
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/F6dtZCln9jtwgD3UNiwUw0kumRA.roa
File: F6dtZCln9jtwgD3UNiwUw0kumRA.roa (raw, json)
Hash identifier: uD2JK6zc95cLRElnqyfz7Z+XlrFdmIXOZmETVNCU+Bc=
Subject key identifier: 17:A7:6D:64:29:67:F6:3B:70:80:3D:D4:36:2C:14:C3:49:2E:99:10
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0199810F3B1843B42005AACB9345B389A75F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/F6dtZCln9jtwgD3UNiwUw0kumRA.roa
Signing time: Thu 25 Sep 2025 13:28:02 +0000
ROA not before: Thu 25 Sep 2025 13:28:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59651
IP address blocks: 193.233.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:81:0f:3b:18:43:b4:20:05:aa:cb:93:45:b3:89:a7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 25 13:28:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17a76d642967f63b70803dd4362c14c3492e9910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:f1:50:b7:14:35:af:4f:95:f5:c6:1b:6b:
f6:c7:27:29:ec:d7:a3:82:25:27:09:c7:43:8a:ef:
1f:b0:62:f5:ba:d4:79:ba:42:09:b5:5a:b8:b6:6e:
cb:41:00:60:26:49:9c:e5:da:6c:52:2f:5f:fa:b2:
01:d7:e0:b1:b4:b3:7a:da:81:f2:5a:a0:84:8a:2d:
6d:af:11:e3:4c:b1:4f:ce:6b:b9:a8:13:0c:07:e3:
6b:4c:ee:36:77:93:28:ed:d6:9a:81:be:e9:b5:2c:
35:bf:75:1e:61:ea:ac:42:58:7f:82:ee:ca:2a:78:
9a:70:ee:7f:af:bd:38:db:fe:3d:7e:de:57:7a:32:
c6:cf:e4:8a:7f:2b:f0:be:82:70:f6:fe:b5:2c:a3:
72:a0:1e:2f:42:13:72:b6:2d:44:39:20:6e:73:69:
5e:a7:2a:4c:e9:2e:5c:56:df:c6:05:b2:9a:43:14:
12:2b:3b:fa:80:c2:9d:54:0e:32:71:9f:22:56:5e:
14:94:2c:f2:d9:3b:9f:65:ba:96:f3:f8:f4:8d:10:
e4:b5:84:fe:ae:72:8a:fa:0a:b6:72:66:03:e8:ee:
b0:87:a3:f8:0e:8e:51:bc:69:73:35:28:17:46:8c:
27:d7:7e:2c:01:02:00:cb:42:23:6f:51:b8:09:4c:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A7:6D:64:29:67:F6:3B:70:80:3D:D4:36:2C:14:C3:49:2E:99:10
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/F6dtZCln9jtwgD3UNiwUw0kumRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.88.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ca:87:b8:7c:10:18:bc:e9:f1:6d:1e:2c:71:e7:4c:6d:d7:
1d:52:77:5e:59:b1:b3:1d:ac:5d:51:34:bc:dc:3a:50:cd:d0:
46:ba:fe:d4:a1:59:3e:50:dd:68:85:4a:8e:12:7b:47:47:3d:
30:98:40:30:f8:72:13:10:14:28:59:91:a8:58:3a:4a:bd:ac:
10:28:41:08:6a:a6:94:38:ef:14:ba:44:30:94:19:64:67:ab:
c0:41:fe:a8:e3:9e:80:28:2b:87:f6:a0:14:3d:c1:ab:69:ea:
b3:09:60:63:ed:e8:7b:d4:1b:47:a8:06:8b:4b:28:7b:b0:46:
97:e2:03:89:6e:58:a2:b3:34:83:e1:c9:9b:bb:bf:85:e0:b8:
df:8a:42:ec:a1:4a:a3:d6:c2:79:b2:15:f8:8b:fa:73:ae:cb:
21:af:e0:e3:37:ba:6d:0c:d4:ac:a4:49:e5:fc:8e:36:44:38:
0b:a9:8e:88:06:66:22:dd:3c:b4:4c:34:70:f8:7d:ac:d2:4d:
ed:59:b2:48:f3:bc:e3:26:b4:61:5c:ce:b8:86:92:f2:44:12:
14:09:b8:bd:90:aa:fa:cd:24:7c:84:aa:a9:85:a9:6f:c7:e3:
18:1d:87:c1:37:3d:26:eb:fa:d2:f5:1f:b8:b6:f1:20:46:6b:
7c:d5:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 17:33:13 2025 by rpki-client