Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rrWvxVgslF01_enKd9ji3BweY7w.roa
File: rrWvxVgslF01_enKd9ji3BweY7w.roa (raw, json)
Hash identifier: olWzNq+BUqvNaoJ1Ycb+/LMVUlQjWilE58z4SzeXeC8=
Subject key identifier: AE:B5:AF:C5:58:2C:94:5D:35:FD:E9:CA:77:D8:E2:DC:1C:1E:63:BC
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0199C4EBE5CC51F661118D75C760D5EF3C3D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rrWvxVgslF01_enKd9ji3BweY7w.roa
Signing time: Wed 08 Oct 2025 17:43:38 +0000
ROA not before: Wed 08 Oct 2025 17:43:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 85.208.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:eb:e5:cc:51:f6:61:11:8d:75:c7:60:d5:ef:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 8 17:43:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeb5afc5582c945d35fde9ca77d8e2dc1c1e63bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6b:fa:64:52:33:6f:8f:37:18:8c:fe:66:b2:
5a:af:73:5f:da:65:12:c0:09:24:99:92:59:8b:91:
cc:45:af:02:59:69:9f:4a:73:12:f7:d5:08:dc:de:
41:e5:2a:33:ca:6a:0e:0b:db:f7:2a:5c:b8:7a:5c:
9f:ee:09:ad:fb:c1:ec:97:7a:1c:a9:f6:46:1b:b1:
cb:18:b3:e9:95:ca:06:1d:09:1d:7b:26:b9:9f:66:
25:a2:c5:94:55:49:22:6b:a8:6b:40:c8:e8:0c:14:
09:d5:bd:a8:b9:d4:86:cc:1e:57:a7:32:f4:a9:e4:
1c:b0:59:11:84:e0:7e:ce:8f:7f:a0:08:4c:e2:78:
10:18:09:f2:5e:1e:c5:f2:94:c0:13:70:93:94:6d:
0a:b2:55:e7:3b:d4:19:7e:5c:10:b4:7f:ad:d8:0c:
a0:97:bd:b5:97:1f:77:b5:8b:6b:2e:3b:a1:9d:3f:
9b:c2:53:97:6c:83:7b:e7:91:7b:4c:9d:d7:6d:0a:
d2:39:01:b9:3c:c8:ef:f0:e2:21:19:b5:20:06:0d:
72:a1:ca:81:a0:b9:75:f2:a4:40:fd:7e:7f:a7:90:
01:de:ce:61:68:79:0f:11:1a:af:f2:d8:7f:bb:98:
5b:7c:30:25:31:74:c6:9f:53:79:9b:b3:c0:eb:74:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B5:AF:C5:58:2C:94:5D:35:FD:E9:CA:77:D8:E2:DC:1C:1E:63:BC
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rrWvxVgslF01_enKd9ji3BweY7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1e:38:80:38:e2:94:4e:ed:07:5b:12:29:28:57:2d:a7:d9:
95:9b:85:0b:d3:30:cd:3b:06:ee:80:3b:76:d2:5e:53:ae:bb:
33:34:62:d7:d8:f1:12:8a:8c:b7:3a:d7:30:87:96:4a:0f:34:
d0:c3:7e:45:d7:88:bf:97:9d:40:9f:d1:b5:2a:ad:7a:97:f6:
e4:99:14:f9:1f:cf:ba:71:7c:11:94:3e:73:dc:11:d4:42:f3:
63:20:17:bf:7a:46:f8:47:07:ab:09:4f:bb:d4:d5:3a:3e:6e:
63:bd:ee:0d:b7:6f:94:03:b2:9a:58:1f:f4:e6:1b:13:63:ff:
eb:dc:67:d7:85:bb:92:91:7e:e9:ab:e5:e5:a6:8f:d8:fd:ec:
ea:54:01:d0:12:56:98:81:20:c1:4b:3f:d6:bf:bc:bb:54:ef:
77:81:e8:56:91:46:2a:08:fc:4b:68:0a:dc:ce:00:62:8c:bf:
e9:43:c5:74:5a:19:d6:0e:9a:6d:1a:1c:43:19:68:9f:6c:df:
be:ae:a3:f4:a2:28:12:a0:90:d1:30:1e:aa:89:c2:18:6e:d7:
22:3c:58:78:45:2b:d1:b7:d8:38:bb:cb:00:44:cf:bc:62:be:
3d:da:a1:b5:bb:7d:82:03:98:99:87:15:c4:2a:4e:1c:94:0a:
2d:de:3f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:29:04 2025 by rpki-client