Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/1-DSDcmBiDKFb6VquEmhzF8L0wgY.roa
File: 1-DSDcmBiDKFb6VquEmhzF8L0wgY.roa (raw, json)
Hash identifier: kn5/yoEkio+rOL/nvOGnA97NLu9l5J3xtE4XD8pwcyQ=
Subject key identifier: F8:34:83:72:60:62:0C:A1:5B:E9:5A:AE:12:68:73:17:C2:F4:C2:06
Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial: 0199727AF0C6D5587C27400D3698AAEC6E82
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/1-DSDcmBiDKFb6VquEmhzF8L0wgY.roa
Signing time: Mon 22 Sep 2025 17:31:23 +0000
ROA not before: Mon 22 Sep 2025 17:31:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35807
IP address blocks: 87.248.224.0/19 maxlen: 24
88.201.128.0/17 maxlen: 24
93.100.0.0/16 maxlen: 24
94.19.0.0/16 maxlen: 24
185.37.128.0/22 maxlen: 24
185.84.32.0/22 maxlen: 24
185.88.156.0/22 maxlen: 24
185.123.64.0/22 maxlen: 24
188.242.0.0/15 maxlen: 24
2a05:3580::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:72:7a:f0:c6:d5:58:7c:27:40:0d:36:98:aa:ec:6e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Validity
Not Before: Sep 22 17:31:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f834837260620ca15be95aae12687317c2f4c206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:bc:7e:4c:d7:b6:e4:33:a6:f9:08:6d:05:
0b:e6:16:11:4e:a2:b5:4b:e5:3c:84:b4:6d:77:d7:
b5:fd:3d:44:2b:f6:2d:78:7c:e8:ff:82:61:c3:02:
c9:47:6d:5e:3d:cc:2d:e8:95:e3:29:62:dd:d0:00:
d9:71:04:6c:a2:6b:59:c8:ba:3e:28:d5:78:82:ec:
32:d9:16:7e:65:81:54:ae:91:06:aa:54:6c:46:2c:
0a:3e:3b:1d:ad:87:d0:c1:88:f9:ea:cf:97:2b:c7:
de:9e:5e:b0:7d:93:e4:74:16:99:07:7d:4d:99:ab:
e9:5f:69:1f:23:3f:c7:5f:f8:ae:69:cc:8c:de:c1:
63:44:08:be:cf:34:fd:56:cb:f2:25:fd:45:4d:0a:
a0:fe:24:cf:28:f0:ab:05:9a:ed:bf:ee:73:72:56:
37:91:66:30:2c:26:b6:8d:9f:ed:40:03:42:bd:c1:
79:2f:e3:39:99:1b:16:1c:b1:80:72:3e:fa:a2:d8:
cc:73:68:d9:da:33:f6:c8:8d:81:9a:6f:c3:e2:3b:
9e:4b:69:58:2c:6a:66:81:1a:c6:9f:b6:3a:98:c5:
c8:dc:43:8e:c9:91:07:0b:06:29:5a:3a:76:43:59:
9b:c5:f7:a0:c2:c5:66:1d:47:5b:cf:4b:38:11:66:
07:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:34:83:72:60:62:0C:A1:5B:E9:5A:AE:12:68:73:17:C2:F4:C2:06
X509v3 Authority Key Identifier:
keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/1-DSDcmBiDKFb6VquEmhzF8L0wgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.224.0/19
88.201.128.0/17
93.100.0.0/16
94.19.0.0/16
185.37.128.0/22
185.84.32.0/22
185.88.156.0/22
185.123.64.0/22
188.242.0.0/15
IPv6:
2a05:3580::/29
Signature Algorithm: sha256WithRSAEncryption
3f:0c:75:d8:57:61:1d:df:2f:08:34:14:1c:df:21:ab:10:20:
68:e4:9a:45:f2:7c:3b:82:6e:ee:67:83:06:b2:a3:dc:82:71:
4f:4e:d4:dc:0c:e4:f3:d5:01:15:ad:b5:a6:a5:3c:c8:75:51:
c4:c6:49:49:d5:ae:75:72:36:61:b2:c5:2a:70:89:1f:da:5d:
1c:3e:34:be:b2:62:1e:44:ce:23:84:16:7c:c9:11:5a:66:f1:
d7:28:a7:bd:d5:ae:af:48:cb:c2:b2:d5:0e:53:27:85:5d:19:
9e:8a:d2:9f:c2:cf:9f:46:92:b0:ef:b3:26:e3:b1:2e:39:43:
d7:1a:0f:be:8a:66:de:10:10:85:d9:ce:69:f4:7b:9d:17:3d:
8a:8f:ca:8b:c0:07:d5:4f:83:1e:44:07:17:2d:c7:0b:8c:ef:
24:b5:2a:06:dc:3e:71:f2:ae:d3:86:09:ea:ec:52:76:37:0c:
f1:dd:84:1a:63:8e:16:5f:ac:b9:51:7f:fe:a9:08:67:30:8c:
f0:64:a2:82:06:d2:69:dd:28:ef:a2:04:2f:87:30:30:48:52:
16:df:62:f5:8c:7b:2b:a5:98:23:19:da:13:d7:2f:d7:83:34:
c4:eb:1f:03:8e:24:76:60:30:9e:6e:9d:26:b3:0d:0e:b5:54:
c7:1b:c0:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:00 2025 by rpki-client