Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/DE_i3YbUnbC2cLmxhuDjCehEIsc.roa
File: DE_i3YbUnbC2cLmxhuDjCehEIsc.roa (raw, json)
Hash identifier: KQTIz5aMB/Dipb9RY19esIa3DhRhV0i+ChiUWRW8mIs=
Subject key identifier: 0C:4F:E2:DD:86:D4:9D:B0:B6:70:B9:B1:86:E0:E3:09:E8:44:22:C7
Certificate issuer: /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial: 0199E409E912C43B2F54516063FC1D84E969
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/DE_i3YbUnbC2cLmxhuDjCehEIsc.roa
Signing time: Tue 14 Oct 2025 18:44:38 +0000
ROA not before: Tue 14 Oct 2025 18:44:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204784
IP address blocks: 185.184.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:09:e9:12:c4:3b:2f:54:51:60:63:fc:1d:84:e9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Validity
Not Before: Oct 14 18:44:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c4fe2dd86d49db0b670b9b186e0e309e84422c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:fd:8a:bc:60:15:42:07:0f:ca:16:a2:b2:
6c:6b:a0:2d:61:47:9e:d8:9a:e9:39:a5:f2:0c:0a:
bb:e6:92:ac:57:9a:f2:25:5c:1f:38:84:40:85:be:
41:dc:8d:dc:0b:dc:7c:d7:96:72:24:49:81:45:12:
33:46:cc:43:d7:a1:8e:dd:ca:66:9d:5d:d9:6c:9b:
4d:db:9a:3c:be:d6:c9:53:06:f5:4d:c7:7c:e8:db:
38:a0:29:80:54:cc:4d:ab:79:89:63:fd:56:b1:35:
e2:0d:d4:fc:30:fe:d1:fc:92:50:f5:c2:a6:35:23:
08:68:06:47:1c:40:31:0a:9e:be:da:07:13:69:53:
39:5a:f0:77:d8:31:f2:98:a1:95:cb:04:9e:d3:9c:
dd:90:bf:49:03:b1:0a:21:d1:53:a4:c7:f5:54:65:
0c:6d:f6:b1:37:98:11:88:4d:f9:cb:ec:51:6b:ad:
e7:d9:19:5d:82:12:b4:13:be:96:1f:25:91:f1:59:
e3:02:da:a9:e1:4b:96:47:7c:1d:b7:7a:c5:5e:21:
38:1c:24:4b:8f:7c:f4:64:e1:4a:40:00:d6:a2:a0:
06:72:5c:80:72:ba:1c:28:ab:ee:28:9d:21:56:37:
56:90:99:b8:66:3f:45:5d:e5:02:5b:9c:85:21:ff:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4F:E2:DD:86:D4:9D:B0:B6:70:B9:B1:86:E0:E3:09:E8:44:22:C7
X509v3 Authority Key Identifier:
keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/DE_i3YbUnbC2cLmxhuDjCehEIsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:fa:ba:8a:52:59:aa:97:46:73:07:07:6b:81:26:da:84:fc:
69:45:4a:7d:e2:01:c1:9a:8e:8f:33:f8:3e:1c:6b:8c:e7:95:
77:f4:49:30:75:3d:3f:54:b8:0a:2a:8c:ef:7c:81:33:5e:ed:
88:89:a8:f6:3b:be:48:e6:4f:0f:16:ef:6b:9d:03:0e:32:1a:
9c:94:34:4a:fc:52:33:fd:96:35:9b:bc:01:20:52:af:58:c8:
ee:df:34:6e:08:d8:9e:66:be:10:33:d7:6e:3f:93:9a:01:c8:
84:eb:b8:25:8b:2e:7f:80:1b:ee:d4:54:b4:db:49:e6:08:1e:
2c:0b:f9:5f:6c:01:e2:0e:ad:24:a1:b1:0e:81:d0:f2:29:75:
dd:60:d0:10:1c:5d:71:a2:05:04:0c:c0:4c:da:5e:14:34:22:
95:8c:c1:bf:aa:c4:a4:d2:f9:2a:99:2f:47:73:2a:d1:91:39:
e8:79:f5:ad:47:25:01:55:91:86:dd:ea:5c:1f:24:0b:4f:11:
b8:4f:8f:6c:79:0c:54:13:39:b6:7e:0e:c9:5b:eb:c9:61:48:
69:87:0f:e1:7a:3f:30:2c:4e:47:dc:ad:f2:7a:cc:16:85:47:
6c:af:78:67:34:af:f6:6f:fd:c2:b2:3e:90:5a:cd:20:8e:53:
46:5a:e5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:43 2025 by rpki-client