Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/uybfY0RvXrEw-JkeccEv0JWQnZw.roa
File: uybfY0RvXrEw-JkeccEv0JWQnZw.roa (raw, json)
Hash identifier: RH7NzUozOCn71Td3PzUB1BrZzkZCZl07ezpjuP1kCZc=
Subject key identifier: BB:26:DF:63:44:6F:5E:B1:30:F8:99:1E:71:C1:2F:D0:95:90:9D:9C
Certificate issuer: /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Certificate serial: 0199B91981C11117FC96447C29301FB35E3E
Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/uybfY0RvXrEw-JkeccEv0JWQnZw.roa
Signing time: Mon 06 Oct 2025 10:38:00 +0000
ROA not before: Mon 06 Oct 2025 10:38:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42510
IP address blocks: 193.106.56.0/22 maxlen: 22
193.106.56.0/23 maxlen: 23
193.106.56.0/24 maxlen: 24
193.106.57.0/24 maxlen: 24
193.106.58.0/23 maxlen: 23
193.106.58.0/24 maxlen: 24
193.106.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:19:81:c1:11:17:fc:96:44:7c:29:30:1f:b3:5e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Validity
Not Before: Oct 6 10:38:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb26df63446f5eb130f8991e71c12fd095909d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:66:6d:69:6e:5c:d5:77:83:1d:a2:40:fb:
a4:d1:8f:8a:ae:bf:9e:7d:6a:26:ef:6e:e5:17:a7:
2b:43:ca:54:d9:df:c0:66:fc:67:7d:10:f2:68:f2:
12:c1:5a:e1:9f:b1:e2:93:38:e5:15:96:33:db:7b:
90:7e:86:2f:06:a4:5c:58:4f:4f:68:59:02:cb:9d:
a9:02:fc:94:f9:f6:ec:5e:55:3b:95:30:98:65:1a:
c5:b3:db:fe:67:db:cd:91:87:41:d5:bd:f4:2c:56:
55:20:a0:aa:a3:e0:6e:04:59:e3:52:7c:53:06:a4:
00:23:7f:4e:ef:94:9a:5e:5c:e2:24:b6:0c:0f:34:
08:db:2a:1b:7b:d1:2f:bf:e1:23:95:6a:ed:b3:49:
37:ab:2b:ef:a6:ac:ca:bb:9d:6d:9b:fa:bc:7e:98:
ba:49:8f:f6:13:18:d2:44:ee:4a:c9:b6:6f:af:1f:
48:56:4d:a5:e9:20:59:07:d4:bb:32:48:a4:a9:01:
da:84:81:fd:65:40:c8:91:72:36:79:2d:84:f6:34:
25:5d:22:d8:ef:a7:d4:33:f3:b3:4c:e0:5c:4a:c2:
61:65:aa:c5:b8:3a:24:48:ac:1e:cd:b3:81:35:93:
55:90:84:88:36:ce:03:83:ce:24:ba:c6:3a:35:bf:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:26:DF:63:44:6F:5E:B1:30:F8:99:1E:71:C1:2F:D0:95:90:9D:9C
X509v3 Authority Key Identifier:
keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/uybfY0RvXrEw-JkeccEv0JWQnZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:32:27:8b:f1:16:0e:0f:1c:b4:fe:a0:91:98:e0:28:84:eb:
b9:da:da:bc:85:b0:13:c3:52:25:5f:5b:3e:bb:85:66:26:24:
a6:d2:61:a1:72:d2:a8:49:67:8c:13:cb:47:6d:b9:1e:01:69:
4d:9f:2a:0f:f0:12:2a:3c:d9:f3:a5:40:5c:ca:66:61:9d:a4:
a2:06:0b:0d:9c:36:cc:55:18:15:47:68:72:1b:17:06:2a:37:
4e:df:6f:3e:c7:2d:5a:3c:77:f5:26:0a:aa:f7:fa:f6:f5:10:
ba:17:f9:3e:4e:d2:94:fa:cc:2a:5b:aa:c5:0c:9f:bc:00:76:
5c:93:37:97:80:c3:8d:e3:ac:c2:dc:41:91:cf:77:50:a7:71:
dd:81:86:35:f3:4d:1f:77:9f:d3:f6:a0:79:a3:30:bc:ec:9e:
11:63:54:f3:28:0c:b3:41:1d:6d:e0:b5:c0:7f:a8:30:97:b3:
27:a3:33:bc:5a:d6:8a:38:d3:05:e2:bd:ac:4c:7d:38:22:83:
0d:a2:40:ee:7d:66:6b:74:c3:34:45:3f:76:97:12:67:95:7c:
99:54:2d:68:84:53:71:1e:d4:e4:5f:4a:dd:d4:94:2b:4a:e2:
f4:8a:a3:56:ff:fc:82:aa:b4:83:6d:9f:cb:65:fc:15:cc:a0:
23:ea:24:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:38:17 2025 by rpki-client