Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/1-pbn6Ub3y6IFfhatJXpFv2oIg4Y.roa
File: 1-pbn6Ub3y6IFfhatJXpFv2oIg4Y.roa (raw, json)
Hash identifier: otqMBUJ0t81q8O5ZwH5j1LnN11Nn61m+zKuZ8xsbQeQ=
Subject key identifier: FA:96:E7:E9:46:F7:CB:A2:05:7E:16:AD:25:7A:45:BF:6A:08:83:86
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 019994AA262E082F3A3DAC5B0585DF945968
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/1-pbn6Ub3y6IFfhatJXpFv2oIg4Y.roa
Signing time: Mon 29 Sep 2025 08:50:02 +0000
ROA not before: Mon 29 Sep 2025 08:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39729
IP address blocks: 195.110.100.0/23 maxlen: 24
195.110.102.0/23 maxlen: 24
195.110.104.0/23 maxlen: 24
195.110.107.0/24 maxlen: 24
195.110.108.0/22 maxlen: 24
195.110.112.0/24 maxlen: 24
195.110.118.0/23 maxlen: 24
195.110.120.0/23 maxlen: 24
195.110.122.0/23 maxlen: 24
195.110.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:aa:26:2e:08:2f:3a:3d:ac:5b:05:85:df:94:59:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Sep 29 08:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa96e7e946f7cba2057e16ad257a45bf6a088386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:41:d2:84:3b:03:e7:5f:08:8f:25:06:a4:
53:93:37:7e:1d:23:ae:1b:c7:70:48:56:0c:ac:68:
96:bb:3e:a3:e2:4b:5a:f0:61:e7:5d:18:79:49:7a:
7a:76:93:96:c8:1e:71:45:80:72:dd:ca:8a:9f:e0:
a7:61:a2:d8:f5:09:6d:e0:d1:65:da:e1:c3:7b:00:
04:c0:ae:19:65:c6:81:32:2a:f3:40:25:73:1e:1b:
ab:8c:29:7d:d1:8f:3c:be:d7:2b:4c:f7:73:49:58:
79:fd:ed:36:91:06:dc:1a:b8:82:34:62:5d:4f:ad:
86:04:70:64:75:bf:7d:11:38:50:f7:29:27:7b:02:
b5:73:d7:10:25:d9:47:15:ef:b7:29:a2:bd:ff:73:
fe:b3:8c:d5:aa:81:b9:bc:2d:42:95:bd:40:c1:7e:
65:05:54:5a:cb:24:cc:8c:14:5e:38:64:f8:8b:65:
cc:6c:c8:d1:2b:7d:be:42:dc:70:3d:0a:4a:78:61:
8a:f2:7e:44:1f:b7:50:14:a9:c8:6f:12:82:2b:62:
49:5d:31:34:8c:a2:c6:8c:68:25:d9:bd:cf:38:1f:
0a:a7:c5:02:e7:2e:de:5c:e2:36:f1:bc:81:50:8e:
ce:02:ce:4d:cb:eb:b9:e5:e3:51:86:6a:4e:1c:0e:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:96:E7:E9:46:F7:CB:A2:05:7E:16:AD:25:7A:45:BF:6A:08:83:86
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/1-pbn6Ub3y6IFfhatJXpFv2oIg4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.100.0-195.110.105.255
195.110.107.0-195.110.112.255
195.110.118.0-195.110.127.255
Signature Algorithm: sha256WithRSAEncryption
06:cc:77:ba:be:2c:4e:bd:b9:dd:fd:01:30:d8:be:31:f0:ed:
e0:5c:c6:ab:01:62:aa:9d:8f:2a:42:88:4a:be:9c:26:2d:50:
f9:18:f7:b8:31:5f:14:03:1a:e4:22:02:5d:90:55:01:f4:2b:
73:0a:5c:62:d3:d4:c5:63:ad:65:76:17:39:a9:5b:96:74:e0:
12:04:c5:94:3d:3a:8e:1e:fc:4f:25:84:be:93:70:8c:38:a9:
08:7f:c3:0c:81:5d:20:46:71:c6:d0:29:e5:35:5c:b8:2c:82:
92:f8:85:9d:02:de:e7:3b:9c:e7:b8:49:a1:ae:4f:90:c7:32:
13:8c:ce:a7:66:e4:2d:5a:8e:34:50:39:b0:ed:e5:ed:6c:82:
0d:fe:b2:ba:96:92:bc:5a:a1:54:82:27:10:15:b3:24:9a:b4:
cd:be:d9:5b:7b:c5:ed:00:5e:96:df:a7:89:33:68:f4:ab:c2:
e2:3f:f3:43:e3:06:13:73:d7:a0:df:89:0f:34:6f:64:a2:44:
e0:ed:7a:c4:2b:1c:52:f4:e4:2d:dc:ae:b6:93:e8:9d:41:60:
e6:a0:fc:7a:ed:81:96:15:52:6f:39:bd:96:5e:0e:ea:d2:1d:
8b:aa:2c:1e:04:3e:37:8b:ca:e6:2f:69:aa:97:76:6c:4f:d7:
c0:c6:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:26 2025 by rpki-client