Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/PrQLT7XmMWLDcNFZXhC6i5ipEO0.roa
File: PrQLT7XmMWLDcNFZXhC6i5ipEO0.roa (raw, json)
Hash identifier: ZOoiI4PcKu9cyfI921BIlgDSlvuVbGjs4mAo/U6V33g=
Subject key identifier: 3E:B4:0B:4F:B5:E6:31:62:C3:70:D1:59:5E:10:BA:8B:98:A9:10:ED
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 0199AE797B0AD207832FBA6B9F1413D4AB9D
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/PrQLT7XmMWLDcNFZXhC6i5ipEO0.roa
Signing time: Sat 04 Oct 2025 09:07:00 +0000
ROA not before: Sat 04 Oct 2025 09:07:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56694
IP address blocks: 208.92.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ae:79:7b:0a:d2:07:83:2f:ba:6b:9f:14:13:d4:ab:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Oct 4 09:07:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eb40b4fb5e63162c370d1595e10ba8b98a910ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:ec:07:a0:fa:07:e5:39:88:30:7d:f2:9e:
05:2e:6c:28:f1:f8:48:64:41:ad:cc:68:dc:90:ae:
6e:0e:af:4f:47:5b:64:14:c6:9e:6d:32:0f:fe:b7:
30:b2:1a:1e:e0:83:97:a6:77:fa:94:76:28:b1:2d:
67:0e:c3:15:a8:39:9a:e8:21:6f:e8:2a:0d:f2:16:
01:0d:c8:1a:81:7d:e3:c3:4c:58:32:77:1e:b4:05:
f5:cf:8c:e0:ab:87:0e:bd:f8:4b:b0:a0:50:01:8a:
e0:e9:88:d4:bf:be:65:e0:a3:b1:9b:c0:c4:14:d3:
10:82:43:cf:ca:fa:78:df:e5:9c:d8:5b:c3:e2:02:
1a:3d:07:df:d0:86:9e:d2:36:aa:5f:47:01:88:dd:
0b:e0:22:01:9f:61:32:9e:79:6f:41:16:48:3b:2d:
02:24:d5:0a:86:08:40:a5:be:41:1e:a8:6d:cb:73:
1a:21:83:e1:02:1a:39:71:4f:4c:c4:5a:14:71:f7:
f9:7a:12:9a:e8:25:88:19:a7:bf:46:c6:62:33:f5:
bb:34:29:1e:3c:2a:9e:a8:7f:76:02:3d:bf:0d:03:
d6:86:3e:51:10:82:8e:e3:a0:f5:74:fc:e7:2d:4a:
2e:ae:a3:ff:98:b9:8f:c4:3f:70:b3:c0:39:a9:09:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B4:0B:4F:B5:E6:31:62:C3:70:D1:59:5E:10:BA:8B:98:A9:10:ED
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/PrQLT7XmMWLDcNFZXhC6i5ipEO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.92.227.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c7:95:4b:31:a8:a6:35:32:79:9c:2c:49:a3:aa:89:a9:2c:
e7:e1:00:84:9a:bc:74:b0:4b:86:d5:52:9a:03:44:5d:32:69:
db:f3:24:a5:17:18:20:ab:1b:4f:0f:8b:b9:87:3c:20:43:a9:
3f:4a:57:8e:67:09:e4:09:e8:c7:cf:e6:d4:d0:9f:60:9a:cb:
f9:80:e1:0c:d9:46:69:09:e1:b9:0d:a6:e0:46:8b:5b:a9:17:
bd:d3:c9:a1:8d:ce:8c:11:cb:5a:8e:fd:ab:e5:2c:d2:d1:f2:
98:fa:4f:cb:24:7c:00:4d:92:a2:4b:af:e2:d8:68:a3:22:e4:
1b:e7:19:54:4b:07:49:c7:a6:a9:50:37:f0:13:2a:ca:09:3e:
71:bc:f8:09:ea:75:15:f0:7c:c1:4a:1c:ad:6d:ad:4e:16:5b:
a6:8c:a3:64:57:e2:0a:bf:d6:27:7d:86:89:57:42:29:9f:a7:
38:9a:4a:ad:4b:3c:58:20:c2:cb:09:31:66:f8:a7:3c:b0:71:
74:12:38:17:34:6f:6d:f4:2c:65:e4:89:5d:90:89:81:f3:b9:
d7:dc:5c:c1:56:36:53:b3:85:4d:09:ba:b6:d4:12:54:c7:47:
a3:6c:3a:56:af:cb:ce:47:d3:f4:7e:54:72:d9:d0:c6:4a:4c:
fc:18:2a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:33:20 2025 by rpki-client