Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0uS91pFhHd7lgQorvoXaUMZ5yus.roa
File: 0uS91pFhHd7lgQorvoXaUMZ5yus.roa (raw, json)
Hash identifier: DT57DGolRFf7c6swe2yLXVh4YhyVKpMhmp4E0R+r+zE=
Subject key identifier: D2:E4:BD:D6:91:61:1D:DE:E5:81:0A:2B:BE:85:DA:50:C6:79:CA:EB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0199E299DC6922C50C1F6A685A7112E838E0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0uS91pFhHd7lgQorvoXaUMZ5yus.roa
Signing time: Tue 14 Oct 2025 12:02:38 +0000
ROA not before: Tue 14 Oct 2025 12:02:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3399
IP address blocks: 192.36.22.0/24 maxlen: 24
192.36.208.0/24 maxlen: 24
192.165.178.0/23 maxlen: 23
193.180.23.0/24 maxlen: 24
193.180.96.0/22 maxlen: 22
193.180.164.0/23 maxlen: 23
193.181.248.0/22 maxlen: 22
193.182.111.0/24 maxlen: 24
193.183.68.0/23 maxlen: 23
193.183.116.0/24 maxlen: 24
193.183.132.0/23 maxlen: 23
194.68.170.0/23 maxlen: 23
194.68.170.0/24 maxlen: 24
194.68.171.0/24 maxlen: 24
194.68.220.0/23 maxlen: 23
194.71.216.0/23 maxlen: 23
194.71.216.0/24 maxlen: 24
194.71.217.0/24 maxlen: 24
194.103.80.0/22 maxlen: 22
194.132.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:99:dc:69:22:c5:0c:1f:6a:68:5a:71:12:e8:38:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 14 12:02:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2e4bdd691611ddee5810a2bbe85da50c679caeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:1f:d5:70:e1:b6:cf:02:f0:88:60:33:f2:
78:bd:2f:61:a6:f4:42:81:4a:b2:50:39:9e:1a:c0:
19:3b:90:2d:af:16:31:1a:ca:af:9d:2f:09:9d:b9:
97:05:5e:ea:b6:2e:c5:fc:c5:16:18:9f:fa:3f:1c:
68:1c:7d:a0:de:9c:d7:62:dc:c9:4f:fc:c2:9f:1e:
f6:48:f3:d0:a4:c6:dc:aa:1e:4b:4a:d2:31:55:d4:
d0:66:ee:16:0a:21:b6:8f:07:a4:0e:4f:a8:4e:37:
55:e1:ad:d3:ea:f8:13:c1:fc:9c:08:c3:3d:70:fb:
2e:5b:a6:39:22:cf:a6:f9:bf:c4:61:2d:d1:c7:06:
f2:89:76:1b:1f:ca:56:75:a9:86:bd:fa:de:6e:05:
b1:bc:49:a6:f4:c1:aa:b3:38:47:56:8a:be:ed:0f:
eb:ef:c0:f3:2d:4a:7e:db:34:ad:66:25:3b:5f:80:
1c:78:c6:6a:a1:d5:4a:b0:53:77:c5:ee:58:bc:91:
4f:9e:c8:8d:c8:fb:ba:3e:8d:a1:cc:aa:a4:96:00:
21:4a:c7:2a:f1:3d:2c:77:4a:75:cf:70:a1:48:74:
93:32:2b:31:61:7a:d8:1d:b3:df:18:1e:aa:98:cc:
8c:70:aa:c6:fc:8b:b5:b0:9d:51:a2:e5:b7:9d:34:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E4:BD:D6:91:61:1D:DE:E5:81:0A:2B:BE:85:DA:50:C6:79:CA:EB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0uS91pFhHd7lgQorvoXaUMZ5yus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.22.0/24
192.36.208.0/24
192.165.178.0/23
193.180.23.0/24
193.180.96.0/22
193.180.164.0/23
193.181.248.0/22
193.182.111.0/24
193.183.68.0/23
193.183.116.0/24
193.183.132.0/23
194.68.170.0/23
194.68.220.0/23
194.71.216.0/23
194.103.80.0/22
194.132.40.0/22
Signature Algorithm: sha256WithRSAEncryption
24:d9:4e:f1:58:9c:bb:a7:d5:b7:27:b4:7c:88:61:e8:90:ec:
55:dc:0a:12:f7:f5:bd:51:6c:f5:a5:77:23:5a:20:c4:1d:3a:
95:ca:19:1e:3d:89:7d:a7:9e:86:98:75:24:75:d8:11:dd:4b:
07:39:71:e3:4b:4c:b3:cb:6a:60:f4:44:ac:2f:0d:b3:a1:03:
99:6d:9c:a4:fa:c8:aa:b3:77:61:29:68:41:bd:f4:97:f0:6e:
44:17:f9:e3:6e:53:38:6d:83:56:85:3d:f0:47:b5:a5:7a:75:
4d:3c:b7:56:b1:33:53:0c:b5:d1:80:d1:a1:47:b6:b1:96:4f:
d4:64:ec:16:5e:23:55:20:12:51:7c:72:9e:ad:e0:97:04:0d:
ef:88:54:5a:67:9f:a9:58:2e:75:85:27:0d:ba:4b:3b:20:8a:
d9:2e:03:ff:98:da:4b:9a:98:79:95:10:8c:eb:ff:c9:57:e4:
ef:50:26:66:f6:c0:e3:18:f1:f9:97:49:5e:f8:95:37:83:ea:
cd:5e:12:fa:72:89:cf:b8:0e:ad:ab:d1:b9:e5:33:ed:63:49:
5a:95:e8:34:76:d8:c5:7c:eb:47:f9:90:ad:16:6c:57:56:61:
96:8b:75:3f:10:f9:0b:73:a3:5e:5a:08:55:58:ad:8c:05:84:
ec:b4:a5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:59 2025 by rpki-client