Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/1RhZ680ZFwSWL0eW5jF3xOe9MxM.roa
File: 1RhZ680ZFwSWL0eW5jF3xOe9MxM.roa (raw, json)
Hash identifier: sgWoBKYoXGWVKYDBWWq0HZS7lSSlvVBQHXsa6478dkc=
Subject key identifier: D5:18:59:EB:CD:19:17:04:96:2F:47:96:E6:31:77:C4:E7:BD:33:13
Certificate issuer: /CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Certificate serial: 0199C31BB9C5C064115CFF6E747C25C52B4E
Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/1RhZ680ZFwSWL0eW5jF3xOe9MxM.roa
Signing time: Wed 08 Oct 2025 09:16:37 +0000
ROA not before: Wed 08 Oct 2025 09:16:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210423
IP address blocks: 185.67.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:1b:b9:c5:c0:64:11:5c:ff:6e:74:7c:25:c5:2b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Validity
Not Before: Oct 8 09:16:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d51859ebcd191704962f4796e63177c4e7bd3313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:6a:88:60:27:af:49:99:55:97:6c:23:69:
b1:75:b8:ce:b1:00:1a:70:82:b0:b3:e5:c8:d6:e9:
3d:c2:1d:fc:f2:be:60:5b:19:0d:34:6b:35:42:a6:
c5:15:2c:a9:61:b1:f6:89:9e:37:ce:e5:22:65:9a:
2a:12:b8:c2:02:9c:b4:39:17:b2:16:d4:35:b5:cb:
f0:28:b9:16:9b:c5:6c:bf:c6:6c:f5:a2:5c:47:bf:
79:ac:2a:15:e8:6a:d9:40:8a:4c:8d:d5:37:f2:64:
12:96:09:b8:1a:50:c8:74:41:d1:78:b5:5f:12:7e:
ec:f5:c3:29:34:6f:14:7d:99:f0:b0:8d:b6:8e:e2:
82:0f:0d:eb:26:32:39:ca:26:79:9f:4a:71:6e:58:
23:60:12:5a:e4:38:39:0a:67:d4:56:c5:14:99:7c:
22:a6:17:14:6a:91:80:1e:a9:4f:c1:e4:fe:95:32:
3a:d0:16:43:e4:84:0f:f3:10:e1:b3:aa:2c:b6:e2:
79:95:b3:18:31:25:c4:1e:54:28:0d:32:3d:af:71:
98:9e:02:9b:ac:ef:77:5f:b0:fe:0e:82:1e:54:ff:
b6:87:9e:3c:ce:f6:d5:86:b3:6e:79:8d:c1:c0:49:
5a:78:f7:f9:9c:4d:8b:e4:fc:88:07:3a:ac:55:c2:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:18:59:EB:CD:19:17:04:96:2F:47:96:E6:31:77:C4:E7:BD:33:13
X509v3 Authority Key Identifier:
keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/1RhZ680ZFwSWL0eW5jF3xOe9MxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.28.0/22
Signature Algorithm: sha256WithRSAEncryption
81:ce:6b:07:7d:29:a9:0d:44:bc:a2:81:bf:95:30:a8:0c:96:
74:a8:ae:e3:07:58:1e:08:f7:8c:ac:61:c5:bc:e5:9a:4f:69:
55:79:b3:aa:8e:43:c8:06:23:b6:7e:d7:86:e1:2c:73:9a:d7:
29:4c:2e:78:44:ca:33:07:eb:a7:f5:ab:f0:38:3b:76:77:5d:
cb:a9:1e:4d:6c:2d:c6:40:6b:aa:d3:ba:07:10:87:99:24:51:
6f:aa:c4:9b:73:b1:1a:8e:b7:6d:8c:31:8a:1a:a1:5c:a0:1f:
8e:d7:28:1c:e3:6e:2f:8f:57:2c:59:1c:4e:13:14:e1:7d:f8:
0c:f3:51:a3:ae:13:fe:54:49:20:9a:39:19:df:09:7f:6a:b5:
58:4d:19:4a:3f:86:9f:c1:79:98:b9:12:d2:50:4d:eb:87:fb:
cf:a8:30:eb:d5:fd:4e:f6:18:39:ea:60:86:22:04:75:7e:3c:
85:dd:e0:47:a6:71:c5:13:ec:0e:f8:79:f9:36:c4:2f:12:17:
ed:96:7b:8c:de:1d:a8:37:3d:c5:0c:ed:55:9a:88:a7:f9:78:
78:4b:47:cf:1a:f5:ce:84:d7:b2:53:30:41:39:b2:21:5b:97:
7c:c7:4f:9e:52:bf:ed:65:e7:00:cb:53:4f:30:c3:ee:c5:18:
a7:cc:2d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:46 2025 by rpki-client