Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/xNLoxQtBTrsDYCoH65tbo0fGdFg.roa
File: xNLoxQtBTrsDYCoH65tbo0fGdFg.roa (raw, json)
Hash identifier: yD4EdHjgdB7qynHghTscrUeU4YcPg+faYfRSy+GnRMw=
Subject key identifier: C4:D2:E8:C5:0B:41:4E:BB:03:60:2A:07:EB:9B:5B:A3:47:C6:74:58
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0199E82D2F2680507872B988E9652B1D232A
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/xNLoxQtBTrsDYCoH65tbo0fGdFg.roa
Signing time: Wed 15 Oct 2025 14:01:39 +0000
ROA not before: Wed 15 Oct 2025 14:01:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213877
IP address blocks: 213.21.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:2d:2f:26:80:50:78:72:b9:88:e9:65:2b:1d:23:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Oct 15 14:01:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4d2e8c50b414ebb03602a07eb9b5ba347c67458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:1c:50:1d:d4:02:76:1b:05:2d:48:2c:7e:
69:79:95:66:1f:94:85:70:95:4e:80:fb:9f:a2:b1:
26:31:8a:e7:a6:c3:ee:c5:1c:59:06:32:5f:99:5d:
00:68:d7:e3:33:de:8e:99:04:d1:a6:05:de:d7:39:
07:d9:30:a2:32:d5:e6:1d:74:ab:83:62:42:f0:8d:
4a:16:36:93:31:51:19:5d:fa:d6:fd:21:ab:ac:1b:
8f:c1:46:84:d7:9a:f4:45:74:39:3d:c7:b8:f8:e8:
ee:f8:13:b5:03:70:83:db:cb:4a:c1:b9:34:1d:1e:
a0:a8:02:2f:c1:b6:cd:40:49:53:7b:21:b3:5c:ef:
19:a7:bf:bd:2b:8e:4e:fb:af:a6:d7:57:62:46:a2:
65:db:41:5a:eb:5f:93:38:94:68:09:55:c2:97:73:
7a:41:63:e3:e5:16:e6:33:e4:b3:07:f3:06:28:4f:
8d:20:5d:3b:c6:8b:3f:93:d1:96:c3:df:08:61:5a:
3a:e7:27:07:db:f0:4e:81:91:59:23:e0:af:5f:34:
ac:aa:d6:15:e7:d1:41:23:6c:4b:aa:fe:9d:54:61:
d0:21:54:4f:a9:70:b9:f9:77:50:49:8b:db:6a:4f:
42:3b:f5:a5:5a:7d:46:1a:04:b1:c5:c2:b7:70:f0:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D2:E8:C5:0B:41:4E:BB:03:60:2A:07:EB:9B:5B:A3:47:C6:74:58
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/xNLoxQtBTrsDYCoH65tbo0fGdFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.241.0/24
Signature Algorithm: sha256WithRSAEncryption
22:57:ed:15:78:91:e7:db:02:e6:4b:35:c8:7a:d2:8f:2d:b1:
9b:43:2a:4a:69:55:ac:8e:31:5d:dc:12:21:34:93:f3:88:f6:
1e:94:ae:9e:42:2f:3a:a6:2c:4f:c1:6b:78:d4:80:db:74:a8:
89:5c:2e:98:78:b4:15:af:5e:cc:93:60:5c:4a:21:96:c6:c5:
12:db:fb:6a:b9:db:51:de:42:78:23:1a:03:bb:94:1b:da:2b:
31:4c:51:a4:43:c5:83:5a:da:f9:d7:2d:d8:b6:a3:12:58:fe:
6d:58:6f:e4:b8:47:b9:da:68:1a:df:04:bc:b2:0f:53:8e:4f:
0a:ae:d1:7e:b9:fd:bf:10:f6:63:2f:b8:c1:d5:fd:dc:31:f9:
00:6b:d5:71:fe:bf:6a:dd:bb:d1:23:ed:93:47:56:3a:7d:1f:
e5:00:3e:91:97:6b:6f:6c:ab:17:24:ac:e1:d0:7c:6c:2b:42:
c6:9d:af:37:af:95:7c:b4:2e:4d:bd:f5:44:48:90:b3:01:3b:
3a:73:6d:13:77:71:62:aa:48:5f:3c:01:b1:94:e4:4b:8c:07:
5b:b0:c1:1f:db:92:63:f8:bc:73:c6:2c:7a:ff:b4:18:d9:b4:
fa:5d:59:bf:40:4b:27:dd:58:eb:6e:7f:dc:86:7d:7d:f3:55:
6f:5e:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:59 2025 by rpki-client