
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ldsSV8XkUxgRsN1Mt_5-mRILoaY.roa
File: ldsSV8XkUxgRsN1Mt_5-mRILoaY.roa (raw, json)
Hash identifier: 2KvQ5LUfWObgEEs4hfrZe98s+DulmLTkOugxEUCQvZg=
Subject key identifier: 95:DB:12:57:C5:E4:53:18:11:B0:DD:4C:B7:FE:7E:99:12:0B:A1:A6
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0199C37A0765CD2A8D48C7B4181FFA38B4E0
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ldsSV8XkUxgRsN1Mt_5-mRILoaY.roa
Signing time: Wed 08 Oct 2025 10:59:38 +0000
ROA not before: Wed 08 Oct 2025 10:59:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214504
IP address blocks: 213.182.212.0/24 maxlen: 24
213.182.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:7a:07:65:cd:2a:8d:48:c7:b4:18:1f:fa:38:b4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Oct 8 10:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95db1257c5e4531811b0dd4cb7fe7e99120ba1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:2b:1f:07:ed:77:40:75:8d:d4:97:80:69:
ca:9f:ed:34:f1:22:de:70:e6:68:a9:f7:86:0c:ff:
33:50:e0:4a:b8:fe:25:59:a0:da:66:21:a5:db:64:
1e:99:eb:cc:a2:e2:2b:f1:6d:41:a3:95:a6:db:2b:
0c:7c:cd:c2:0c:aa:89:f2:1f:35:cd:d2:65:e5:4a:
9a:1f:8e:85:cf:33:69:89:4b:b2:e9:c9:74:e7:cc:
68:55:06:83:a5:3c:b8:f2:9d:f7:6d:91:b1:7b:37:
31:50:b3:b2:f4:36:d4:cb:7b:c7:1f:42:c3:06:e1:
8e:a6:38:2c:27:71:4a:0c:70:9d:e9:d8:70:0e:42:
d8:fb:3e:81:84:e2:44:0c:83:a1:ec:c7:60:f1:8e:
39:57:87:bf:a3:76:1e:2f:7a:4d:08:2e:1c:31:20:
de:a0:cf:90:a6:e7:04:80:0f:a3:d4:18:17:9a:28:
0b:c9:40:09:a7:33:94:eb:ca:fa:0f:11:97:23:ee:
b6:e4:e7:25:a6:29:9f:6f:7c:7d:f5:4c:a2:5b:71:
95:9c:9f:13:4b:23:3a:0e:0b:23:4d:e2:14:d6:3d:
5c:ea:c5:2c:17:77:c3:51:7e:60:46:fa:af:ad:19:
6a:49:fb:83:e3:e8:7b:65:e6:00:1c:9c:c6:c1:47:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DB:12:57:C5:E4:53:18:11:B0:DD:4C:B7:FE:7E:99:12:0B:A1:A6
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ldsSV8XkUxgRsN1Mt_5-mRILoaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.212.0/23
Signature Algorithm: sha256WithRSAEncryption
62:c8:c8:e1:38:e5:9c:0f:be:39:da:78:79:e4:c8:f2:cd:a1:
1e:cc:6f:d9:f5:b1:91:9d:19:28:e4:46:63:c2:91:0f:03:fe:
3a:c5:ef:60:53:4e:3d:3e:d5:50:58:cb:5e:7a:80:e5:bb:8a:
f5:55:3c:e3:88:a9:f1:ed:c5:70:9d:c8:c8:10:a5:b9:7e:55:
ff:c2:6c:7a:e5:22:0d:24:dd:95:49:b5:e8:e8:ed:ae:7b:d9:
15:11:66:9c:5a:4f:80:d1:40:c9:63:68:89:96:59:67:f2:08:
63:58:c1:71:2d:d4:1a:be:fe:e6:c8:38:d4:d2:54:53:3e:05:
cd:fd:78:16:49:af:d6:f0:7a:a8:06:f4:5f:3c:8a:aa:87:2e:
6f:a5:4d:ce:dc:21:7f:ab:db:ca:57:a0:82:06:3f:df:10:b2:
33:03:d7:6f:3c:63:41:dd:67:14:2f:20:1b:82:68:e5:da:2f:
28:89:9b:a3:c3:d1:a9:b2:9f:d8:34:11:bb:bc:b6:fd:c2:b7:
27:0f:ef:91:44:be:e4:12:86:9a:a6:98:12:39:cd:0a:ce:a0:
1b:02:d0:f0:05:49:ea:55:cd:08:96:65:a8:8f:a8:bc:65:a2:
74:09:c4:f6:a0:f6:99:70:28:cb:b2:cd:ea:f4:39:e1:0a:19:
d2:30:2c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:33 2025 by rpki-client