Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/RtshyYI1qgkRK5EsSrIrnhyitiU.roa
File: RtshyYI1qgkRK5EsSrIrnhyitiU.roa (raw, json)
Hash identifier: RoU9sGo4/QeOPogEpHzr46TYNdvfKX3sewN0KQI76KY=
Subject key identifier: 46:DB:21:C9:82:35:AA:09:11:2B:91:2C:4A:B2:2B:9E:1C:A2:B6:25
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0199C8118F42661C101507ACDA0018C8E959
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/RtshyYI1qgkRK5EsSrIrnhyitiU.roa
Signing time: Thu 09 Oct 2025 08:23:37 +0000
ROA not before: Thu 09 Oct 2025 08:23:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45029
IP address blocks: 193.232.132.0/24 maxlen: 24
195.209.18.0/24 maxlen: 24
2001:67c:1210::/48 maxlen: 48
2001:6d0:6d0b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:11:8f:42:66:1c:10:15:07:ac:da:00:18:c8:e9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Oct 9 08:23:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46db21c98235aa09112b912c4ab22b9e1ca2b625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:c5:2c:a0:a8:39:5c:9b:c1:05:e4:18:19:
91:c3:eb:b0:81:5c:f4:0f:45:8c:18:4a:5e:71:25:
fc:e1:5d:f7:e0:cb:63:54:51:59:71:b3:5d:3a:e5:
96:63:34:09:04:c4:8a:71:30:c8:d0:5b:b9:7e:4e:
1e:c0:75:63:65:0b:34:a9:04:9d:88:22:1b:95:e4:
b3:49:b5:22:2b:39:89:a1:fc:28:47:c4:a3:34:6b:
e5:f9:26:39:f8:c7:60:af:8c:4f:eb:ed:0e:33:ff:
65:2e:5e:f2:94:19:7e:4a:e0:7c:e1:bd:f0:31:ea:
0f:98:f6:e1:e4:c9:be:45:bd:93:eb:bc:86:2e:7f:
18:91:c4:53:bc:2e:39:16:1b:19:46:66:50:4c:c5:
2b:ad:a5:80:14:74:96:c9:51:11:c5:53:9d:ff:f8:
06:c3:62:d9:f4:4e:52:a0:83:4a:ff:cc:34:ca:cc:
a3:d0:ed:d7:2f:5c:ea:e8:f2:94:44:67:e4:b4:58:
ec:b6:68:ce:35:04:51:f8:95:96:17:47:b2:54:fa:
57:09:bc:7b:b2:63:70:a5:2d:80:8c:ac:25:38:0a:
c3:4e:bc:8c:32:de:d4:7e:89:89:cd:76:d4:86:7a:
2a:8a:30:78:12:f0:28:e7:5f:27:a0:2b:71:66:3e:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DB:21:C9:82:35:AA:09:11:2B:91:2C:4A:B2:2B:9E:1C:A2:B6:25
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/RtshyYI1qgkRK5EsSrIrnhyitiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.132.0/24
195.209.18.0/24
IPv6:
2001:67c:1210::/48
2001:6d0:6d0b::/48
Signature Algorithm: sha256WithRSAEncryption
59:61:7b:d4:41:06:c4:91:30:b1:56:23:2b:fe:e5:ce:94:c5:
9a:ae:d4:ff:6a:0e:82:a2:02:73:3b:18:6c:ca:b1:56:03:fa:
5b:b7:a6:98:db:3b:06:2b:9d:c7:33:40:48:11:f5:63:d3:f5:
1c:0a:a1:73:65:76:d0:38:32:39:03:e7:c0:52:19:c7:07:5c:
25:2d:69:f3:4c:52:fd:07:f9:ea:26:fb:fc:9e:65:a7:e5:65:
76:a2:67:d9:9a:1b:96:1e:86:7a:4e:09:b9:94:4c:b3:cf:68:
f7:dc:89:a1:c3:81:42:a4:0f:0e:92:c2:cf:87:22:62:71:c4:
07:64:a2:ef:ad:21:5c:7a:11:8e:46:d3:d7:e8:3e:23:b4:68:
ec:11:35:2b:b6:bf:81:76:88:27:db:ad:60:b9:65:5b:ac:40:
80:c9:13:e8:32:8e:49:e8:4a:9d:05:56:1a:e1:59:7f:58:05:
b6:fe:0d:7c:d8:61:6a:0f:15:36:68:a2:2c:29:14:28:24:31:
54:44:1e:88:33:f0:28:49:94:58:a1:7b:dd:db:ec:fc:a2:2d:
da:69:8b:d9:57:21:01:42:71:55:84:aa:8e:80:a8:f8:77:1b:
b7:d1:63:9d:d4:69:27:aa:14:c4:88:32:b8:69:46:07:24:64:
d1:11:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:42 2025 by rpki-client