Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/V7CEZgNPEwBOCZ32WoYA0V3PrJU.roa
File: V7CEZgNPEwBOCZ32WoYA0V3PrJU.roa (raw, json)
Hash identifier: G4BvHWHZE9u8RSsaaH1AIK81oXqs5R5aGYeyG38uyOM=
Subject key identifier: 57:B0:84:66:03:4F:13:00:4E:09:9D:F6:5A:86:00:D1:5D:CF:AC:95
Certificate issuer: /CN=86d963844f8205d1369434531c998600c15781a1
Certificate serial: 0199F26AA3998CE6CC4B509795111C1416E7
Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/V7CEZgNPEwBOCZ32WoYA0V3PrJU.roa
Signing time: Fri 17 Oct 2025 13:44:58 +0000
ROA not before: Fri 17 Oct 2025 13:44:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 188.92.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:6a:a3:99:8c:e6:cc:4b:50:97:95:11:1c:14:16:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d963844f8205d1369434531c998600c15781a1
Validity
Not Before: Oct 17 13:44:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57b08466034f13004e099df65a8600d15dcfac95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:2d:e2:20:dc:cc:c7:86:cc:a5:9d:57:dc:
70:60:e6:db:89:fc:22:3d:90:c6:49:0c:0e:f8:20:
61:33:aa:88:86:51:08:3c:9f:e8:c9:cc:91:c1:c7:
68:2b:fc:90:73:58:11:f1:0f:e4:da:d2:c2:bf:50:
3b:64:df:e1:b6:81:13:1c:52:d0:f7:95:4f:aa:7a:
71:88:2c:20:4b:0c:82:a4:28:e1:50:8d:ec:34:46:
f3:28:dc:da:95:6c:ab:35:c2:16:76:fc:a6:c8:69:
ee:b1:4b:a2:93:8e:24:89:f5:37:c6:ea:90:40:f5:
65:70:59:b3:cb:6d:93:97:ad:3b:a5:d7:29:bd:94:
cc:52:79:13:97:64:9d:a9:90:06:4b:45:71:9a:b3:
6f:25:79:7b:50:0d:d5:96:80:1c:9d:7d:57:b3:05:
75:2a:c4:d3:37:47:c7:30:b5:c2:d3:67:64:e7:af:
be:fd:26:51:04:06:54:7c:e3:e0:7d:a6:41:e2:14:
1b:3c:e7:89:ee:91:de:6e:ed:d9:ad:53:4a:b2:80:
7d:9e:c9:45:88:fc:9b:ee:65:9f:46:ba:3f:a7:53:
6f:15:49:e7:94:d7:f6:b8:ee:55:42:21:03:05:3d:
35:ab:fb:f5:57:ba:cc:57:28:78:99:3e:7f:4b:d4:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:84:66:03:4F:13:00:4E:09:9D:F6:5A:86:00:D1:5D:CF:AC:95
X509v3 Authority Key Identifier:
keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/V7CEZgNPEwBOCZ32WoYA0V3PrJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.5.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7a:30:a2:82:e0:07:07:e5:50:e9:0d:d3:8d:4c:3c:d3:94:
bf:d6:9a:8c:a0:10:d3:9c:b4:c0:65:73:f7:e5:2a:0d:b9:54:
09:08:f6:72:d9:a3:e3:24:2e:32:cb:e7:94:4f:59:68:48:f2:
ce:a7:1f:b9:4d:c7:27:d7:46:f4:4e:c3:24:d5:6f:29:14:c3:
4e:aa:5f:ee:df:1a:3e:79:7e:1c:53:5c:a3:48:8d:e6:42:37:
c0:44:56:db:94:b6:85:1b:dc:04:d1:71:e7:0f:91:85:7b:37:
43:60:89:c8:c8:47:2b:f4:bc:bb:e8:d2:20:80:ff:9b:59:d4:
f6:0e:d5:8f:6f:a3:b0:fc:b9:19:70:cb:54:7c:ac:96:71:b0:
35:df:c3:76:c4:8e:d8:ee:11:9d:47:58:93:1f:3a:79:72:53:
06:f4:c8:b1:b4:50:6f:4a:68:d5:13:53:db:87:9e:3f:ab:aa:
1c:2a:0d:0b:30:14:56:3c:98:36:0e:70:48:a2:aa:3c:0b:b9:
08:b2:8d:5b:df:6b:03:95:43:03:aa:f6:f0:17:e5:85:b2:15:
45:9d:af:0f:1c:df:92:49:1e:e2:80:0e:b0:1a:f7:b6:0d:8c:
1b:b7:b1:41:ca:73:ef:3b:d9:65:1b:6c:4f:5a:62:66:f6:5d:
d0:41:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:35:57 2025 by rpki-client