Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/tGisfrUmcm7oDtUaKLvnP0jBq0s.roa
File: tGisfrUmcm7oDtUaKLvnP0jBq0s.roa (raw, json)
Hash identifier: nA2OAz9Nlstpul0i0fjQIz6ieEk/T79qTn4SzXVWXBw=
Subject key identifier: B4:68:AC:7E:B5:26:72:6E:E8:0E:D5:1A:28:BB:E7:3F:48:C1:AB:4B
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 01992848807B0CE484DE2D05DC50699AD0E6
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/tGisfrUmcm7oDtUaKLvnP0jBq0s.roa
Signing time: Mon 08 Sep 2025 07:44:24 +0000
ROA not before: Mon 08 Sep 2025 07:44:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206776
IP address blocks: 185.196.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:48:80:7b:0c:e4:84:de:2d:05:dc:50:69:9a:d0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Sep 8 07:44:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b468ac7eb526726ee80ed51a28bbe73f48c1ab4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2a:a1:0c:01:29:0a:df:34:b7:c0:b6:b0:64:
e0:a7:15:ac:b0:c9:49:bc:85:00:ec:82:dd:c9:cb:
41:9f:ba:21:62:69:3a:02:6e:41:9e:ed:17:a3:41:
45:1e:d8:06:16:44:64:92:dd:39:6e:84:46:0d:1c:
f1:e1:a3:02:64:9e:61:1a:84:01:8a:2f:20:fb:7c:
12:2e:03:0f:92:af:af:de:dd:85:13:b3:90:fa:aa:
c3:91:08:df:e6:27:04:02:90:46:d1:f2:03:c7:37:
13:e0:c9:65:36:5a:07:2c:03:5c:91:02:b4:7a:27:
63:68:1e:2f:8a:66:21:73:b1:05:eb:ed:b3:d2:be:
84:b7:ff:af:aa:98:6d:3a:47:9b:fb:82:1e:a9:c4:
96:d2:0b:49:6b:3a:0f:c2:07:40:47:a6:3a:bc:2a:
23:69:3d:aa:ca:38:64:21:2f:20:0a:67:17:22:a7:
f0:8a:e3:2d:c3:85:f3:e4:e6:98:f1:89:5e:4b:9e:
7d:b1:20:d7:de:24:5f:2e:28:d6:4c:b3:52:43:41:
3f:70:e1:30:66:99:b7:eb:10:eb:a0:e9:76:ba:30:
16:6f:6d:4d:c3:36:d7:20:61:12:73:f9:10:27:bd:
35:fa:93:18:84:73:08:f0:18:ac:60:da:19:cf:29:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:AC:7E:B5:26:72:6E:E8:0E:D5:1A:28:BB:E7:3F:48:C1:AB:4B
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/tGisfrUmcm7oDtUaKLvnP0jBq0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:23:12:37:a0:42:8c:c9:d6:a3:84:98:3a:23:9b:01:c3:c5:
c5:db:63:6b:59:08:0f:3e:54:05:80:6f:b5:48:24:b0:7a:89:
85:df:7a:d0:d3:01:1a:f6:3e:2b:98:e2:62:22:7e:e1:cc:d0:
e6:5e:a0:23:15:85:da:bd:fc:f5:88:b1:49:b0:14:b3:cd:20:
61:7c:ab:83:7a:d3:16:71:52:94:d9:63:32:42:60:b2:08:e8:
99:1c:2a:b9:90:a4:ad:29:e9:7c:c2:b5:61:ef:8e:ac:8f:0e:
f6:4a:25:d0:b0:38:39:43:a1:70:91:7b:68:33:c7:47:61:36:
8e:07:ce:c4:49:09:a5:4e:0d:6f:24:c9:44:53:af:fc:9f:3e:
8f:29:1e:f9:84:c9:78:cb:b0:49:f5:fb:49:e8:03:2a:bd:a8:
38:2b:24:ee:cf:70:75:2f:a8:54:9b:fa:7e:a5:81:a2:e7:34:
94:8b:f2:27:2f:53:8c:4d:ee:55:15:22:98:c5:17:24:76:2f:
99:e0:0d:ad:5c:59:8c:72:47:63:8e:0d:c8:e7:03:9c:57:d6:
5e:a2:98:8d:6c:dc:44:04:d7:97:b0:81:b8:22:a6:ea:a4:df:
75:c4:ac:05:4d:8c:54:41:c0:71:e3:61:3c:9f:33:ef:bc:22:
a4:19:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:41 2025 by rpki-client