Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/eRy2kmfW8UDcIPq4LHplflCvw9A.roa
File: eRy2kmfW8UDcIPq4LHplflCvw9A.roa (raw, json)
Hash identifier: ZWExOEe6M7iJ72nBf8q960kB6kZXayCU4gvOM3MlPx4=
Subject key identifier: 79:1C:B6:92:67:D6:F1:40:DC:20:FA:B8:2C:7A:65:7E:50:AF:C3:D0
Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial: 0199C82AFEC49A602E88B448D4093E46E858
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/eRy2kmfW8UDcIPq4LHplflCvw9A.roa
Signing time: Thu 09 Oct 2025 08:51:24 +0000
ROA not before: Thu 09 Oct 2025 08:51:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 80.254.192.0/24 maxlen: 24
80.254.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:2a:fe:c4:9a:60:2e:88:b4:48:d4:09:3e:46:e8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Validity
Not Before: Oct 9 08:51:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=791cb69267d6f140dc20fab82c7a657e50afc3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:b4:eb:77:1e:de:73:a0:b7:22:d7:a7:66:
7c:c1:05:b1:92:ec:da:79:d2:b7:11:bf:34:30:75:
c8:43:bb:5a:0d:40:85:11:84:07:e7:89:7a:02:f7:
ea:09:32:cf:4d:ee:14:ee:bc:ae:e3:6d:93:5d:bd:
76:af:fa:07:b7:47:7f:c4:c7:e7:7b:5e:cb:e6:91:
34:b6:5b:d7:a2:7d:f1:06:c2:94:f7:f9:4e:a4:39:
e4:fb:c9:ee:49:ee:18:d4:ff:57:4d:43:cb:1f:11:
27:83:81:3c:17:c1:d4:68:94:b6:40:04:0f:1c:9e:
3e:fd:91:99:97:ef:e0:03:54:10:12:7d:3f:af:44:
1a:23:00:ac:5f:b9:12:51:77:62:dd:b4:10:23:eb:
04:19:21:00:51:a6:dd:ca:a7:cd:f0:a9:c9:e0:74:
8a:97:51:4a:fe:c2:e4:7e:3c:54:0c:d7:b0:12:af:
3c:c2:77:75:9b:ae:21:ce:09:c4:34:67:b8:f5:a5:
82:6c:a7:d4:87:8f:49:99:6b:ba:b6:1d:77:7c:5a:
c9:ea:23:67:98:ec:a1:0d:9a:fc:a2:91:ea:ee:d3:
83:fd:24:68:cb:10:27:93:5b:cb:38:30:e3:0f:7b:
3d:14:50:9c:b9:39:05:79:48:c0:22:6c:40:ff:f6:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1C:B6:92:67:D6:F1:40:DC:20:FA:B8:2C:7A:65:7E:50:AF:C3:D0
X509v3 Authority Key Identifier:
keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/eRy2kmfW8UDcIPq4LHplflCvw9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.192.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:1a:ce:91:b2:36:02:17:10:2a:3e:c5:ef:09:da:89:95:f9:
68:a5:d1:50:98:e7:50:22:2a:cc:da:de:c0:c8:be:e8:36:62:
ae:92:88:4b:2e:59:fd:ec:a6:18:b8:8b:8c:38:ac:ed:c4:85:
5f:30:b1:70:45:06:fd:10:1c:82:49:2c:10:18:89:df:f6:42:
c3:fb:04:0a:43:13:37:34:4e:ed:80:05:47:76:22:8e:e1:93:
26:3a:b5:1a:85:40:c7:48:9c:24:72:e3:cb:11:a2:d9:64:b7:
f7:e8:4c:9e:de:80:2c:3b:6b:c1:6f:21:f5:81:c5:20:16:52:
0d:2b:ac:a4:0a:24:b0:94:35:35:f4:64:83:cd:ee:58:0d:c1:
a3:e6:74:cf:7a:38:09:e8:58:e6:f8:9e:e1:4d:3c:a6:3d:dc:
25:71:ff:15:39:23:4a:a3:b1:58:a6:a9:3d:1c:00:87:75:d9:
82:d8:2b:d8:e0:d5:b8:73:de:87:c2:b6:27:9d:c2:0f:61:de:
f8:f9:7b:bf:78:5e:34:94:5d:41:f5:1f:9d:09:fb:1e:d2:6e:
eb:a7:35:10:94:ef:00:c5:39:67:e6:fa:08:10:97:cc:6b:f3:
c4:5a:aa:7e:22:1b:65:0b:fc:0d:60:ba:7e:2e:92:50:c5:d7:
58:73:89:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:13 2025 by rpki-client