Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/qLD6Xk1kNZ5LOm_NPA9SKOZrDEo.roa
File: qLD6Xk1kNZ5LOm_NPA9SKOZrDEo.roa (raw, json)
Hash identifier: 2EMpyRudbmzblcQQ/7M2y7TOTZvbf6HTjZbDCcTPW3M=
Subject key identifier: A8:B0:FA:5E:4D:64:35:9E:4B:3A:6F:CD:3C:0F:52:28:E6:6B:0C:4A
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 0199AE2C93612E3D715C62D6B22DB3505F39
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/qLD6Xk1kNZ5LOm_NPA9SKOZrDEo.roa
Signing time: Sat 04 Oct 2025 07:43:00 +0000
ROA not before: Sat 04 Oct 2025 07:43:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133495
IP address blocks: 185.167.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ae:2c:93:61:2e:3d:71:5c:62:d6:b2:2d:b3:50:5f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Oct 4 07:43:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8b0fa5e4d64359e4b3a6fcd3c0f5228e66b0c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:1f:30:8b:eb:09:12:a2:54:9d:47:49:1e:
ee:2b:93:42:93:6b:c0:92:a2:4c:63:0a:6a:e2:2a:
9c:39:0f:94:e7:ae:f0:9c:fb:e4:d3:61:05:1e:93:
46:a0:c6:c6:77:c4:a8:87:92:4c:ef:4e:9c:6e:05:
da:72:74:37:48:01:05:81:fb:65:b4:88:84:bb:2c:
be:72:c1:03:06:e7:31:c2:72:42:21:2e:2e:91:e9:
b4:c6:7d:c7:7e:7f:11:8d:d8:9b:3d:04:6c:a3:fd:
ee:ed:c4:32:bd:8e:c1:bb:f6:7d:d7:dc:2e:11:d5:
51:6b:96:d6:d6:5f:c0:eb:0b:1e:5c:19:54:a5:1a:
3c:49:54:68:82:ca:4f:bf:30:62:ea:3e:42:52:bf:
61:94:2f:7a:b6:5f:59:2f:64:35:9e:ff:53:1e:22:
7d:94:fa:6d:9b:8d:83:1c:5a:95:c5:5c:cc:84:a0:
aa:36:ab:9d:64:63:6b:3c:23:f5:20:d3:c9:cb:fc:
eb:f0:c9:db:0b:c7:5c:66:30:86:0e:5c:e5:fb:c2:
a2:56:b8:68:40:ad:0f:5e:b3:85:1d:57:a3:2d:40:
57:a7:02:18:e7:bc:cf:c2:c6:49:e9:5a:a1:0e:f5:
10:98:f1:eb:3d:da:db:ad:92:f8:8b:0f:cf:59:80:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B0:FA:5E:4D:64:35:9E:4B:3A:6F:CD:3C:0F:52:28:E6:6B:0C:4A
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/qLD6Xk1kNZ5LOm_NPA9SKOZrDEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e9:5a:5c:14:a1:35:09:ec:98:9e:06:69:b3:dd:00:7f:a7:
aa:7f:da:d6:47:23:16:c1:7e:83:ae:2b:52:47:68:54:2c:34:
f9:16:0e:57:a0:6c:50:d1:34:e0:bb:5e:f5:98:9d:c4:22:33:
d7:7d:cd:67:5f:1d:9e:5e:01:a7:ce:cc:53:39:cf:bf:86:6e:
12:3c:45:c8:aa:93:05:b7:b9:63:b0:6e:8d:1c:48:b6:98:4b:
16:34:31:f7:2e:00:92:5a:dd:19:f7:9a:73:83:f6:ed:d2:66:
3d:07:5d:d0:f6:4c:db:95:eb:c3:58:aa:be:a4:64:2b:0e:86:
cd:8e:84:78:98:c6:41:0b:86:7b:ce:1f:1b:fb:e6:ae:8f:58:
ad:d8:b4:cf:81:6c:df:a2:96:ca:00:a1:6b:06:e8:ca:d1:25:
90:57:8e:78:ae:aa:e0:b8:6a:3c:ee:d9:2b:d9:10:ed:11:6e:
1b:b2:f5:44:8f:53:70:cc:95:ca:c8:b0:37:5c:0d:ec:99:18:
61:6d:95:44:5d:4c:95:fd:34:ea:f8:a6:47:01:f3:e8:54:f8:
d4:32:75:4a:88:c5:6e:3d:23:ea:b1:0f:8a:56:8d:22:91:cd:
5d:5a:e0:a4:a8:8c:5e:0c:c6:a6:37:74:38:a0:75:d6:f7:f2:
a0:9f:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:28 2025 by rpki-client