Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/cWm4lcomb_7tGOMAKfN645HZ4lY.roa
File: cWm4lcomb_7tGOMAKfN645HZ4lY.roa (raw, json)
Hash identifier: Q1Xtl3Tt4xDVvissECGJZtzvYROTu/HRq3nIK5nwbTU=
Subject key identifier: 71:69:B8:95:CA:26:6F:FE:ED:18:E3:00:29:F3:7A:E3:91:D9:E2:56
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 0199CDC6BEB22A8CFF7FFA0577F8646ED479
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/cWm4lcomb_7tGOMAKfN645HZ4lY.roa
Signing time: Fri 10 Oct 2025 10:59:38 +0000
ROA not before: Fri 10 Oct 2025 10:59:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216334
IP address blocks: 94.159.115.0/24 maxlen: 24
94.159.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:c6:be:b2:2a:8c:ff:7f:fa:05:77:f8:64:6e:d4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Oct 10 10:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7169b895ca266ffeed18e30029f37ae391d9e256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:05:48:26:61:4a:a1:30:4e:0f:dc:31:42:
5f:b9:e1:2a:1b:6b:2c:9f:d2:2c:f4:02:9f:b9:7b:
e8:16:dc:58:dc:6a:da:c9:a8:ea:20:eb:3c:21:00:
0f:ce:38:73:bb:97:77:8d:6d:7a:15:1c:a0:78:94:
bc:4f:5e:81:19:69:b2:c0:e5:8b:d8:bc:c8:ff:aa:
2c:f4:95:60:82:3e:37:e3:06:a0:cd:ff:6b:fd:57:
d6:68:cf:92:40:6c:06:4d:01:5b:9d:b8:bc:54:f0:
42:0c:d1:c9:2d:49:aa:d0:00:6d:a5:83:d1:4e:14:
c3:a0:93:88:ba:50:5d:0d:08:e0:94:72:6d:1c:1e:
50:97:63:de:3c:b9:50:12:07:51:2d:23:e0:8f:af:
71:1b:71:61:7e:f0:67:04:5f:70:8d:16:13:73:55:
47:05:bd:c4:2d:12:ea:79:18:8f:7e:d0:4c:ad:f2:
9e:c5:09:d9:1b:d2:89:9f:e6:f2:b5:b3:68:71:c0:
73:34:66:92:f7:6c:38:ac:4e:97:96:4a:6f:45:63:
54:c4:dd:9b:1c:e1:92:9f:32:19:92:d6:93:dd:fd:
c8:1d:38:bc:19:af:a8:79:c1:8f:11:e0:97:5f:12:
6d:0b:18:54:0d:e6:23:12:8e:70:3c:a2:07:ce:0b:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:69:B8:95:CA:26:6F:FE:ED:18:E3:00:29:F3:7A:E3:91:D9:E2:56
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/cWm4lcomb_7tGOMAKfN645HZ4lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.115.0-94.159.116.255
Signature Algorithm: sha256WithRSAEncryption
8e:0f:96:86:23:0f:8a:6d:e4:21:92:ae:4f:9a:4f:84:dc:50:
56:1f:9f:9f:f0:a8:d1:76:6b:8c:81:6d:41:ca:d8:c1:db:15:
df:a3:4b:69:af:8d:77:75:03:fb:d1:1f:fb:f2:af:3b:5b:e6:
f1:80:1d:7d:43:67:bd:ef:2a:58:0b:17:64:0c:a4:d3:5a:7b:
b0:90:5a:8b:b9:c0:cb:23:68:80:07:d5:96:8e:23:3f:b2:e7:
42:73:ad:c8:37:81:92:c3:e1:c3:cc:d2:33:11:a5:f0:e1:e0:
42:ad:cc:c3:c0:16:eb:6d:ac:b8:50:43:1d:2f:3d:ce:6e:d3:
d7:c3:bc:6e:93:11:de:c2:be:d5:83:b4:7b:7e:1e:c4:85:91:
2a:83:f2:f5:34:ac:86:20:83:e7:71:49:56:7f:53:63:59:a0:
cd:75:2a:80:46:97:8d:d2:65:dd:dd:74:b3:db:16:b5:fe:0e:
b3:3d:b1:50:38:c1:b3:c6:cc:2f:d7:fc:76:93:a8:b5:c5:40:
e1:ab:8f:94:9b:f0:d5:cc:98:db:2d:5d:8a:96:dc:1d:6d:b0:
fc:5e:91:30:88:04:aa:21:11:23:de:3e:47:21:9b:47:4a:16:
90:34:37:e9:a8:2d:ee:4b:01:ff:38:02:7b:43:27:d2:4b:ff:
1e:64:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:01 2025 by rpki-client