Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/lye9DokwTKdkE_FKJTqvZZffwac.roa
File: lye9DokwTKdkE_FKJTqvZZffwac.roa (raw, json)
Hash identifier: wQ8QQHVuRZRKcv813Ugt9RlXSf4ssdTxNCPs6S3sxSI=
Subject key identifier: 97:27:BD:0E:89:30:4C:A7:64:13:F1:4A:25:3A:AF:65:97:DF:C1:A7
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199E4200AAAAD3C5D9755B4B96B9B842E30
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/lye9DokwTKdkE_FKJTqvZZffwac.roa
Signing time: Tue 14 Oct 2025 19:08:49 +0000
ROA not before: Tue 14 Oct 2025 19:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213834
IP address blocks: 170.168.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:20:0a:aa:ad:3c:5d:97:55:b4:b9:6b:9b:84:2e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 14 19:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9727bd0e89304ca76413f14a253aaf6597dfc1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:ed:9e:6c:86:08:ca:bc:7f:d1:2a:25:2b:
39:d3:4d:f7:05:ab:98:e3:d8:ae:a2:3e:a9:80:43:
99:f8:5b:69:7a:f6:92:a8:64:d3:43:06:f4:8b:7e:
4c:3d:d5:fb:0c:46:16:50:67:b4:13:96:79:bb:73:
71:57:86:45:99:58:cf:49:dd:d7:19:23:72:b2:31:
4e:c2:6b:70:fc:69:c8:1e:08:9f:70:b0:54:c4:c5:
e2:f2:1c:dc:ea:84:96:c9:59:9a:7b:27:5e:64:1a:
50:91:d0:19:49:43:47:18:86:48:ea:c0:da:e3:23:
5f:1a:b9:a6:73:eb:e2:0d:6a:b4:87:ce:65:87:4b:
ed:79:7f:0a:c0:b9:17:03:27:bf:b8:01:d7:75:a4:
8d:41:95:8d:3a:a8:9d:74:d6:54:98:54:2d:08:7a:
89:57:07:9d:eb:6e:cd:cf:70:7a:a7:1c:66:37:82:
4c:a1:f3:da:d7:dd:94:d6:3b:35:7e:3d:43:fc:be:
ff:40:f7:bc:26:46:af:c6:5e:f9:be:69:19:ee:21:
01:f5:46:ee:9a:3c:90:87:f7:49:76:d5:c0:77:b0:
0d:56:35:13:91:32:f9:8f:7d:ff:7f:ce:86:3d:c2:
71:5c:5c:53:76:52:e5:b7:5e:3c:71:69:7e:7a:bb:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:27:BD:0E:89:30:4C:A7:64:13:F1:4A:25:3A:AF:65:97:DF:C1:A7
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/lye9DokwTKdkE_FKJTqvZZffwac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.74.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:84:5b:7f:f9:c7:b7:2e:48:58:3d:27:c3:c4:70:05:6e:15:
8e:be:c0:d7:46:d4:f5:f5:75:9b:8a:d7:a6:50:42:68:e7:27:
80:e1:b9:55:67:4d:3d:dd:fe:2f:c7:eb:b5:17:2e:86:4b:cd:
c1:52:fe:90:02:e8:52:c3:86:55:54:73:84:84:48:a0:a2:e5:
9c:ac:28:ec:9e:83:a9:be:f1:9c:62:ee:70:3a:d2:70:45:39:
de:14:aa:ee:9e:d0:09:ea:ac:2d:0a:0b:f6:e1:2f:0c:f6:27:
6f:c2:4a:2e:69:23:a1:cc:a7:50:82:21:7c:c6:81:7a:aa:1c:
1c:50:31:19:ca:aa:75:5e:45:5b:6c:a1:85:4a:2b:f4:fb:01:
dd:96:e7:6c:23:29:45:50:6d:f8:de:e4:1f:91:14:e7:63:cd:
8b:30:c9:7c:61:7e:47:13:1d:48:f4:19:1b:d5:5d:bd:a8:1d:
e6:b3:b7:b7:4e:fe:7d:b4:60:13:41:a3:49:cd:ba:43:83:f5:
0c:fc:49:0c:2e:b8:c2:f7:6e:a8:02:e3:3f:38:0b:fa:22:e3:
5f:db:3f:15:fb:5e:ef:ed:94:71:4e:70:f6:27:9c:07:52:1a:
60:e6:31:65:c4:ac:34:83:ae:c9:06:7a:56:ba:4c:ff:09:c1:
89:d4:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:58:00 2025 by rpki-client