Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/T_e8rESGCEo93LhSN21hTfmrTUk.roa
File: T_e8rESGCEo93LhSN21hTfmrTUk.roa (raw, json)
Hash identifier: atiJpHuf3SkNFx9qJY7AqgXkIGShTie6KIKrkLdR6O0=
Subject key identifier: 4F:F7:BC:AC:44:86:08:4A:3D:DC:B8:52:37:6D:61:4D:F9:AB:4D:49
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 01995E713D441A1F120621F601E62879CCAF
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/T_e8rESGCEo93LhSN21hTfmrTUk.roa
Signing time: Thu 18 Sep 2025 20:08:23 +0000
ROA not before: Thu 18 Sep 2025 20:08:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204999
IP address blocks: 185.81.40.0/22 maxlen: 22
185.238.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5e:71:3d:44:1a:1f:12:06:21:f6:01:e6:28:79:cc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Sep 18 20:08:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ff7bcac4486084a3ddcb852376d614df9ab4d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:47:bd:a6:ab:59:d5:45:0e:fe:a2:98:c6:
65:cf:59:69:ca:ae:e9:69:27:90:f9:31:9f:87:0c:
06:58:da:32:72:de:fc:21:db:ce:5e:b6:da:92:42:
a0:be:e9:37:83:82:66:69:29:d5:72:be:51:25:45:
2b:bd:00:cf:4c:a3:01:c9:4e:1a:98:58:ae:7e:2b:
bd:fb:65:60:a9:6c:b7:b6:10:ac:b8:77:f5:3d:33:
81:8a:b9:c2:7c:3f:e8:f0:50:f5:8d:85:30:4b:0f:
84:bf:8e:98:65:13:77:13:bc:ec:cd:fe:4c:9c:4d:
f2:25:35:ad:12:29:d6:e1:6e:dd:50:a3:4b:31:82:
19:fb:1a:0e:12:5a:f8:cd:83:de:03:8c:59:41:6e:
f2:4a:4d:96:2e:74:78:c2:bb:24:7c:6b:d7:36:e6:
de:0a:e8:08:c0:d7:e9:80:87:ed:0c:9d:e7:1b:b9:
3c:60:19:ea:91:67:24:cf:4d:a3:74:fe:d0:aa:ff:
73:c2:79:2d:09:2f:55:f9:85:84:a2:ff:cf:00:dd:
a6:7c:d9:c0:02:fc:64:92:a2:5e:f5:00:4c:13:15:
34:4f:95:31:b4:fe:0e:d9:bd:59:ae:a6:7b:d6:35:
23:40:79:61:91:ac:e9:40:3d:9b:5d:01:3b:d3:d7:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:BC:AC:44:86:08:4A:3D:DC:B8:52:37:6D:61:4D:F9:AB:4D:49
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/T_e8rESGCEo93LhSN21hTfmrTUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.40.0/22
185.238.92.0/22
Signature Algorithm: sha256WithRSAEncryption
52:cf:e2:f5:9f:93:f3:4b:91:bf:b5:3b:38:eb:67:31:4a:55:
33:17:97:fd:12:93:ae:0c:68:6e:65:b2:76:de:01:e4:0f:1f:
65:a4:68:0d:40:e4:09:36:ff:82:83:3c:56:d8:6f:0a:dd:3c:
11:ae:bd:7f:e0:7e:7a:d6:4d:21:e9:dd:da:2f:0d:ef:78:42:
d4:c3:4c:1d:9e:9c:2c:e3:97:ea:a8:1b:e7:12:24:3c:84:83:
da:99:b5:90:79:e9:9a:83:7d:e1:63:b7:00:a9:47:ab:9c:ee:
94:f0:c3:1c:45:3e:82:c8:db:a1:47:f8:04:aa:43:2c:33:81:
06:c2:0f:46:ae:aa:2b:6d:a1:e0:65:fa:60:95:ff:4c:2e:9c:
4a:e7:7e:b6:2f:ed:88:11:99:19:30:91:25:15:b7:bb:29:d6:
15:26:d7:a1:47:52:aa:10:c8:29:01:0a:ac:99:eb:d1:47:36:
76:7e:5f:55:20:40:7d:df:65:8d:2d:a8:fb:e9:2c:b4:4b:10:
a8:e9:a9:cd:a9:2d:98:f3:bf:1d:a8:59:94:1a:48:60:77:b4:
3b:03:c0:8d:89:59:0e:19:70:11:5b:39:83:76:b5:6a:fe:2a:
75:85:5c:de:1d:bd:f1:40:fb:44:61:fb:91:bd:3a:53:bf:0d:
cc:ee:60:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:28:46 2025 by rpki-client