Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Qy7K6YlEXoWz_DEUfIKMyBTBNlU.roa
File: Qy7K6YlEXoWz_DEUfIKMyBTBNlU.roa (raw, json)
Hash identifier: BiI3Hw0s3Eb8jtlW42ZypfCSnA6AV3EPjUzmEgjLSFw=
Subject key identifier: 43:2E:CA:E9:89:44:5E:85:B3:FC:31:14:7C:82:8C:C8:14:C1:36:55
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0199E434EFFDFF5F26B7D438615C06F0D4B4
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Qy7K6YlEXoWz_DEUfIKMyBTBNlU.roa
Signing time: Tue 14 Oct 2025 19:31:38 +0000
ROA not before: Tue 14 Oct 2025 19:31:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212883
IP address blocks: 213.109.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:34:ef:fd:ff:5f:26:b7:d4:38:61:5c:06:f0:d4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 14 19:31:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=432ecae989445e85b3fc31147c828cc814c13655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e8:d1:e9:2d:54:38:59:28:ac:03:98:7b:df:
e2:15:58:f3:d3:ec:20:4b:f1:04:23:aa:4a:61:84:
1f:2f:99:ad:2c:fc:80:af:0a:cf:b4:ae:d3:2f:04:
b8:65:82:b7:5a:0c:9b:cb:d6:e0:92:df:1c:f4:0f:
7f:2f:6b:b8:4e:5d:b0:3d:2b:8e:a1:3c:d8:83:7e:
68:3c:70:c9:0b:ed:fa:7e:40:f4:dd:0a:e0:82:4b:
85:ab:11:97:97:f4:05:4c:3b:3b:6a:54:9b:7a:d7:
4b:94:40:93:39:76:29:26:b3:9b:35:8d:06:33:f5:
83:e4:00:f4:84:ea:89:53:46:cc:0f:64:49:3e:19:
e4:b1:fa:29:d2:35:6a:98:69:db:73:19:90:12:c1:
01:a1:52:35:17:2e:2d:97:ac:1a:16:f0:9c:a4:31:
6f:13:03:0c:e6:09:5b:6a:e7:e9:36:51:59:ec:b8:
54:c0:1a:02:b3:f7:f2:aa:b6:3e:11:ad:25:01:2d:
74:9e:70:20:a6:a3:f9:11:c9:86:c1:24:16:79:9e:
05:2e:86:30:26:f7:96:a7:f7:75:d3:1b:d1:07:fe:
2c:42:c9:72:6e:1f:f4:55:1c:2b:bb:44:00:eb:ca:
f3:93:a5:3e:3c:4e:0b:82:e5:7f:61:ed:96:d1:52:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2E:CA:E9:89:44:5E:85:B3:FC:31:14:7C:82:8C:C8:14:C1:36:55
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Qy7K6YlEXoWz_DEUfIKMyBTBNlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.96.0/24
Signature Algorithm: sha256WithRSAEncryption
26:32:d5:15:fc:23:0c:d7:e4:e4:73:a0:d1:63:6e:fa:3b:ad:
dc:33:5b:23:bc:8b:ee:63:49:99:9a:6c:b2:b1:66:6b:a8:ef:
a7:9d:e0:9c:38:7f:49:25:85:aa:25:ec:00:e9:9f:da:2a:a5:
ea:91:88:9d:14:67:b6:a1:7d:8c:70:24:5f:7e:92:ce:03:75:
bc:28:1a:ab:bf:02:1e:e0:5a:73:77:db:13:67:8d:ff:99:81:
df:a6:94:63:2b:bf:5f:05:cd:f0:4b:cb:23:66:02:a2:d7:5e:
8d:f9:0a:84:ec:a2:50:ef:c7:e9:cb:93:20:87:c7:86:94:4d:
48:67:3f:a6:37:25:44:14:39:f1:3e:96:7e:d3:7f:29:c0:ba:
78:95:d6:88:06:77:b4:71:51:f9:06:b2:a5:4b:07:0c:85:9f:
a4:1f:b7:30:ab:8f:73:43:a8:69:6f:7f:51:a0:02:ba:92:c3:
8f:8a:c1:31:95:1c:03:e7:63:5e:be:69:bf:1f:4b:52:d9:81:
9d:0d:76:06:40:6e:59:aa:8a:36:f3:10:32:9d:ab:65:29:cf:
37:76:5c:f0:55:32:06:ac:9e:4f:cc:b0:e3:31:47:39:c0:82:
8b:65:85:ab:49:e4:88:97:e6:b8:4c:42:16:3a:4b:de:4f:47:
db:11:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:58:40 2025 by rpki-client