Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/iBqZQWjVBdiULjEjYkpA4wqz2gQ.roa
File: iBqZQWjVBdiULjEjYkpA4wqz2gQ.roa (raw, json)
Hash identifier: 5JOBo54X9w8ocNdk7qTuaglinouKKSJrSomDV8exe9o=
Subject key identifier: 88:1A:99:41:68:D5:05:D8:94:2E:31:23:62:4A:40:E3:0A:B3:DA:04
Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial: 0199CE05E9CBDA6C3CC16FD08B59E1FA6DFA
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/iBqZQWjVBdiULjEjYkpA4wqz2gQ.roa
Signing time: Fri 10 Oct 2025 12:08:38 +0000
ROA not before: Fri 10 Oct 2025 12:08:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 185.75.153.0/24 maxlen: 24
193.104.116.0/24 maxlen: 24
2a03:4ae0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:05:e9:cb:da:6c:3c:c1:6f:d0:8b:59:e1:fa:6d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Validity
Not Before: Oct 10 12:08:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=881a994168d505d8942e3123624a40e30ab3da04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:5e:d1:56:bc:5c:a4:e1:36:b0:1a:74:f1:
15:a8:e0:8f:21:39:14:5a:38:e0:e8:cc:3c:7b:27:
a4:2e:ed:9f:3f:78:64:f8:64:ea:be:19:0b:24:db:
14:91:90:d1:8c:e9:07:7a:a9:89:56:d9:0e:74:7d:
9d:6a:0b:04:0a:27:2d:2a:0c:3f:93:a0:eb:72:6b:
56:bb:4a:19:a3:1f:cd:d2:cd:07:52:c9:93:f7:47:
f4:94:73:2f:28:63:03:c1:d9:88:9f:f6:d9:a3:1b:
f8:f6:85:15:0d:35:2d:0e:ed:93:fc:28:1f:68:66:
a8:1d:bf:e1:5e:47:16:b1:7d:7c:c7:c6:98:20:35:
2b:fa:1c:06:1f:47:41:5c:a8:89:8b:04:ed:6d:a9:
5c:4c:c2:11:19:43:3a:e4:d7:b3:34:18:1b:bf:62:
58:75:b6:dc:7c:8b:2f:40:92:4d:41:7a:ba:9a:4e:
24:8d:13:1b:20:39:01:ba:6a:75:bb:76:cc:37:5e:
99:56:6f:ce:6d:fc:e4:c4:36:01:cd:71:8c:08:ca:
ac:51:76:10:d6:a0:d1:f6:64:3d:1d:bd:ff:ed:59:
a2:ca:ab:41:ca:99:14:78:6f:e4:a2:f4:f0:83:9b:
2f:5f:2d:97:ad:67:da:47:1e:68:1a:fb:ad:ce:50:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1A:99:41:68:D5:05:D8:94:2E:31:23:62:4A:40:E3:0A:B3:DA:04
X509v3 Authority Key Identifier:
keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/iBqZQWjVBdiULjEjYkpA4wqz2gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.153.0/24
193.104.116.0/24
IPv6:
2a03:4ae0::/32
Signature Algorithm: sha256WithRSAEncryption
c9:1f:64:d9:fe:d8:fe:ce:ce:5a:65:3f:af:c0:e3:c2:34:7c:
71:4b:be:52:90:ba:e1:e6:05:fb:2c:e0:6f:90:1f:64:ac:ad:
89:ea:6b:ba:5e:ac:49:c4:c1:62:6f:e8:fa:00:db:f3:89:61:
d2:9e:d2:83:b4:5f:c2:5a:c6:55:31:72:38:2d:3d:4a:57:78:
56:79:df:72:c3:1b:09:2e:41:41:0a:86:f2:d7:64:c3:27:e2:
c2:a1:df:8e:6f:0d:30:54:77:e1:b6:8d:12:ac:4f:e1:dc:a1:
e2:ca:ee:10:18:73:09:a9:55:8e:bd:ea:4a:60:99:b2:95:2c:
66:87:af:c8:2a:14:6d:81:97:3b:90:ea:3d:0e:36:a9:d6:dd:
59:c7:3a:d6:4d:c9:7a:bb:97:e9:60:e0:a1:4a:ef:74:57:1b:
ab:ca:e9:47:0b:ff:2d:ea:a9:00:7a:d5:ac:6a:9a:61:a8:86:
a5:bd:28:38:a3:17:64:2e:88:93:46:87:2b:45:06:a5:e2:d9:
48:97:cc:a9:a0:be:ed:6c:2f:7f:b8:3a:cf:43:d5:24:20:61:
4a:c1:1f:7c:cc:d6:b3:94:f3:18:93:e5:fe:8c:9d:bc:7a:3f:
e0:9f:be:6a:1f:cc:51:74:35:7e:51:e3:8a:98:67:b1:6a:3c:
75:d4:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:01 2025 by rpki-client