Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/diurzX_f0Kh-tkNz_5FkIhsZcbc.roa
File: diurzX_f0Kh-tkNz_5FkIhsZcbc.roa (raw, json)
Hash identifier: oW1j/29eW+cjlDjHbcTAisOM3fT59ntCtOMes7dOnI0=
Subject key identifier: 76:2B:AB:CD:7F:DF:D0:A8:7E:B6:43:73:FF:91:64:22:1B:19:71:B7
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 0199C88A6A92B518C7371C0652E64D119739
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/diurzX_f0Kh-tkNz_5FkIhsZcbc.roa
Signing time: Thu 09 Oct 2025 10:35:38 +0000
ROA not before: Thu 09 Oct 2025 10:35:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393560
IP address blocks: 93.191.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:8a:6a:92:b5:18:c7:37:1c:06:52:e6:4d:11:97:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Oct 9 10:35:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=762babcd7fdfd0a87eb64373ff9164221b1971b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:2b:4e:2e:a1:f3:57:2c:e5:17:8b:73:83:
4c:db:04:9a:23:d0:b1:b6:6d:d6:c3:67:f2:8d:21:
38:c6:df:8c:87:e8:77:11:a6:7b:63:5b:3b:b0:f9:
a4:26:92:ed:be:8d:c7:5c:9b:68:dd:e2:e3:0c:d8:
88:35:51:89:d6:8d:83:74:d0:19:75:8b:39:26:1c:
29:fe:57:5c:e5:c2:c4:e1:e7:59:79:0d:92:72:d3:
f4:09:7e:f7:ff:a9:9f:a8:77:72:13:b4:1b:75:b4:
da:ae:9c:97:60:04:dd:3b:f0:f8:5a:33:35:34:cb:
8b:ec:1d:5f:16:d8:57:12:fe:fb:64:54:e0:13:4a:
4b:6f:bc:5f:98:62:35:05:71:1c:a4:65:6d:f6:82:
87:f1:03:c5:aa:25:e8:53:54:60:d9:4a:ad:c0:c5:
90:38:2f:d5:fb:cd:01:a5:64:ff:ad:e4:09:51:68:
79:05:04:f8:65:46:0a:c6:81:b8:ea:22:3a:9a:ed:
8a:77:2a:aa:60:50:51:c0:3e:23:b4:cc:f1:a4:83:
8d:01:5f:e6:c1:45:8e:fa:ba:40:45:dc:22:5b:a2:
54:e2:3d:f9:50:6b:f7:cc:a2:28:8d:a3:98:ff:a7:
8b:df:13:66:73:ee:ac:9d:c2:e8:49:60:c6:5f:18:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2B:AB:CD:7F:DF:D0:A8:7E:B6:43:73:FF:91:64:22:1B:19:71:B7
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/diurzX_f0Kh-tkNz_5FkIhsZcbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.170.0/24
Signature Algorithm: sha256WithRSAEncryption
43:37:25:b8:95:6c:92:6c:e4:9c:0a:28:c0:fb:9a:c3:a7:f0:
54:4a:d5:19:2a:ea:9b:56:36:4e:14:65:a0:46:81:c2:db:f0:
cd:94:5a:88:58:0f:d3:62:28:4c:fe:ae:c7:5f:4a:ed:98:d6:
ae:b5:9b:ab:64:78:3c:44:df:a3:cf:c7:ab:b6:26:82:b1:24:
f3:18:ed:31:0a:50:ac:dd:57:8f:c3:75:68:f1:c2:e6:0e:c4:
11:59:f9:61:ea:86:2b:ba:90:4a:3d:80:78:c6:c4:73:97:20:
78:f5:7f:4e:24:39:21:8c:51:76:0a:24:c1:d5:48:e9:2b:22:
71:49:13:20:40:82:41:75:c3:32:4d:fb:06:86:7a:15:0d:1e:
b0:56:a5:67:c8:62:3d:b8:58:72:73:16:05:31:ea:e4:2b:a0:
18:ab:68:1c:a7:e6:64:1e:c4:b7:5a:f9:10:0f:c6:03:4e:fb:
b9:86:e9:37:67:95:9b:89:54:ae:0e:8e:b2:f4:80:fc:54:d8:
ec:d6:07:fe:1e:3a:b7:24:b9:02:f4:02:ed:9a:0c:fb:75:66:
a3:06:27:21:84:d9:27:07:d1:59:5e:fc:da:17:58:60:75:6e:
fd:7e:86:fc:c5:41:17:29:c1:16:cb:33:b5:1b:7a:67:36:04:
9b:74:dc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:47 2025 by rpki-client