIQG2MYAnUVk/3ZAaJt4gKJZ0M=
Subject key identifier: 0D:FE:C3:4E:7D:B3:10:4A:B9:FB:79:D8:71:78:DD:BB:3C:99:72:91
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 0199A8E19F4AC462FF68CC75602F991E2707
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/Df7DTn2zEEq5-3nYcXjduzyZcpE.roa
Signing time: Fri 03 Oct 2025 07:03:02 +0000
ROA not before: Fri 03 Oct 2025 07:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34766
IP address blocks: 185.214.24.0/22 maxlen: 22
185.214.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a8:e1:9f:4a:c4:62:ff:68:cc:75:60:2f:99:1e:27:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Oct 3 07:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dfec34e7db3104ab9fb79d87178ddbb3c997291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:ad:44:09:ec:8d:2a:92:69:e3:ff:8c:a5:
ea:ec:e5:20:39:56:3a:3a:13:70:9e:16:3f:d8:2a:
b9:b1:d9:18:a5:5c:e0:ff:5b:d8:a8:7e:e4:96:e3:
35:f4:a7:42:39:df:64:f3:b8:db:74:e4:5a:1f:c8:
d8:48:eb:5b:91:a7:2d:c2:62:a4:a6:98:d4:23:77:
29:1a:c6:b0:be:ce:60:b7:7d:bb:3b:0a:42:9d:cc:
88:f9:dd:92:6c:1c:0f:6e:f8:a6:17:ac:ca:64:a0:
90:6f:67:a5:3e:23:f8:45:b4:71:03:f6:fe:78:e0:
4c:23:91:41:59:14:56:dc:65:75:14:4a:32:6f:98:
04:56:73:66:6b:04:6b:26:35:17:f3:8b:bb:77:3a:
b1:06:4a:3a:80:c6:1d:29:a8:57:93:fb:84:a2:83:
5a:d4:20:27:50:c9:2d:17:ee:4d:b8:57:6c:e5:48:
72:f4:36:67:09:57:c6:49:54:13:66:d1:e5:91:d3:
44:66:a3:43:40:1b:98:2f:d8:73:1e:71:55:d2:9f:
31:af:8d:a9:d4:89:2c:21:36:65:32:fc:aa:f3:16:
7f:e7:4b:d2:89:4d:25:a0:18:34:6a:a6:7e:6a:f0:
9d:83:82:64:c0:c3:ff:4e:f3:76:d4:76:8f:c2:1a:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FE:C3:4E:7D:B3:10:4A:B9:FB:79:D8:71:78:DD:BB:3C:99:72:91
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/Df7DTn2zEEq5-3nYcXjduzyZcpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:64:bf:b9:46:e1:6d:d1:ea:64:bb:c3:ff:37:8e:b5:a0:9c:
3b:70:2c:45:8e:c8:72:48:36:dd:f5:a4:22:51:20:60:72:4e:
14:d4:1d:a9:d9:3b:2b:c4:7b:42:30:6f:6d:57:fd:1c:7d:07:
43:a4:b4:8f:b1:fc:90:d6:44:52:8a:37:ff:a6:42:ed:e0:a6:
c2:5c:45:ac:11:be:28:1a:04:bf:8c:a4:5d:d8:83:02:8c:8f:
ca:ba:f1:57:93:e9:37:23:8a:35:4d:66:26:12:ca:69:bc:0e:
6f:84:80:a1:81:44:1a:0f:76:3a:21:40:e7:5c:d7:71:db:2e:
43:a0:9f:df:2d:1a:33:fe:a5:4c:d3:e7:b1:05:9d:92:70:b3:
b0:c2:18:62:31:29:8a:ae:0d:b2:4f:84:46:c9:c0:96:ed:f8:
22:30:a6:a8:47:9b:b0:5f:76:22:d0:e1:0d:84:9b:9e:a3:d4:
e3:a6:35:6d:e4:68:fd:89:92:ce:50:e1:4e:e5:1e:25:cd:6b:
46:6a:6f:91:86:28:e8:3c:91:38:9d:51:20:ca:27:9f:63:57:
7b:ca:cd:a3:38:7e:0a:43:d6:7f:12:82:71:ca:91:23:e3:87:
61:7f:9f:d6:f7:9f:87:aa:2c:e4:2c:18:9c:cf:39:d2:1c:6d:
26:ca:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:53:51 2025 by rpki-client