Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/DxHLsEk_6xZVBiid3aLcVly3Zq4.roa
File: DxHLsEk_6xZVBiid3aLcVly3Zq4.roa (raw, json)
Hash identifier: DiLLe6hCVSWTw88tnRxeJMXZk0+HFNc9y2NuhmTwKKU=
Subject key identifier: 0F:11:CB:B0:49:3F:EB:16:55:06:28:9D:DD:A2:DC:56:5C:B7:66:AE
Certificate issuer: /CN=36a9b82bd59aca6340f6df54fe8d33600b7e91e4
Certificate serial: 0199C77B95AD39ADA3B33764F1A4F573664D
Authority key identifier: 36:A9:B8:2B:D5:9A:CA:63:40:F6:DF:54:FE:8D:33:60:0B:7E:91:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/DxHLsEk_6xZVBiid3aLcVly3Zq4.roa
Signing time: Thu 09 Oct 2025 05:39:49 +0000
ROA not before: Thu 09 Oct 2025 05:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205476
IP address blocks: 185.136.210.0/24 maxlen: 24
185.136.211.0/24 maxlen: 24
2a06:fec0:3203::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:7b:95:ad:39:ad:a3:b3:37:64:f1:a4:f5:73:66:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a9b82bd59aca6340f6df54fe8d33600b7e91e4
Validity
Not Before: Oct 9 05:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f11cbb0493feb165506289ddda2dc565cb766ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:a5:59:17:7b:fb:c2:f7:e2:8a:41:92:ee:
69:01:08:69:18:ae:84:0b:f9:c8:e2:af:cb:81:8e:
99:29:9f:c2:f3:06:22:53:ce:f0:87:4a:60:76:75:
19:00:91:93:93:58:1a:c8:d0:9c:f0:92:96:20:9a:
54:08:55:a3:01:16:d6:37:9b:bb:09:10:7c:09:aa:
cb:51:84:b3:f7:56:f1:95:f4:f7:01:1b:6e:e7:0c:
aa:c0:45:db:61:be:c0:0e:69:0b:97:51:f9:e1:0c:
d1:e0:20:f1:bc:64:37:d2:69:e4:cf:83:8b:33:ce:
57:bd:81:81:bd:de:2e:ba:c4:05:18:a7:b1:0c:99:
5e:94:fd:f3:da:20:39:80:4b:03:fd:d0:a7:23:58:
cf:8b:09:9d:d1:ea:39:50:d7:91:22:75:ec:04:07:
e2:23:0b:31:87:91:f0:15:cc:46:04:bb:06:10:ef:
1e:66:ec:3b:4b:ab:50:51:f8:03:fb:e0:d5:94:51:
49:4f:b5:c6:3e:77:32:78:05:d4:a4:a3:cb:68:3e:
88:01:69:03:0d:a5:1c:f8:88:68:f5:0d:21:d5:e7:
04:7f:4d:94:a0:94:de:95:88:4f:02:c1:c7:47:77:
59:6f:dd:3f:48:07:2e:90:56:b6:c5:29:38:7a:ea:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:11:CB:B0:49:3F:EB:16:55:06:28:9D:DD:A2:DC:56:5C:B7:66:AE
X509v3 Authority Key Identifier:
keyid:36:A9:B8:2B:D5:9A:CA:63:40:F6:DF:54:FE:8D:33:60:0B:7E:91:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqm4K9WaymNA9t9U_o0zYAt-keQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/DxHLsEk_6xZVBiid3aLcVly3Zq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/56b4c1-8015-4189-a3e5-5ad3026d8f28/1/Nqm4K9WaymNA9t9U_o0zYAt-keQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.210.0/23
IPv6:
2a06:fec0:3203::/48
Signature Algorithm: sha256WithRSAEncryption
39:0a:50:68:fd:59:a1:b0:81:2e:4f:2f:f8:67:0b:7b:c3:79:
f8:10:59:b7:df:52:ba:1c:bf:27:9f:02:40:04:32:82:54:8d:
49:8f:7f:8c:d5:4a:de:af:4d:00:5f:47:02:36:ee:8f:a5:77:
3a:1c:54:61:3c:d0:3f:44:70:ae:81:54:63:e8:10:7c:5a:c8:
61:74:cf:95:3b:04:cc:c5:7a:a8:88:95:58:f3:d8:47:43:4f:
77:c9:b4:3d:ae:7c:c6:41:93:5c:06:45:85:20:a5:dd:b6:8b:
15:c7:bf:5a:e2:ef:0f:47:29:c9:64:23:c4:21:fc:eb:c0:68:
52:74:22:52:25:7d:3c:05:6f:f2:1c:8a:57:bc:fe:09:d7:85:
20:72:61:f2:b6:03:1f:b4:86:f9:c8:d0:0c:bc:92:1f:de:2f:
cd:44:e7:8e:bc:23:eb:5d:5b:0a:04:2c:33:61:96:d8:87:00:
76:35:cc:47:51:55:47:e4:2c:c8:51:59:ff:c8:62:51:03:88:
8d:a7:12:b4:4a:be:8a:18:dd:da:ed:2e:f9:43:58:90:f0:35:
95:4a:20:61:e5:6f:c6:e9:e3:04:38:79:27:cf:08:3d:1f:ab:
ed:e7:f0:72:a3:97:41:3f:cc:7c:10:a1:70:b7:c8:d9:1a:05:
09:49:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:00 2025 by rpki-client