Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dbF-rUYuotfXkhtB-8_MHeJo5vg.roa
File: dbF-rUYuotfXkhtB-8_MHeJo5vg.roa (raw, json)
Hash identifier: ouTY7H0vJfxc+BynoMuk1ajPHdYZLcBaqk3v/CVmm8w=
Subject key identifier: 75:B1:7E:AD:46:2E:A2:D7:D7:92:1B:41:FB:CF:CC:1D:E2:68:E6:F8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01999B13B0C8B6608AC4425BF2EF1CCC080F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dbF-rUYuotfXkhtB-8_MHeJo5vg.roa
Signing time: Tue 30 Sep 2025 14:43:02 +0000
ROA not before: Tue 30 Sep 2025 14:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214305
IP address blocks: 185.223.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:13:b0:c8:b6:60:8a:c4:42:5b:f2:ef:1c:cc:08:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 30 14:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75b17ead462ea2d7d7921b41fbcfcc1de268e6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:5b:83:9d:63:57:75:09:d9:f6:96:26:59:
46:00:2c:43:d8:f4:12:9d:b7:f1:d4:a8:98:50:06:
4e:a1:80:8e:e6:c8:29:75:ef:35:f2:9c:3c:56:42:
af:70:72:0d:49:a3:e3:b0:0e:53:7f:6c:90:b1:23:
9f:49:6f:a7:82:e9:2d:df:19:04:4d:fc:66:66:5a:
a4:e9:bb:2c:61:ae:68:c3:6a:65:07:d4:ad:e5:37:
76:57:99:31:94:cf:3d:6d:bf:0b:d6:c6:2e:f2:fd:
ec:04:e7:c3:f3:1c:5a:df:4f:b9:50:f5:2b:db:cf:
77:3a:91:cf:ba:07:cf:63:fb:eb:78:08:28:df:4c:
d3:e6:df:3b:a5:f2:94:28:1c:eb:41:79:c2:11:56:
b2:9f:0e:8d:b4:77:dd:63:4d:c9:6b:bb:f5:1d:6c:
0f:29:50:51:16:e1:ba:c1:74:20:08:32:bd:dc:5d:
f3:7b:3a:a2:3d:62:5f:53:4d:c9:45:ed:ab:af:50:
93:e3:3e:74:19:9b:8b:d3:ef:33:c2:a6:71:f7:27:
86:01:f5:71:8d:1d:82:6c:19:de:0c:f9:0c:25:4c:
04:26:cb:55:d8:06:c8:7d:7a:5f:70:9a:5b:89:c7:
e8:7f:97:2f:17:a1:3a:fd:ca:47:4b:2e:4a:11:3b:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B1:7E:AD:46:2E:A2:D7:D7:92:1B:41:FB:CF:CC:1D:E2:68:E6:F8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dbF-rUYuotfXkhtB-8_MHeJo5vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9e:40:0c:77:74:e1:4a:c4:25:ae:c4:bc:d9:6b:2d:7b:38:
db:74:b8:b2:7b:25:0f:1a:af:8c:e2:af:9c:f1:67:2c:d2:75:
36:c1:9c:6f:46:82:4b:d1:f1:54:14:63:4d:4b:1a:63:42:53:
9b:fe:71:db:4a:45:5d:1a:08:8f:4f:b5:94:76:9c:60:95:a0:
5a:bd:b0:f5:3c:ca:0a:b9:16:f1:ce:e9:34:ca:a4:b1:c0:28:
ea:55:78:ad:73:6f:e9:da:34:74:24:12:68:04:28:3c:8c:18:
8b:8c:1a:54:d4:fa:73:84:ae:8d:f6:22:2e:8f:38:22:b0:58:
ed:1c:f4:99:12:c0:0d:e5:d5:b9:79:ec:d1:b8:d9:00:f4:bf:
0d:5e:71:69:fa:e2:53:e4:ae:86:76:53:3b:cb:3c:24:f3:94:
c7:32:aa:ff:85:b4:cd:85:23:30:7b:73:57:1f:7a:a4:31:da:
24:6e:b1:28:c6:d9:e4:5b:aa:4f:80:1d:fd:63:2d:33:95:f3:
1e:04:38:f0:2b:0c:3d:59:ba:a7:2e:68:4d:fa:c4:2b:21:d2:
33:6d:fe:db:17:13:b1:24:d8:ed:62:d1:f7:53:9b:d7:03:aa:
58:67:1d:2a:44:1f:d2:26:5a:e3:d6:d1:53:61:7a:7c:a3:9c:
94:df:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:01:04 2025 by rpki-client