Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RUuJxYZLJmTxpMuUp70ngA__yIM.roa
File: RUuJxYZLJmTxpMuUp70ngA__yIM.roa (raw, json)
Hash identifier: MFsbsiZMFacC+0KJFg0Y0/Du2X2dNa19f6lGoOE+sao=
Subject key identifier: 45:4B:89:C5:86:4B:26:64:F1:A4:CB:94:A7:BD:27:80:0F:FF:C8:83
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0199348ACE1CACCAEE0CDC87AB17E6547CFC
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RUuJxYZLJmTxpMuUp70ngA__yIM.roa
Signing time: Wed 10 Sep 2025 16:52:15 +0000
ROA not before: Wed 10 Sep 2025 16:52:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 92.118.88.0/24 maxlen: 24
92.118.89.0/24 maxlen: 24
92.118.90.0/24 maxlen: 24
92.118.91.0/24 maxlen: 24
92.119.200.0/24 maxlen: 24
92.119.201.0/24 maxlen: 24
92.119.202.0/24 maxlen: 24
92.119.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:8a:ce:1c:ac:ca:ee:0c:dc:87:ab:17:e6:54:7c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Sep 10 16:52:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=454b89c5864b2664f1a4cb94a7bd27800fffc883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:f7:af:ea:d9:1e:ad:72:f6:d1:70:4f:3a:
67:3e:6b:bd:2a:9a:11:6d:09:f7:3d:5f:49:43:52:
05:1a:2b:23:fc:f6:51:5c:96:30:d0:e9:20:e6:88:
fe:5c:25:36:a3:dd:29:ad:37:67:71:f1:c8:78:2c:
37:f2:4c:e2:25:97:d6:a2:00:d4:9b:5b:57:e5:9a:
84:19:35:f1:49:f6:83:c3:81:a8:81:16:d6:35:14:
85:9e:eb:37:59:c4:c1:21:d1:0d:f5:90:11:f2:8a:
7e:59:11:41:89:10:48:ad:7e:79:83:67:7f:3e:a2:
9d:14:f5:56:00:1a:b1:34:f2:2d:db:11:09:04:47:
c2:70:79:64:2a:ce:07:8b:71:d2:fc:e1:c9:90:cd:
9e:0f:73:49:36:04:26:ab:30:2e:17:1b:39:24:3c:
11:39:74:1c:93:37:76:ab:cb:c4:8e:18:11:9b:46:
99:4e:1f:ca:b0:5c:48:eb:f0:f1:de:b1:b9:15:67:
20:cc:0e:23:1e:72:58:72:96:7e:06:46:93:2c:5d:
8d:62:ff:1b:c1:e3:95:a8:38:b7:ed:e7:42:36:8f:
a8:c1:fe:7f:3e:00:d9:77:fe:98:48:66:12:7e:3b:
3d:e2:15:ea:39:f4:b4:65:82:e2:95:b4:6b:9b:8a:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:89:C5:86:4B:26:64:F1:A4:CB:94:A7:BD:27:80:0F:FF:C8:83
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RUuJxYZLJmTxpMuUp70ngA__yIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.88.0/22
92.119.200.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:8d:95:43:bc:5f:15:92:28:10:27:b2:2a:52:75:25:f5:c8:
b6:b9:7e:cc:bd:2b:e9:14:e0:5b:e9:06:d3:55:55:ae:b1:77:
ef:8b:b0:14:3b:0c:fa:ac:d8:f9:02:c9:6d:fd:b2:c8:0a:4b:
be:32:65:9c:0e:dd:a6:45:2d:88:28:df:9d:30:dd:27:ce:a5:
ac:b7:3d:1a:b1:f7:ff:3f:ca:fc:5c:a7:d3:00:f4:03:fd:34:
c5:cd:cc:ae:64:7b:00:82:c7:e7:f1:68:45:26:bd:54:f6:c8:
d3:ca:e6:bc:8a:66:58:4f:68:4c:87:79:7c:76:5c:8a:79:d9:
61:43:91:07:0e:d5:e1:65:fb:47:87:fe:c6:17:ec:9c:72:99:
1c:20:d7:e0:ad:24:d7:57:e0:66:8e:13:10:1c:19:68:49:fc:
4f:11:0a:ca:64:63:2f:fe:f1:30:1a:61:66:76:43:ca:38:e6:
75:c4:92:ef:1a:eb:c1:f8:e9:ca:18:a1:38:36:12:6b:7a:a9:
db:ed:4f:d8:cd:e4:be:19:c2:3f:6d:54:57:8e:1d:c0:c4:eb:
7d:9f:12:bb:71:f1:6f:c1:d0:68:ae:84:ac:62:00:30:40:a1:
c2:e5:df:28:0a:cb:2e:0c:9e:99:bf:55:95:8e:8b:25:54:6d:
aa:a9:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:41 2025 by rpki-client