Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/0HwAhbsJ8G8t2z-3Pam96Qclp0Y.roa
File: 0HwAhbsJ8G8t2z-3Pam96Qclp0Y.roa (raw, json)
Hash identifier: Kf+VRZglvL6Y3KqIp6jRgRnsTLA4/6Z1kOM3rWbawXY=
Subject key identifier: D0:7C:00:85:BB:09:F0:6F:2D:DB:3F:B7:3D:A9:BD:E9:07:25:A7:46
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 0199E71E7D7F64E709FE6E85C2CAD97A5098
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/0HwAhbsJ8G8t2z-3Pam96Qclp0Y.roa
Signing time: Wed 15 Oct 2025 09:05:59 +0000
ROA not before: Wed 15 Oct 2025 09:05:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210016
IP address blocks: 188.72.9.0/24 maxlen: 24
188.72.10.0/24 maxlen: 24
188.72.11.0/24 maxlen: 24
188.72.13.0/24 maxlen: 24
188.72.14.0/24 maxlen: 24
188.72.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:1e:7d:7f:64:e7:09:fe:6e:85:c2:ca:d9:7a:50:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Oct 15 09:05:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d07c0085bb09f06f2ddb3fb73da9bde90725a746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:25:a5:15:36:8f:bf:68:44:8c:72:06:fc:
86:5c:79:ae:a4:36:df:09:40:c9:68:b7:e6:9b:88:
ea:13:fd:f0:09:02:d5:35:5d:11:f8:9f:ed:d7:32:
48:5f:bb:54:d2:35:39:d7:d7:c2:d5:21:39:04:6b:
3c:a7:22:19:cb:e9:9b:80:16:55:24:5d:dc:d3:2f:
02:f3:9e:eb:6c:f6:aa:d7:2e:06:db:e8:81:27:59:
39:87:dd:e4:c5:27:73:2f:49:39:e4:2c:87:b1:c2:
f2:9a:99:a6:5b:7f:0c:ee:f5:d3:c0:4b:32:66:dd:
34:54:2b:88:75:9b:fe:08:53:7b:26:f8:39:11:bf:
c6:0c:5e:7b:0c:dd:1a:1a:3f:5f:6a:81:3c:ba:d6:
37:8d:ec:46:b9:56:6d:14:d5:1a:40:d5:77:e2:b5:
14:c2:aa:06:ae:6f:21:aa:03:5c:47:c6:9d:2d:a3:
f7:17:51:67:3b:a4:d4:02:c0:24:ca:35:84:ba:41:
d5:63:db:11:11:d0:aa:77:d7:90:2b:12:f9:5d:ee:
51:3d:7d:db:f9:a3:0e:ef:0c:5e:d0:0c:24:dc:89:
62:ae:29:80:2f:57:31:3e:70:4c:27:67:5d:e9:08:
0d:72:0b:c8:8f:c0:b5:6c:24:fe:f3:6e:2a:a8:7b:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:00:85:BB:09:F0:6F:2D:DB:3F:B7:3D:A9:BD:E9:07:25:A7:46
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/0HwAhbsJ8G8t2z-3Pam96Qclp0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.9.0-188.72.11.255
188.72.13.0-188.72.14.255
188.72.35.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1b:f5:6b:28:6f:94:9a:33:33:4a:f2:0a:b7:c4:69:20:2b:
30:bc:40:ed:e9:80:45:e7:45:7d:b4:6f:e3:23:e8:a6:cb:0c:
c8:56:29:78:81:41:b6:e7:a8:0d:1f:ed:8d:c7:56:42:8b:33:
00:ca:c3:c7:b0:6f:d8:c2:12:b7:4b:39:98:0b:8b:3b:34:67:
51:39:01:9d:f5:95:54:64:2e:57:74:6c:d5:4f:fa:58:2e:e2:
28:e3:3a:18:e8:a3:b0:44:b7:f3:4e:c3:93:1f:20:c2:df:08:
c8:c9:dc:ae:1c:f8:d7:93:fb:57:80:c3:fa:e6:ff:28:ef:3b:
94:36:fc:b6:9f:12:4c:c7:2d:f4:7b:d8:f5:e8:04:3b:ad:74:
0d:f8:07:72:95:72:87:7f:3a:77:ef:9b:12:02:59:46:39:54:
83:73:8c:0e:a5:65:6a:30:67:cf:46:de:43:a2:5a:da:30:48:
5d:98:a3:71:16:01:26:f2:b8:bb:0b:48:75:83:3d:0a:62:f3:
bb:4a:2e:6d:7b:13:cd:cc:ec:f6:89:9d:cc:ff:8d:3a:72:f0:
69:06:54:a5:86:ff:15:b2:b0:b4:a2:b2:b9:d8:e7:85:17:34:
11:92:03:95:e7:14:d7:0e:ae:05:f0:83:4e:82:87:13:37:93:
6e:45:64:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:54:02 2025 by rpki-client