Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/0n3IhvMlD8R2xsMnJ9ZPf0nDToE.roa
File: 0n3IhvMlD8R2xsMnJ9ZPf0nDToE.roa (raw, json)
Hash identifier: t2Tn22z9Q7lcMtYGDqmIRPKsokDYXbfrCxFsJmnIYnc=
Subject key identifier: D2:7D:C8:86:F3:25:0F:C4:76:C6:C3:27:27:D6:4F:7F:49:C3:4E:81
Certificate issuer: /CN=04bec7578450f945d4f334df600c61a6f47232f2
Certificate serial: 019A00DB8A01F1B03DE1296CF73771B17F90
Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/0n3IhvMlD8R2xsMnJ9ZPf0nDToE.roa
Signing time: Mon 20 Oct 2025 09:02:58 +0000
ROA not before: Mon 20 Oct 2025 09:02:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212904
IP address blocks: 185.100.230.0/24 maxlen: 24
185.192.100.0/24 maxlen: 24
185.192.101.0/24 maxlen: 24
185.192.103.0/24 maxlen: 24
185.243.29.0/24 maxlen: 24
185.243.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:db:8a:01:f1:b0:3d:e1:29:6c:f7:37:71:b1:7f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2
Validity
Not Before: Oct 20 09:02:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d27dc886f3250fc476c6c32727d64f7f49c34e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:f8:c0:00:38:35:0a:a2:87:b6:76:90:f7:
39:df:1b:e6:72:fb:e5:c0:87:29:42:87:e9:3e:f8:
dc:ba:cc:07:4f:54:50:46:8a:1c:6a:55:60:d6:7f:
a6:cc:ee:ac:72:34:eb:25:75:4b:44:9c:d4:36:97:
7a:07:f0:4c:1d:c5:38:f7:c6:00:4a:e0:b5:da:e8:
78:27:aa:8b:a7:3f:5b:06:c5:63:09:dc:9b:2a:e2:
2f:9b:6c:6e:f0:8a:08:e0:8c:56:5b:14:c6:21:b4:
d7:5b:cd:ca:7d:40:a9:58:84:8f:18:39:81:ad:72:
5f:b0:66:5e:52:b7:70:9c:75:85:18:cf:aa:8e:46:
fc:e4:53:a2:90:df:c2:fe:2f:12:92:6a:0c:e5:59:
a5:d8:b5:dc:6a:5d:27:ca:5a:4b:95:f1:d9:cc:68:
b2:f3:0f:7d:07:bb:7e:0a:3f:3f:ea:76:26:0f:37:
01:2f:ed:19:28:7b:eb:a4:37:72:9a:8f:64:0a:86:
86:95:11:f7:6c:6b:20:7b:52:3a:fe:ac:de:2f:cd:
40:52:6a:c8:e3:f0:82:1e:a6:94:a1:ec:cf:3b:42:
b2:28:c9:6b:b5:f7:97:ee:44:dc:bc:e8:16:84:70:
c9:34:7a:de:0a:fb:da:a3:98:2c:0e:af:af:48:db:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7D:C8:86:F3:25:0F:C4:76:C6:C3:27:27:D6:4F:7F:49:C3:4E:81
X509v3 Authority Key Identifier:
keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/0n3IhvMlD8R2xsMnJ9ZPf0nDToE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.230.0/24
185.192.100.0/23
185.192.103.0/24
185.243.29.0-185.243.30.255
Signature Algorithm: sha256WithRSAEncryption
85:d7:5d:a3:52:3f:05:fe:ad:08:68:3e:22:9c:6e:2f:ee:77:
36:3c:9c:0e:36:73:30:ff:05:49:2a:1e:4a:00:d1:74:c0:ea:
54:a5:53:a7:f1:2f:33:50:02:e5:2d:92:b2:da:24:fc:5c:99:
e1:a5:c4:88:69:cb:6f:a7:74:e5:c0:fa:59:c6:5c:30:d8:6e:
65:d7:70:8e:3e:18:55:94:c2:ff:b2:dd:bd:cf:d5:53:9a:82:
5c:6d:45:00:e7:a2:6c:33:18:09:3f:b9:9d:bc:be:6b:96:14:
f2:1b:4d:86:a4:a6:a8:2e:30:26:58:22:10:76:90:3a:ec:2f:
07:f9:4a:8f:09:59:82:ca:c2:87:f9:8f:d5:53:02:c8:72:2d:
03:a1:ae:bc:92:b6:2a:25:ab:89:05:09:ab:b4:69:4a:ad:69:
b6:65:0c:ae:de:02:0b:33:8c:de:a3:71:b6:03:2b:83:9f:10:
25:1d:f3:74:d7:29:ad:e4:c2:c3:3d:00:09:27:54:20:37:24:
5d:b8:ea:e5:69:79:a3:e5:5b:bb:d7:b3:91:3a:38:8d:69:69:
d3:0c:73:44:ad:f2:c4:55:a8:24:8e:3b:0f:81:d2:9f:99:a5:
35:78:9b:73:9c:5e:72:72:88:55:64:08:d6:6f:52:81:6d:a8:
c2:9e:dc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:50:12 2025 by rpki-client