Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/cm0LnEhivdiG8YPAYwDpDqid4TY.roa
File: cm0LnEhivdiG8YPAYwDpDqid4TY.roa (raw, json)
Hash identifier: vvmdzQrIc6DH27Jx2ppbWfOfWIe4OW78TOQB1QE//Zs=
Subject key identifier: 72:6D:0B:9C:48:62:BD:D8:86:F1:83:C0:63:00:E9:0E:A8:9D:E1:36
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0199C586A01C66F47B71B32C388D926CB690
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/cm0LnEhivdiG8YPAYwDpDqid4TY.roa
Signing time: Wed 08 Oct 2025 20:32:38 +0000
ROA not before: Wed 08 Oct 2025 20:32:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 207.244.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:86:a0:1c:66:f4:7b:71:b3:2c:38:8d:92:6c:b6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 8 20:32:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=726d0b9c4862bdd886f183c06300e90ea89de136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:4e:e9:4c:cf:28:54:59:48:d4:2d:7c:b5:
74:68:16:f7:19:54:ba:e0:89:74:8c:24:38:60:9a:
a5:8b:2e:91:1d:fc:d4:5a:3b:6f:cf:b5:c4:74:48:
9f:cd:59:f3:f0:88:15:09:73:02:7f:c3:e8:5c:62:
8b:87:84:63:5c:34:cd:02:10:2e:58:d9:4d:68:fd:
5c:74:bc:f6:79:41:c4:5b:88:cc:0b:2f:39:1d:c5:
24:c2:57:eb:9e:54:d2:93:cf:e7:c5:30:56:87:27:
1e:8e:94:48:67:f1:36:6a:11:8d:ee:ec:c2:f8:d5:
e8:b5:80:0a:2a:d1:57:0f:1c:0e:18:9b:42:af:08:
13:81:a5:35:2c:98:a6:78:9d:6c:8a:db:c5:38:5e:
e9:6c:db:63:05:99:e0:4b:8b:1a:76:ec:ec:45:d2:
0b:ae:e8:20:c5:51:cb:5b:5f:f8:ae:81:8c:6f:86:
4c:c4:0f:4c:55:bf:74:56:72:c2:94:74:c9:90:d0:
5a:a6:32:5e:26:a3:bd:6d:32:82:a2:7c:3e:4a:dd:
df:f4:ee:69:36:a4:5f:87:8e:44:e8:ad:07:ec:1f:
77:b8:31:11:3a:f2:5e:ae:d3:5b:51:1c:01:87:47:
f6:d7:7c:e4:99:c9:ec:35:4b:c1:42:32:da:c7:3d:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6D:0B:9C:48:62:BD:D8:86:F1:83:C0:63:00:E9:0E:A8:9D:E1:36
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/cm0LnEhivdiG8YPAYwDpDqid4TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.208.0/24
Signature Algorithm: sha256WithRSAEncryption
14:02:fa:5a:cb:e4:39:6b:59:8c:d8:cc:fd:23:d1:86:5a:60:
fc:03:12:b2:fc:96:9c:b3:a5:8b:0b:c5:79:74:21:41:c5:3d:
9d:61:34:b0:95:36:44:87:f1:ce:26:e9:83:41:8a:ce:f7:db:
72:a0:17:fb:dc:27:25:b7:cf:3f:63:10:53:d3:74:96:24:f9:
a4:0e:59:76:c2:f7:34:17:b1:93:a7:35:9b:19:8a:1c:ee:f1:
72:d9:94:5a:30:56:5b:aa:7d:b9:ab:a2:b2:9c:28:e3:91:89:
c6:d5:3d:fb:7c:ae:ee:a7:5f:c2:55:25:e4:fa:98:ed:89:fc:
14:92:40:b4:51:53:38:83:98:b2:4f:f9:3a:de:cf:d0:0b:81:
44:e3:e5:c8:8a:86:cf:bb:5f:8b:b3:cb:b9:4f:84:87:a5:7a:
69:c0:5e:10:63:b4:6d:0f:cd:9c:33:0b:49:19:93:4e:ed:0d:
fc:5f:f2:db:51:05:6a:f1:dc:59:f4:a6:8d:30:a7:5c:83:95:
11:c0:6b:9c:f8:15:d7:66:6f:c7:30:41:48:b5:3c:ed:9a:33:
c0:32:b2:24:1b:0f:91:58:9b:5d:a0:25:a4:04:44:70:d7:91:
37:41:b8:80:49:7a:11:e5:2f:79:c3:ea:d8:e9:ee:2d:da:96:
b7:fd:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:38:49 2025 by rpki-client