Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/22wVvYqfysfBaYOhYbGdPQUpw1I.roa
File: 22wVvYqfysfBaYOhYbGdPQUpw1I.roa (raw, json)
Hash identifier: FtF0xfCRr+CFbBuExeP2kC84eEIje6JYGOJe1D6MqPk=
Subject key identifier: DB:6C:15:BD:8A:9F:CA:C7:C1:69:83:A1:61:B1:9D:3D:05:29:C3:52
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 0199F229A2FD71450279B3400E0AA040EBA0
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/22wVvYqfysfBaYOhYbGdPQUpw1I.roa
Signing time: Fri 17 Oct 2025 12:33:58 +0000
ROA not before: Fri 17 Oct 2025 12:33:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42489
IP address blocks: 77.52.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:29:a2:fd:71:45:02:79:b3:40:0e:0a:a0:40:eb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Oct 17 12:33:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db6c15bd8a9fcac7c16983a161b19d3d0529c352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:70:d8:8b:3e:d4:15:55:b4:73:59:ed:95:
ba:85:fe:80:91:6c:a9:1e:21:dc:cf:d8:90:a0:16:
bd:96:b6:43:de:e0:ae:16:1a:f0:db:18:fb:00:3d:
93:ec:34:5f:bb:bb:48:f9:ca:7b:f9:ab:3f:30:9e:
ec:97:21:40:bd:dc:63:dc:43:df:31:f7:c8:b1:90:
fb:6a:4e:c4:27:d3:4c:42:b7:6c:56:90:4d:81:0e:
45:57:f2:3a:7e:24:dd:e7:8c:22:2e:56:c3:f1:39:
c7:70:fe:75:00:a8:e9:42:ff:cb:e2:1f:b0:6f:ce:
c8:05:70:87:e3:12:de:c0:53:d7:5a:30:b8:6f:f5:
6b:8a:0c:14:6d:92:2f:4b:d2:c7:1a:67:2f:bd:b4:
70:41:d3:c2:ba:d6:a0:74:ee:65:00:d2:cc:78:fe:
8c:52:a0:58:49:cf:26:48:94:24:98:99:e4:01:1d:
f1:d1:96:5b:b2:b6:8d:e6:eb:aa:fc:92:d5:cc:27:
88:5f:b9:87:ec:21:5e:54:c4:06:a9:21:57:75:d0:
c6:01:53:d3:f2:93:44:32:d5:9c:e2:00:1b:e0:cc:
59:de:43:a6:a2:e0:83:e1:4d:0c:88:e1:cc:db:cf:
80:a3:9a:d9:65:ee:a2:f2:1f:4c:1e:64:ae:a3:84:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6C:15:BD:8A:9F:CA:C7:C1:69:83:A1:61:B1:9D:3D:05:29:C3:52
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/22wVvYqfysfBaYOhYbGdPQUpw1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.52.28.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8e:77:c6:73:60:a2:7e:e6:7a:c5:8d:a0:ea:fc:43:53:2b:
c1:4b:e9:4a:9b:72:8d:4b:06:93:3c:76:08:12:36:39:34:c5:
c1:ff:0e:ab:2f:1e:16:fe:e7:ab:4c:07:fb:b0:bd:0d:66:1e:
38:1c:53:61:52:02:dc:ae:01:61:6d:4c:c2:02:da:f6:8c:cd:
75:56:b8:56:40:78:7b:e7:33:39:82:02:ff:40:b7:df:93:7b:
84:67:20:43:0e:f8:9a:a5:14:10:31:0b:46:db:47:5d:5b:ac:
aa:bf:09:2a:23:be:1e:24:5d:28:74:5b:7c:14:a8:68:b1:0f:
a7:61:ca:a6:85:65:fd:06:19:bd:0b:69:a2:19:e8:84:0e:3a:
13:fa:e5:c6:be:72:49:a9:61:ba:d3:3b:57:16:b5:7d:d8:b5:
93:6f:ff:51:6b:b5:25:c8:97:bb:58:f3:59:4d:cd:9c:83:87:
2e:a7:b1:df:f6:61:12:40:a2:ed:da:9b:e3:7d:1c:d0:70:7b:
d5:62:55:d8:a1:0c:32:0c:b7:cd:10:4a:ac:81:b7:31:dd:95:
14:96:e0:ce:27:75:63:4e:94:2c:c3:3e:33:d5:e2:93:4d:15:
b9:f9:9e:59:ee:45:89:ba:0d:c9:d2:99:9a:27:08:d3:29:0e:
58:eb:7c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:48 2025 by rpki-client