Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kD8mXb7QNXg62xVk3BHbzojc38M.roa
File: kD8mXb7QNXg62xVk3BHbzojc38M.roa (raw, json)
Hash identifier: go2EIk63gfgIPZQkKW3cm+MBlUq2qRlTCvPzuDfmGOU=
Subject key identifier: 90:3F:26:5D:BE:D0:35:78:3A:DB:15:64:DC:11:DB:CE:88:DC:DF:C3
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0199DE32D8EFCCD6D58FF7334D93BE9D13A9
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kD8mXb7QNXg62xVk3BHbzojc38M.roa
Signing time: Mon 13 Oct 2025 15:31:38 +0000
ROA not before: Mon 13 Oct 2025 15:31:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205634
IP address blocks: 64.137.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:32:d8:ef:cc:d6:d5:8f:f7:33:4d:93:be:9d:13:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 13 15:31:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=903f265dbed035783adb1564dc11dbce88dcdfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:8c:42:7d:59:a5:f4:b1:65:d3:90:02:50:
a2:c3:42:7a:a7:b6:08:9e:db:8f:3a:6b:a5:74:7b:
da:a5:bb:8d:a2:a1:70:36:1a:0a:3f:e6:e0:fc:69:
c7:c7:5f:04:99:65:b5:91:22:63:b6:69:d3:4d:a3:
4a:9f:63:94:c3:fb:f0:10:90:e6:a7:7b:5e:6c:6d:
e8:87:7a:73:44:c1:d8:f3:88:0b:d5:fc:60:00:07:
de:59:f2:fc:16:b5:ac:a2:f5:b6:50:f2:ac:12:28:
30:c1:41:12:c8:f4:4e:00:38:7c:32:7e:42:90:05:
fe:f7:63:86:8c:3e:3f:a9:34:ef:42:ee:f7:eb:d0:
aa:1e:f4:b6:dc:2d:cc:fc:f5:4d:8c:7d:3f:2a:35:
ad:f7:63:43:a5:5f:7b:86:73:bb:78:3a:e4:65:bd:
b5:d7:02:42:21:38:13:e6:57:10:64:b8:4f:7b:73:
1a:62:7d:78:bc:ed:e9:62:a2:9f:b1:44:49:1b:7a:
f0:ff:7a:72:8a:7b:6b:5b:0c:e3:b6:5b:5b:01:a9:
3a:f4:ac:9a:0b:0f:f6:66:dc:0d:04:e8:41:08:27:
28:1a:91:e4:dc:99:67:19:7e:1d:ab:a6:3a:40:e0:
71:fe:44:74:8c:30:0e:3d:e9:6c:de:eb:7e:69:5c:
6c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3F:26:5D:BE:D0:35:78:3A:DB:15:64:DC:11:DB:CE:88:DC:DF:C3
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kD8mXb7QNXg62xVk3BHbzojc38M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.111.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b9:d6:75:bf:e8:9a:54:91:3e:e6:25:d0:71:a7:6a:d8:61:
8d:dd:75:fa:0e:95:a8:0d:96:f8:d9:27:c4:c0:5d:5b:c7:cd:
73:b8:e0:09:7a:e6:79:39:4d:7c:28:ca:e0:ed:8f:ed:b6:38:
b5:35:ff:f0:ef:f8:b8:18:8a:f7:5d:d0:e2:76:5f:53:ed:34:
82:09:bc:ba:93:1a:bf:73:08:94:96:08:a4:f8:e7:2d:8a:fc:
d3:1f:51:06:f6:cf:29:6c:bb:a2:37:21:e7:e0:5e:12:f4:ba:
96:45:ae:77:99:16:6f:93:08:94:37:75:9c:21:b9:a7:92:4f:
46:80:ae:62:43:f1:ab:31:72:49:af:0c:64:a7:f5:27:20:4f:
4d:6e:78:98:3e:58:b9:89:75:4b:db:df:fa:cc:2b:9b:9d:ea:
e4:8b:af:fc:62:bd:43:a4:7a:14:3a:11:f5:c4:89:9b:1c:2b:
f8:fa:7a:48:e3:41:e9:e1:fc:8a:1b:50:be:e3:dc:33:b7:fc:
b7:07:e6:f8:70:c8:3c:48:f0:15:43:54:68:dd:d8:d2:4c:0b:
0d:be:57:85:39:b3:01:5e:59:82:28:4a:67:e3:34:94:be:da:
bd:8f:83:ab:6b:df:dc:00:1f:d8:c5:f0:97:a0:d1:2f:1a:85:
20:56:a6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:29 2025 by rpki-client