Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Ce0eRLxLAlI4cxE5occdRxJvx1k.roa
File: Ce0eRLxLAlI4cxE5occdRxJvx1k.roa (raw, json)
Hash identifier: tdH5GjSB/LW0PULc/zqg0vc5nhMDtGNzUfHe7tJZQ8w=
Subject key identifier: 09:ED:1E:44:BC:4B:02:52:38:73:11:39:A1:C7:1D:47:12:6F:C7:59
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0199ED2611FE5B5F678B4DEF396F7E78E941
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Ce0eRLxLAlI4cxE5occdRxJvx1k.roa
Signing time: Thu 16 Oct 2025 13:11:59 +0000
ROA not before: Thu 16 Oct 2025 13:11:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52041
IP address blocks: 88.223.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:26:11:fe:5b:5f:67:8b:4d:ef:39:6f:7e:78:e9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 16 13:11:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09ed1e44bc4b025238731139a1c71d47126fc759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:f9:5b:aa:fa:e8:06:57:a4:70:9b:1f:7e:
1b:9e:3a:8e:49:64:a5:e3:2d:ac:b1:e6:c1:e7:11:
13:21:60:f6:39:e9:8e:90:0d:8b:1c:6c:76:98:91:
c3:cb:8b:7b:3c:c6:ea:8c:b4:cc:c1:d3:af:73:5f:
6e:3a:63:73:1f:30:43:fa:21:5b:f9:8c:ba:3b:08:
0a:b0:f2:2e:36:b6:1b:02:73:2f:20:2f:7e:0a:fb:
3b:3d:5a:55:46:f4:4d:cb:4b:1b:b3:6e:2b:be:ed:
04:f8:26:98:52:54:dd:4f:79:17:d3:3d:b3:a4:6a:
66:5a:a9:cc:77:5c:7f:a9:52:86:12:1d:fc:ac:d5:
6f:4a:e0:e3:38:2d:14:fb:1a:e9:79:a6:fa:cb:2e:
26:6a:9c:45:a8:e9:da:0e:9b:c0:c2:17:ac:e3:65:
5c:27:5a:a0:93:d5:9b:ad:8d:15:53:1f:f8:76:1a:
a3:d8:3e:b4:5b:5a:c0:fc:f1:d1:bd:64:6e:ce:82:
da:78:9f:b0:a0:87:99:3a:0c:00:0c:b0:81:17:9c:
1b:e0:8e:5a:ef:81:5d:2e:b9:15:8a:71:11:bf:14:
4a:78:c2:1f:36:60:29:ef:08:e3:83:ff:90:a0:2c:
2c:43:36:9d:23:ca:22:05:17:1c:ca:63:61:90:68:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:ED:1E:44:BC:4B:02:52:38:73:11:39:A1:C7:1D:47:12:6F:C7:59
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Ce0eRLxLAlI4cxE5occdRxJvx1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.223.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:bc:10:7e:cc:33:ad:ff:71:8f:c0:c0:0a:d0:84:99:30:16:
f0:1a:46:8e:0b:c3:3c:89:14:3e:48:f3:65:57:e8:ce:da:36:
d8:9e:47:ac:8a:6f:de:77:41:37:61:f7:df:ed:f2:94:e1:7c:
eb:10:0b:20:a0:57:20:62:fb:ba:c3:08:2f:44:07:6b:6d:18:
2a:ac:cd:5c:8f:71:e8:0b:27:47:63:d3:62:ae:25:27:9c:58:
4a:0b:ae:2e:4c:82:15:dc:01:9b:cb:02:44:8b:dd:78:07:37:
61:87:a3:d4:39:b7:9c:a2:5f:84:54:7a:af:1b:b5:ae:f2:92:
16:31:4b:1c:1c:49:10:5d:db:1f:7a:f5:bd:7b:3d:1c:25:0f:
1f:7c:c4:bd:c7:64:32:c1:dc:2d:3b:04:17:c6:8b:75:4f:04:
48:66:71:56:6a:86:00:92:6c:ab:dd:8e:d1:d3:37:86:78:71:
ad:77:64:72:d0:33:05:29:21:4e:89:06:b2:74:af:38:78:6d:
e6:2b:e1:9e:bc:a6:e2:0a:64:75:ba:44:63:cf:b2:42:1c:6c:
e3:8d:a5:af:7c:aa:ab:01:bc:38:60:d4:9a:0e:85:ec:eb:4b:
0c:fc:a6:a9:65:64:de:e2:5d:42:e8:57:bc:10:66:35:01:12:
08:02:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:36 2025 by rpki-client