Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/oDuw2DDcdYNfwB-slpkarJXHpUQ.roa
File: oDuw2DDcdYNfwB-slpkarJXHpUQ.roa (raw, json)
Hash identifier: dmigaqahAE6/J0ZAYdbOCE6BMWqVzBBMjgfIYhF8FIg=
Subject key identifier: A0:3B:B0:D8:30:DC:75:83:5F:C0:1F:AC:96:99:1A:AC:95:C7:A5:44
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0199EDD5D9A32B36D0977CA9D5612064691A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/oDuw2DDcdYNfwB-slpkarJXHpUQ.roa
Signing time: Thu 16 Oct 2025 16:23:59 +0000
ROA not before: Thu 16 Oct 2025 16:23:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 996
IP address blocks: 94.103.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:d5:d9:a3:2b:36:d0:97:7c:a9:d5:61:20:64:69:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 16 16:23:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a03bb0d830dc75835fc01fac96991aac95c7a544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:7a:42:b2:9f:d4:83:43:58:31:23:49:75:e2:
83:e3:05:e6:6f:2e:ff:5c:88:2f:32:25:17:49:d2:
d8:e8:47:73:ed:14:e0:6f:0a:ac:9c:45:2f:82:7c:
85:fe:85:fa:aa:46:4b:73:9c:27:ac:77:99:ab:3f:
3f:00:4d:24:d7:54:b1:56:4f:37:21:d9:4a:d1:35:
17:3a:84:0c:d8:9d:3b:ae:7d:29:7e:c8:ac:69:6e:
54:dd:89:2a:a2:88:62:bb:07:32:37:b1:91:b7:61:
b3:28:0e:a8:37:f4:cb:23:22:22:4f:45:6b:07:fb:
98:df:30:d3:69:c4:16:fb:27:2b:a9:47:bd:b0:88:
5c:da:0b:83:31:fc:5a:5c:c4:2a:ee:5f:27:07:34:
83:77:30:a6:54:d9:f8:f6:17:7e:04:c3:c4:9b:1b:
d5:1a:63:a5:d3:79:64:0a:43:ee:13:e2:01:2e:49:
d2:9b:af:78:b4:20:c1:6f:6d:18:00:15:3e:c6:31:
61:83:50:f7:00:a7:8d:38:33:32:91:5b:d3:ec:ce:
25:15:c8:c5:9d:61:24:09:e7:11:96:74:3c:ee:9a:
0f:40:ab:49:98:01:27:f6:00:24:da:0c:8f:05:ce:
76:08:f9:46:a5:08:be:d8:db:57:c7:5c:e5:4b:fd:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3B:B0:D8:30:DC:75:83:5F:C0:1F:AC:96:99:1A:AC:95:C7:A5:44
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/oDuw2DDcdYNfwB-slpkarJXHpUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.184.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9b:24:34:7e:ab:f6:f6:9f:b3:71:c1:87:fd:b9:9c:b7:9d:
4a:f7:35:70:29:75:2d:ec:a7:f9:53:b4:b5:5d:81:4d:47:ba:
a6:00:03:cb:3e:75:99:9c:af:1a:ec:f7:3a:38:43:8c:77:59:
24:30:0f:a8:35:fb:2c:83:26:70:1f:08:d7:22:ba:f9:e3:74:
88:a6:82:dc:fa:46:4b:10:fa:da:79:d7:65:59:fa:80:d6:d5:
1f:f1:eb:43:e6:46:ea:83:08:6a:d0:0f:52:2d:94:81:2a:e8:
15:d9:b0:8a:fc:ed:38:8a:3e:bb:2d:b4:3a:6d:41:ca:ff:87:
f9:da:3e:d1:cd:3e:54:84:d6:69:d4:be:dd:4e:60:5d:19:af:
f4:9a:5a:66:63:cd:e7:67:fd:0f:51:58:90:8c:a0:eb:a6:60:
10:58:42:6c:1a:d5:ce:6c:17:55:78:9b:29:51:a6:ba:52:97:
de:f5:74:5c:dc:58:26:fc:f0:0e:bb:3e:50:32:91:83:22:6f:
1a:58:21:8c:05:f0:ff:7a:86:61:f3:35:fb:5d:11:ec:7d:c4:
fe:03:eb:09:38:16:5b:ed:ff:5b:79:ef:b6:ca:b2:2c:89:4a:
25:06:92:a3:28:e5:66:b7:42:66:0c:aa:5a:11:e7:ae:79:05:
3f:31:cf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:21 2025 by rpki-client