Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/d78174TzPU61EeqweFrZafTLQWE.roa
File: d78174TzPU61EeqweFrZafTLQWE.roa (raw, json)
Hash identifier: 9+VwzwjKOYVnQDakD0mKF8wWHbTVNLloU91I+XkxmsM=
Subject key identifier: 77:BF:35:EF:84:F3:3D:4E:B5:11:EA:B0:78:5A:D9:69:F4:CB:41:61
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0199851F45139C9F5E686BA9BD038CE42CCC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/d78174TzPU61EeqweFrZafTLQWE.roa
Signing time: Fri 26 Sep 2025 08:24:02 +0000
ROA not before: Fri 26 Sep 2025 08:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 194.76.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:1f:45:13:9c:9f:5e:68:6b:a9:bd:03:8c:e4:2c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 26 08:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77bf35ef84f33d4eb511eab0785ad969f4cb4161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:4d:ea:bf:2a:cb:36:96:ef:9d:08:46:62:
af:b7:5c:79:71:bf:6d:76:fc:fe:ae:eb:d5:ab:0a:
a8:75:a9:34:97:77:eb:3c:44:71:37:bc:ac:86:f0:
f7:57:f1:2a:0a:df:5d:50:ef:31:eb:69:8e:3e:68:
63:0f:ca:d2:99:7a:2f:7b:c8:b5:d2:e8:25:8c:6c:
b7:aa:fc:d1:8f:63:19:8b:85:8f:b6:e1:e1:db:ab:
65:24:6b:8b:6e:e4:cd:06:51:1c:06:f2:f4:ec:05:
ca:9a:09:d1:b9:eb:07:5d:bf:40:73:66:cc:e0:64:
5d:ca:c3:5c:9b:a4:b3:16:2c:4f:b8:a5:30:87:12:
60:18:61:6b:58:02:e3:b6:23:10:23:64:18:59:d7:
c1:6f:de:32:a0:d8:2d:16:aa:cf:ba:3f:81:a3:0d:
0c:c8:08:9e:b4:5c:1d:05:33:bf:ad:4c:72:5f:35:
40:01:03:a9:54:b2:c6:6d:f9:59:fb:ff:fe:8c:2f:
4f:e5:1d:6f:0e:3c:d6:3a:32:59:78:79:6b:37:42:
90:26:84:a1:0e:0d:bf:c3:d7:a8:83:ec:f3:7a:00:
88:bf:12:23:2b:ec:62:f8:f5:37:9d:8c:3c:c7:95:
d0:8e:75:79:fa:2b:eb:0a:4c:2a:a6:3c:f4:2e:bb:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BF:35:EF:84:F3:3D:4E:B5:11:EA:B0:78:5A:D9:69:F4:CB:41:61
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/d78174TzPU61EeqweFrZafTLQWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.173.0/24
Signature Algorithm: sha256WithRSAEncryption
52:86:07:9a:07:f2:89:c9:95:f7:ee:93:d7:7c:14:9d:1a:9d:
02:6e:07:57:3e:e7:4d:5c:6f:22:be:d9:5c:ca:c1:e3:03:c4:
5d:05:a4:63:4b:88:9d:d7:ea:d7:e4:f3:d0:d6:b6:d1:a9:cf:
a8:bb:64:18:0d:12:11:63:0b:17:1f:2c:45:26:96:ec:72:15:
08:7a:80:89:b9:1f:f3:bf:7d:19:b6:81:63:f0:89:0b:b5:74:
28:cd:3e:17:cb:9d:ff:21:f6:22:ba:1a:bc:f0:7e:bc:9e:e7:
3d:dc:8b:29:2e:65:59:e9:fb:f2:4a:af:83:2d:cc:bf:49:77:
0e:7c:04:4a:f1:06:ac:9e:93:16:99:5e:c1:f5:1a:b7:cb:53:
16:fb:dc:bb:d4:71:7e:72:d2:7e:7c:44:dc:13:5b:7c:94:5b:
16:d9:38:cc:37:18:c8:3e:47:66:d2:de:b0:92:d4:30:ea:99:
b5:c1:4c:c6:e4:d9:b9:f2:a9:34:33:32:bd:98:38:61:e8:e0:
ac:de:0d:2c:2a:7c:e9:df:ad:f8:b8:e1:ba:7a:05:97:fa:df:
01:d8:d6:be:d9:45:55:93:89:fd:86:df:50:b0:05:b2:9d:01:
b3:6e:2d:62:7f:00:f5:3b:c8:1d:ef:a2:e6:dd:d9:b2:3b:15:
ef:56:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:47 2025 by rpki-client