Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/0bxtb69WzBUVjdKE20GYmwjET4I.roa
File: 0bxtb69WzBUVjdKE20GYmwjET4I.roa (raw, json)
Hash identifier: RiCRJs/erh7uqdwd+il/BMZNYORvVEDdS3UwEHhW7yM=
Subject key identifier: D1:BC:6D:6F:AF:56:CC:15:15:8D:D2:84:DB:41:98:9B:08:C4:4F:82
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 019A0203D75E6A30B010F9DBA8565ADE540A
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/0bxtb69WzBUVjdKE20GYmwjET4I.roa
Signing time: Mon 20 Oct 2025 14:26:37 +0000
ROA not before: Mon 20 Oct 2025 14:26:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207033
IP address blocks: 78.159.84.0/24 maxlen: 24
92.55.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:03:d7:5e:6a:30:b0:10:f9:db:a8:56:5a:de:54:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Oct 20 14:26:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1bc6d6faf56cc15158dd284db41989b08c44f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:c6:2b:97:08:ce:8c:b7:31:e1:c3:6c:59:
a5:48:6a:1d:3d:5a:31:5b:07:6c:dc:1e:15:45:61:
ab:7f:c8:69:19:8f:6b:53:70:3b:e2:c6:34:7f:06:
56:56:89:8b:27:58:fc:c4:99:36:71:cf:fc:02:08:
89:30:2c:88:c5:02:e7:48:62:73:12:9c:d9:c6:b5:
66:2b:cf:59:a2:dd:d9:d7:28:2f:c0:4f:bd:10:34:
5d:69:b8:ba:49:53:bc:df:0d:7c:42:d5:31:91:f3:
b5:92:c7:15:34:7f:d7:00:e2:2e:35:36:ad:af:f4:
3c:92:5e:02:0c:2f:dd:67:7f:6e:79:d3:e3:2c:80:
53:da:b5:0b:ad:10:4d:7e:d8:85:6f:92:33:e9:f8:
1f:f4:05:a0:84:72:a7:ac:54:4f:ad:38:a6:be:3e:
b3:88:b7:5f:7d:21:3d:ac:bb:b0:59:10:d2:68:53:
f0:82:83:31:2b:cc:1a:a6:1b:82:c4:4c:a9:64:49:
bb:13:7e:5b:52:96:cc:d6:86:d7:5f:7e:b4:94:27:
0c:5b:e4:3d:cd:02:b8:7a:59:01:8d:15:96:de:cf:
03:48:f9:c2:a5:24:fc:16:35:de:74:89:1e:b0:b6:
ce:4d:15:04:28:97:40:b2:06:16:e7:70:39:a9:e5:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BC:6D:6F:AF:56:CC:15:15:8D:D2:84:DB:41:98:9B:08:C4:4F:82
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/0bxtb69WzBUVjdKE20GYmwjET4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.84.0/24
92.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b0:91:3d:a9:e2:e8:c1:7e:5a:e7:f8:a2:67:83:97:dc:76:
fa:c3:76:09:1d:c1:42:60:14:9e:c9:24:3a:3d:de:63:e5:79:
74:54:ff:44:2a:93:9d:80:d4:c2:78:e7:e6:e5:35:e6:2d:fe:
60:b8:01:75:c3:04:7f:5a:80:eb:d6:53:3f:59:07:5a:66:d5:
e2:30:79:e8:f8:77:47:32:ae:8e:0f:a4:b7:0f:1e:5a:29:02:
81:19:b9:61:26:3b:f6:d2:c5:d6:3b:7a:90:b1:72:fe:03:39:
b5:3d:34:5f:64:96:b7:87:20:09:cd:75:ca:92:b0:8a:01:15:
8f:8f:4a:9c:32:8d:36:4e:79:f2:cf:fd:b0:96:a3:69:3d:8a:
16:17:f1:f3:46:c2:3d:7f:07:ac:b7:61:78:23:8c:09:e0:bf:
e5:7a:33:18:fa:51:2b:aa:f1:b5:3b:a6:23:2a:e4:ab:36:7d:
a4:44:c5:20:5a:d6:95:1b:80:ef:e8:93:33:9f:cf:07:f0:f4:
ae:7c:41:fe:bb:1b:09:31:57:7a:c8:6b:e7:69:8b:65:00:ae:
fb:0d:ff:86:fa:c7:2e:d5:c8:c4:7b:5c:37:f6:f2:c6:90:80:
6e:b9:7b:7b:e7:31:30:07:cd:ff:16:f1:f1:cc:9e:5c:49:78:
40:45:79:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:28:06 2025 by rpki-client