Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/DHT86uq93soXgimlreq7l63TpDc.roa
File: DHT86uq93soXgimlreq7l63TpDc.roa (raw, json)
Hash identifier: wHf/DMhPu6ocTE0CoJNwsMGJB1c1KuC84P7yMVgDFoQ=
Subject key identifier: 0C:74:FC:EA:EA:BD:DE:CA:17:82:29:A5:AD:EA:BB:97:AD:D3:A4:37
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 0199D8BBEB791E409516FDEC38EDA23B8E30
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/DHT86uq93soXgimlreq7l63TpDc.roa
Signing time: Sun 12 Oct 2025 14:03:38 +0000
ROA not before: Sun 12 Oct 2025 14:03:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203993
IP address blocks: 185.54.92.0/23 maxlen: 24
2a00:8642::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d8:bb:eb:79:1e:40:95:16:fd:ec:38:ed:a2:3b:8e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Oct 12 14:03:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c74fceaeabddeca178229a5adeabb97add3a437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:7d:37:6f:a1:56:43:bc:9d:77:a7:9e:57:
6b:ed:5f:83:6f:5b:3e:e6:56:67:6f:0c:91:7f:3d:
3e:55:08:92:3d:9b:ef:dd:1c:64:ed:5c:50:9a:c1:
d9:55:63:13:f8:c9:28:18:73:94:0a:57:99:6f:84:
f2:26:58:8d:23:c3:99:aa:29:05:a8:f7:64:74:a7:
a6:bb:83:ad:d1:94:14:49:d9:46:77:d8:2c:d7:50:
e5:28:5b:4c:ec:b0:67:bf:34:3b:94:a7:be:da:0f:
12:f1:52:dd:83:b0:89:e8:31:f7:16:f7:aa:60:b0:
29:6b:1f:9a:f9:cb:f3:5f:ca:e4:ea:72:0c:9d:4c:
a1:e3:74:c9:87:29:08:ab:92:86:46:54:5e:a5:cd:
53:07:8d:c9:4e:ff:0b:40:02:91:02:b5:02:40:ba:
ad:18:f8:8a:c6:03:24:19:54:13:42:83:91:97:f9:
e8:3b:40:59:e9:06:29:11:b2:17:b3:1c:c7:3a:68:
a5:6c:67:d9:c4:7e:44:c6:f1:6d:7d:6a:38:e3:ff:
de:bd:bd:73:dd:b1:0a:cf:3d:1e:4d:ff:96:01:ac:
12:d3:e6:da:f3:c1:2c:ce:f9:4f:2c:b4:0b:ae:5c:
0d:80:75:4c:fd:9a:58:c2:81:4f:f3:5a:50:41:b9:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:74:FC:EA:EA:BD:DE:CA:17:82:29:A5:AD:EA:BB:97:AD:D3:A4:37
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/DHT86uq93soXgimlreq7l63TpDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.92.0/23
IPv6:
2a00:8642::/32
Signature Algorithm: sha256WithRSAEncryption
be:4f:de:4e:ff:54:1b:48:e5:55:af:60:65:8d:3f:a7:8a:1f:
4f:41:15:88:8d:8a:39:e0:3e:a6:03:e0:db:7a:c8:78:4c:88:
78:0b:07:5b:bb:1c:f9:96:4d:dc:5d:ab:64:c4:c1:e7:62:c2:
98:9b:d3:9c:cd:14:14:6d:95:f5:49:0d:86:f3:2c:da:69:b3:
bc:7d:f4:1d:51:24:47:36:d3:d5:0e:f9:2c:9e:09:66:f1:6d:
5f:13:e1:87:83:f8:83:b9:2d:eb:64:f0:e4:d0:09:ba:25:25:
fa:69:e7:51:aa:d1:85:69:ff:29:d0:51:54:90:71:ec:ae:0e:
72:5f:c7:20:55:54:7c:04:61:52:8d:f7:e4:73:ef:51:23:4f:
8c:0f:8d:2c:8e:d1:ac:fd:af:8d:82:07:0c:c9:cb:10:15:11:
e3:01:6a:95:0b:e3:13:36:f7:d2:84:f2:33:79:83:cb:6a:70:
f8:40:fc:3a:74:df:3a:8a:2b:6e:bd:0e:48:78:43:16:e2:2b:
ef:20:d5:97:84:38:d4:d1:fa:4e:31:4f:16:27:a9:29:10:7c:
70:ea:dd:47:59:3f:f9:ed:bc:c5:05:88:b0:94:ec:19:27:15:
0c:c1:8e:35:a9:73:f1:c7:b0:eb:f5:61:bb:40:b3:2e:f2:02:
7d:d7:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:34:36 2025 by rpki-client