Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WS4czgGZ8PjJGAeOmwoAIy6RK1Q.roa
File: WS4czgGZ8PjJGAeOmwoAIy6RK1Q.roa (raw, json)
Hash identifier: qrOQUPwBiyJGJ4uM3XinNZaI/rMhS0aq12o4TrhwoD0=
Subject key identifier: 59:2E:1C:CE:01:99:F0:F8:C9:18:07:8E:9B:0A:00:23:2E:91:2B:54
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0199F0EF9D90FF968C9A129CE6730F6C6705
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WS4czgGZ8PjJGAeOmwoAIy6RK1Q.roa
Signing time: Fri 17 Oct 2025 06:50:59 +0000
ROA not before: Fri 17 Oct 2025 06:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:ef:9d:90:ff:96:8c:9a:12:9c:e6:73:0f:6c:67:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Oct 17 06:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=592e1cce0199f0f8c918078e9b0a00232e912b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:1e:4e:bd:21:d1:ef:b1:36:29:fe:33:1c:
f1:f9:20:d0:3c:9d:ef:62:0d:f7:c7:1a:9b:2a:3b:
32:d0:49:33:71:0b:e8:51:26:e3:76:70:b8:26:26:
a7:91:90:0d:63:33:69:95:af:4f:ae:b6:e3:5b:4a:
fb:6c:22:a7:ec:f7:12:4d:c9:1e:c9:28:85:fe:5d:
b5:4a:ad:1a:12:84:cf:09:ae:af:2c:cc:ad:ab:36:
ef:b9:5d:c2:c0:0e:43:aa:48:3c:d2:1f:a8:83:33:
f2:f9:79:39:2c:28:0a:11:2d:42:a6:76:ab:66:46:
d0:3b:7d:c5:ee:e5:a4:fc:9c:25:4f:01:3c:9f:06:
d5:86:94:d3:72:98:f2:c2:18:cc:23:63:aa:cc:e3:
9d:57:ba:a3:09:61:9f:d1:82:77:7a:e8:52:ce:99:
96:1e:a2:bf:4b:bd:7c:c7:2e:92:37:b9:c8:97:16:
6c:1e:9a:d4:5c:0a:20:b2:6d:91:7c:da:29:25:fc:
c7:3d:8b:8d:eb:f5:11:4a:ba:f6:d9:a2:69:23:07:
ee:80:e7:a5:df:11:98:da:68:93:dc:45:d6:c8:ac:
58:af:59:e5:eb:f5:68:6c:b5:89:ae:6c:b9:b1:50:
b8:5b:b0:16:57:e9:6a:c9:40:ad:70:dc:ba:d0:ab:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2E:1C:CE:01:99:F0:F8:C9:18:07:8E:9B:0A:00:23:2E:91:2B:54
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WS4czgGZ8PjJGAeOmwoAIy6RK1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.223.0/24
195.114.192.0/24
195.114.195.0/24
195.114.202.0/24
195.114.205.0/24
213.220.2.0/24
213.220.4.0/24
213.220.6.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f2:f8:01:97:c4:6d:83:46:d2:88:72:2a:5e:87:c4:47:b8:
d3:76:b0:eb:eb:6b:90:31:97:71:99:38:c4:4c:99:e1:c3:5b:
28:8f:0f:e0:39:ab:47:a0:08:ab:7b:05:0c:d7:bd:d4:4b:09:
c8:87:28:f0:19:a9:57:d0:ad:0f:a3:d6:c5:ba:57:30:6d:8b:
df:98:b5:7b:35:c9:43:6a:30:58:cf:03:05:02:1c:a3:63:f5:
eb:52:95:98:e9:04:dc:c0:a1:3f:7e:40:ec:0d:f5:60:3a:9b:
64:6a:74:a1:57:83:ea:ac:d3:53:de:94:09:89:36:ef:8d:28:
1e:eb:33:f2:af:11:74:ba:a1:26:12:4c:60:a2:7a:3d:60:01:
f8:33:64:e0:83:29:4e:2d:b3:65:6d:ce:d3:32:a2:8e:da:db:
15:4c:31:f7:05:bb:95:a9:5d:cf:f4:fd:97:d7:fd:60:b8:50:
6e:04:ec:88:d0:9f:c1:d4:b4:8b:7c:dd:98:6f:a9:3a:69:b2:
88:31:ae:f3:7c:6e:17:f7:4f:ee:55:5a:39:2b:b3:52:a3:ec:
2c:d5:53:f9:42:0a:29:64:32:9a:40:4c:18:c1:1d:63:84:a5:
6a:11:05:cd:d9:67:f5:42:bc:ea:b4:9c:ab:09:3e:ee:ad:b8:
28:30:b6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:23:22 2025 by rpki-client