Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_6fk9u3GMpi14RhY0Vpqi7RoUuY.roa
File: _6fk9u3GMpi14RhY0Vpqi7RoUuY.roa (raw, json)
Hash identifier: 8J+04Jyy5QLdgaXHvTT5XyET/UweE7ZvDXWvk66tOH0=
Subject key identifier: FF:A7:E4:F6:ED:C6:32:98:B5:E1:18:58:D1:5A:6A:8B:B4:68:52:E6
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019933D9774CB9E88C3B62940FFFD4034E9F
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_6fk9u3GMpi14RhY0Vpqi7RoUuY.roa
Signing time: Wed 10 Sep 2025 13:38:33 +0000
ROA not before: Wed 10 Sep 2025 13:38:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215645
IP address blocks: 185.243.181.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:d9:77:4c:b9:e8:8c:3b:62:94:0f:ff:d4:03:4e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 10 13:38:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffa7e4f6edc63298b5e11858d15a6a8bb46852e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:d5:20:59:21:17:e1:39:b6:23:20:24:22:
4a:f4:e8:a2:fc:34:43:21:bc:89:ff:4c:6d:a5:10:
a8:23:26:e4:3b:ad:56:31:13:93:fe:42:4f:f9:ca:
85:43:a4:40:c5:64:42:4a:b0:c5:19:a8:9c:6a:45:
5f:ef:15:48:91:24:0c:35:08:11:aa:f6:e8:4c:8e:
8d:c5:fe:e0:ea:62:a1:ff:15:50:ea:2a:9d:2a:3b:
68:9d:34:a1:76:e8:9f:42:c0:8f:47:db:93:db:44:
ff:ff:20:7a:ed:ea:71:9c:9e:17:f7:7f:ae:30:5a:
84:2f:82:42:02:6a:fa:12:32:f0:21:80:9b:a9:32:
f4:72:a0:76:43:00:ab:08:78:38:1b:c0:3c:c0:19:
77:96:ac:8f:36:16:bc:41:76:56:a5:c5:85:71:a1:
91:c8:4e:e7:4e:c5:68:8e:24:e2:cc:a4:de:a9:50:
a2:eb:3c:1a:d4:47:d0:51:87:63:7b:2a:51:65:c4:
c6:8b:60:be:49:f8:62:d8:5b:9a:1b:93:a1:d1:14:
5f:11:a7:84:eb:08:ba:3f:b8:cd:79:b7:9f:f0:e3:
6a:8c:0c:94:87:c2:c6:87:6d:1e:88:5f:25:93:18:
bf:ac:ed:18:05:96:8c:9c:29:18:1e:7f:0a:65:09:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A7:E4:F6:ED:C6:32:98:B5:E1:18:58:D1:5A:6A:8B:B4:68:52:E6
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_6fk9u3GMpi14RhY0Vpqi7RoUuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.181.0/24
185.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0e:e9:97:80:b3:b9:3f:7e:e1:f4:a2:17:07:3d:09:80:50:
a3:9b:51:e2:e8:49:fd:ab:f9:5f:1e:db:9c:33:64:5d:c2:1a:
84:b7:08:f4:53:f1:50:c3:0b:8f:8d:e5:2f:0b:c0:8c:9c:94:
1f:d9:cc:a7:64:11:7b:b3:ee:ca:b1:4e:5a:2d:65:af:ea:32:
7c:2e:6a:6d:14:28:14:3f:c4:2b:99:b2:5e:5e:a4:66:8f:d8:
fa:16:e3:a0:1b:86:d0:91:b5:4f:45:a1:18:32:1e:a8:87:92:
8b:63:6a:20:82:26:03:6f:7a:20:03:40:9d:9b:9e:f3:3c:8d:
51:63:03:fb:d0:a2:8d:fa:87:71:e4:b5:e1:0b:8c:9f:4a:a2:
fb:b8:2a:3a:a0:c8:59:0e:b7:3e:24:e5:de:e9:18:42:12:a5:
f2:af:25:40:dd:2c:b8:a6:10:f4:6e:7f:0e:2a:0b:85:4a:83:
b5:ff:ab:eb:31:15:28:11:44:56:c9:a8:26:c4:2d:2c:d6:16:
54:37:67:21:82:a2:f4:8b:09:f4:bf:d8:9a:0a:c5:b0:e9:18:
f9:5d:b4:b4:0d:c0:4f:f0:0a:ab:7b:2b:fc:18:01:d8:af:ee:
4a:95:35:e4:20:dd:7a:36:e0:27:f3:95:a2:d3:e0:96:ea:9a:
6c:0b:cb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 09:46:04 2025 by rpki-client