Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Ii41Txi_7GFNI0Kcxu6kGvtfzdE.roa
File: Ii41Txi_7GFNI0Kcxu6kGvtfzdE.roa (raw, json)
Hash identifier: x/WuG0sK0CWn2BgxfMMGU26l+M8IN0O1rggSid2NqNs=
Subject key identifier: 22:2E:35:4F:18:BF:EC:61:4D:23:42:9C:C6:EE:A4:1A:FB:5F:CD:D1
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 0199CE26E0D2946B989C0327FA26B25DAAAA
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Ii41Txi_7GFNI0Kcxu6kGvtfzdE.roa
Signing time: Fri 10 Oct 2025 12:44:38 +0000
ROA not before: Fri 10 Oct 2025 12:44:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397630
IP address blocks: 185.233.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:26:e0:d2:94:6b:98:9c:03:27:fa:26:b2:5d:aa:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Oct 10 12:44:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=222e354f18bfec614d23429cc6eea41afb5fcdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ff:49:d3:4d:4b:3d:52:d8:cf:91:c1:c2:8b:
51:3a:1a:16:98:bd:9e:b4:21:02:35:01:de:1b:17:
b5:43:cc:a1:dc:f6:2b:48:29:de:0e:de:b3:bc:17:
6e:54:77:95:2a:3f:23:37:0f:b3:96:6f:6b:53:26:
50:75:94:47:26:61:7d:ab:a3:ac:2a:71:2d:23:0e:
d1:e7:9f:c6:c7:cc:c8:fb:54:55:f1:69:53:11:7e:
1f:4e:8c:0a:f0:e7:9c:8e:3d:3f:20:b7:a3:d8:d9:
ac:3a:c3:74:fc:05:d1:62:42:55:2b:b7:3c:e9:94:
b0:16:9a:1c:ed:03:3c:2b:50:c1:05:1b:cc:af:d2:
f0:80:d3:0f:c7:18:c8:05:a7:0c:b7:16:50:7c:cf:
11:82:8b:7b:0c:bb:27:1a:53:99:20:97:c3:05:99:
0f:cd:7b:a3:11:da:50:a8:71:bb:10:d1:da:81:79:
b6:28:52:22:f9:19:8e:03:17:b5:62:3c:d4:a1:3d:
4d:63:80:a2:80:5c:c9:2b:8f:f7:7e:86:c1:ea:52:
b1:62:6c:a0:8b:9f:1c:8b:b8:89:eb:d9:a1:c8:c4:
eb:5f:fd:ba:06:af:1c:14:9f:ea:20:bc:1f:f2:71:
c3:57:42:f9:e3:11:3a:be:45:ab:cf:3c:21:52:84:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2E:35:4F:18:BF:EC:61:4D:23:42:9C:C6:EE:A4:1A:FB:5F:CD:D1
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Ii41Txi_7GFNI0Kcxu6kGvtfzdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.165.0/24
Signature Algorithm: sha256WithRSAEncryption
59:23:09:88:cb:18:24:0a:91:a2:ce:59:95:61:f7:4d:b1:b7:
33:ff:57:36:9a:28:42:b5:85:a4:29:41:b9:5d:df:f2:24:28:
14:b9:26:b9:f8:06:39:20:64:e6:bd:b5:32:81:b0:eb:88:6c:
b9:d0:b4:03:4b:4e:af:d3:7b:20:8f:d2:27:0e:74:70:f1:fc:
36:68:6a:fe:cd:ba:87:4f:ae:ab:db:0d:d6:0a:f8:8d:09:88:
3a:c4:ec:b8:4b:1b:8e:e3:30:db:69:bf:50:1e:64:05:aa:bb:
d9:ec:36:60:9a:8a:ff:79:6c:e4:88:10:ba:5e:ee:39:90:70:
c6:0c:4a:00:a8:78:ef:6d:07:f5:09:e7:45:fd:e5:a6:83:b7:
52:cc:f0:ab:f8:00:52:10:cf:76:5e:44:db:e9:03:9f:e6:54:
18:ed:e6:f2:4f:ca:72:d0:ee:29:ec:03:5b:14:b7:6e:c5:28:
95:f5:19:cc:01:23:de:86:70:6b:2a:24:05:ea:55:71:df:20:
a5:4a:73:44:c3:2c:bb:30:aa:40:ac:9a:09:9d:51:77:5d:d7:
cc:d4:b1:a1:a4:df:05:2f:6a:16:28:80:12:b1:47:18:19:3b:
da:d3:ae:9e:f0:17:7e:73:f2:5c:49:31:ca:08:db:46:68:e3:
64:4a:94:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:28:14 2025 by rpki-client