Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/f42H65T-l9grBX7f5IvSrRaxzfg.roa
File: f42H65T-l9grBX7f5IvSrRaxzfg.roa (raw, json)
Hash identifier: hk/3gfT1WjUyzltP3ndkjUhSmDdU+kdtLmal6nnRIOc=
Subject key identifier: 7F:8D:87:EB:94:FE:97:D8:2B:05:7E:DF:E4:8B:D2:AD:16:B1:CD:F8
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0199BDE6322682D4353B45F74B6A9EB96526
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/f42H65T-l9grBX7f5IvSrRaxzfg.roa
Signing time: Tue 07 Oct 2025 09:00:03 +0000
ROA not before: Tue 07 Oct 2025 09:00:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44597
IP address blocks: 193.232.134.0/24 maxlen: 24
2001:67c:1440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:e6:32:26:82:d4:35:3b:45:f7:4b:6a:9e:b9:65:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Oct 7 09:00:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f8d87eb94fe97d82b057edfe48bd2ad16b1cdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:cd:cf:4e:ad:3f:dd:6c:04:66:45:64:b8:
60:5f:0b:0c:5b:93:1e:00:bd:96:9e:29:d0:73:46:
12:75:18:47:06:75:e9:cb:e7:34:4c:41:7c:ff:0b:
b4:24:bc:a2:35:16:a0:4f:f2:69:c6:df:10:e0:5c:
98:3e:bf:83:46:7f:5c:2d:a1:e0:77:a0:91:ae:1d:
97:40:ad:6c:21:18:f1:2f:77:38:2a:d3:00:2f:3e:
db:7e:34:5c:02:66:27:64:63:6f:02:48:db:df:36:
54:55:96:8e:4d:da:c1:af:ed:7d:de:23:95:00:f7:
24:75:a8:73:d7:5a:a8:5f:7a:ba:e3:64:d4:5f:24:
8e:d7:bf:e7:8e:38:58:18:b7:4c:35:1d:5e:4c:04:
07:f5:8c:58:d1:09:8f:06:e5:98:4a:67:f6:2d:ca:
7a:33:b5:5a:d0:55:a9:9b:a5:0a:b6:63:bb:2f:a7:
c3:d2:c8:05:98:89:9c:30:a6:fe:bf:7d:d9:d3:ac:
33:73:b2:44:87:05:e2:0d:03:06:b3:f9:71:ff:9f:
20:20:b8:f2:d3:09:e6:e3:36:c6:46:86:59:aa:0a:
c0:b1:a4:5d:30:26:98:0a:19:88:51:7b:a9:66:e7:
71:b2:c3:4d:9c:e3:f1:20:59:36:72:94:01:39:b4:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8D:87:EB:94:FE:97:D8:2B:05:7E:DF:E4:8B:D2:AD:16:B1:CD:F8
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/f42H65T-l9grBX7f5IvSrRaxzfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.134.0/24
IPv6:
2001:67c:1440::/48
Signature Algorithm: sha256WithRSAEncryption
80:5c:bc:39:76:d3:07:12:cf:f9:3e:2a:a0:98:17:b1:6c:7e:
da:bc:be:f4:9d:69:42:75:8c:fe:a7:a8:b0:c2:07:23:02:22:
9b:a5:5d:e7:bb:e7:05:4e:2b:f6:ca:60:33:2b:a4:a9:21:39:
af:db:5b:15:ce:50:56:d5:11:ad:6d:af:cf:83:6c:cf:f8:10:
02:ce:f6:29:2d:47:ff:fe:c7:83:e8:08:62:df:8e:99:aa:6b:
be:eb:57:a7:38:85:79:91:a5:50:02:8b:ff:26:a3:df:c8:95:
e8:9f:8e:ae:48:3a:ad:74:49:5d:00:6f:80:37:04:76:8e:05:
ca:68:fc:f2:91:82:0f:8c:de:bd:61:c6:f9:33:89:9e:ea:f7:
f8:f7:a1:5e:b1:62:b3:b6:d8:e6:c4:b2:69:22:cb:06:9e:77:
57:04:99:71:7f:3f:1f:c5:b2:7e:95:a5:ee:a2:1f:26:67:29:
e0:8f:f4:10:fd:e8:2e:ba:28:49:d2:2e:3b:5e:fa:30:e3:f9:
db:45:b2:42:00:9f:69:fb:db:3e:29:1b:05:7a:e3:79:f0:92:
5e:56:00:e7:94:1d:a2:80:4b:3b:e9:07:78:5b:9c:6b:63:72:
08:d2:09:06:13:10:5e:b0:1d:28:21:a3:b1:b5:7f:91:d1:11:
ea:ea:5c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:11 2025 by rpki-client