Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/taBuGNscecueOGdxDI5_sp5Q64s.roa
File: taBuGNscecueOGdxDI5_sp5Q64s.roa (raw, json)
Hash identifier: jfs6i9kfrvsOmGXfhBNY9aaIV6kpwF4dvrqA21q44KU=
Subject key identifier: B5:A0:6E:18:DB:1C:79:CB:9E:38:67:71:0C:8E:7F:B2:9E:50:EB:8B
Certificate issuer: /CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5
Certificate serial: 0199A55AE96C3147565F03F62B54DB9C239D
Authority key identifier: 42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/taBuGNscecueOGdxDI5_sp5Q64s.roa
Signing time: Thu 02 Oct 2025 14:37:02 +0000
ROA not before: Thu 02 Oct 2025 14:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212841
IP address blocks: 185.21.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:5a:e9:6c:31:47:56:5f:03:f6:2b:54:db:9c:23:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5
Validity
Not Before: Oct 2 14:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5a06e18db1c79cb9e3867710c8e7fb29e50eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:ff:8a:8a:64:7e:4b:31:3d:6a:bf:ec:df:
e7:41:4c:76:ae:7f:1e:82:b9:07:2c:72:54:a0:4b:
90:03:8e:a0:ac:81:c7:e5:3b:ea:e5:ac:f6:22:e9:
57:99:b1:0d:92:f4:1a:40:58:8d:1f:64:16:d0:da:
cf:04:1b:4f:9a:ff:8e:af:d5:41:0c:18:7e:56:be:
18:29:9e:97:30:ce:52:21:dc:92:1c:f9:5d:4a:fa:
00:99:79:32:ed:8f:ae:34:b7:78:89:83:76:5f:cd:
0f:97:fb:85:39:cc:16:f5:74:b4:09:97:af:0b:68:
23:8f:39:e2:60:5d:7c:91:29:14:61:05:61:4a:df:
c8:d9:17:bd:c4:b8:14:b6:fa:ae:6a:87:9e:47:2d:
08:7f:79:10:e3:b1:e4:87:d1:4b:09:53:0a:6a:21:
29:9a:aa:58:2d:d7:6a:92:b9:39:f2:bf:cb:0c:aa:
12:d0:4d:ea:2e:b6:2b:ba:10:24:8a:72:79:0c:10:
01:ae:ee:0a:a8:2a:31:0c:7b:f2:c7:b9:d1:50:9b:
1b:bd:aa:06:f1:23:64:28:e3:1f:bb:f0:42:0a:15:
f8:84:92:04:b1:0c:e5:bc:c8:65:93:1a:53:79:89:
b2:73:54:7b:84:c6:41:18:07:bf:6d:0e:e5:22:64:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A0:6E:18:DB:1C:79:CB:9E:38:67:71:0C:8E:7F:B2:9E:50:EB:8B
X509v3 Authority Key Identifier:
keyid:42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/taBuGNscecueOGdxDI5_sp5Q64s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.132.0/24
Signature Algorithm: sha256WithRSAEncryption
94:47:9a:e8:39:f4:57:79:7e:d1:91:de:cc:11:0e:f6:61:69:
e1:ea:6c:36:04:87:d9:e9:af:29:15:20:9f:c4:64:fb:c0:40:
b8:0e:08:fe:b2:f9:7f:b0:f0:fc:b0:dc:62:3c:8f:ea:47:3e:
18:9a:6d:51:d1:f5:b4:b6:5d:02:bf:dd:3e:40:d6:fb:78:31:
fa:6a:e3:d5:b7:bc:2e:06:51:b4:78:be:e0:9b:93:97:5b:e7:
ef:56:e4:15:44:89:94:c5:bd:43:44:a0:df:84:2b:f7:ef:4c:
f3:39:6c:5f:71:1c:98:3a:d0:a0:67:ab:5c:58:d7:71:da:9b:
75:f5:c4:84:68:a6:c0:1c:4f:76:80:1e:f0:29:2a:e6:77:8d:
be:9e:fb:79:68:87:58:c1:bb:9c:d0:12:2a:59:25:8e:0f:9d:
eb:52:48:27:2f:8f:ae:21:75:76:5b:d7:8f:5b:9b:b2:e1:95:
47:70:45:2b:21:e6:9d:4f:1a:96:ab:c9:f6:51:c9:5e:cf:d4:
41:25:31:43:d1:90:5c:42:ac:e1:9e:a8:6a:de:d3:f5:09:f3:
1b:bd:4c:2b:12:0d:bb:b6:63:54:2f:55:42:ac:ad:04:1b:6b:
78:7b:52:94:ae:1f:3b:36:6a:76:41:97:2b:57:51:d3:1d:e3:
77:f4:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:23:00 2025 by rpki-client