Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/dxfXnbx8g-ueseuqILyAyDh00Qs.roa
File: dxfXnbx8g-ueseuqILyAyDh00Qs.roa (raw, json)
Hash identifier: vb8oCBCazuh1bfgy8OwyPqKmC8xg0hB0ISse4SKyWgE=
Subject key identifier: 77:17:D7:9D:BC:7C:83:EB:9E:B1:EB:AA:20:BC:80:C8:38:74:D1:0B
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019A597BD0AF27F2A238EE11044B4272ECA7
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/dxfXnbx8g-ueseuqILyAyDh00Qs.roa
Signing time: Thu 06 Nov 2025 14:04:37 +0000
ROA not before: Thu 06 Nov 2025 14:04:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 95.170.19.0/24 maxlen: 24
95.170.22.0/24 maxlen: 24
95.170.23.0/24 maxlen: 24
95.170.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Nov 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:7b:d0:af:27:f2:a2:38:ee:11:04:4b:42:72:ec:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Nov 6 14:04:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7717d79dbc7c83eb9eb1ebaa20bc80c83874d10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:59:3a:a7:76:94:18:82:1c:70:f2:c8:20:
39:54:35:80:80:e1:af:38:f7:08:aa:df:45:11:9e:
5e:ee:b0:a4:b6:c9:9b:0b:ff:5a:b8:d4:f9:c5:f3:
2c:a8:4d:91:31:a1:18:66:ac:31:d2:f6:f9:2e:8b:
18:aa:66:12:86:52:45:84:6e:42:41:80:95:33:93:
b8:27:81:e1:34:9d:88:c1:65:42:8f:0d:ad:e9:75:
9a:6b:69:bd:99:51:70:22:00:e4:65:61:68:af:9f:
0a:10:bc:30:fb:06:f9:d0:26:5e:32:5f:cc:ac:4d:
59:f3:d3:91:f4:6c:b8:f4:12:ca:3b:6b:98:91:04:
bc:3e:d7:fb:07:7d:a8:16:5a:ef:29:21:31:8f:46:
30:75:9a:79:d4:ff:55:b8:17:c8:fb:6a:c8:06:0e:
8a:21:e8:d4:9a:ff:58:17:8b:05:63:fb:91:3a:e4:
19:ea:5b:54:a2:ac:24:54:09:97:e6:1c:23:df:0b:
84:c2:62:d3:ba:21:4c:c8:42:d5:c2:a7:c8:e3:20:
3e:12:25:09:d3:63:09:2a:42:e3:2a:3a:cc:be:a2:
a6:78:c3:5c:18:b7:57:43:98:a4:bb:34:bc:b5:4a:
ad:3d:ef:72:13:e6:3f:e8:6c:bc:5c:12:02:90:7a:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:17:D7:9D:BC:7C:83:EB:9E:B1:EB:AA:20:BC:80:C8:38:74:D1:0B
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/dxfXnbx8g-ueseuqILyAyDh00Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.19.0/24
95.170.22.0/23
95.170.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:40:f2:dc:10:62:4e:31:c8:87:a5:de:60:80:76:ad:c4:f8:
67:4c:77:fc:f5:6c:f4:ee:0d:d6:50:ab:1c:4b:1c:58:00:16:
3c:95:73:20:b7:c5:c8:9b:8a:87:9b:82:05:6e:ae:35:c7:8f:
3e:0d:b1:f1:32:db:92:e8:3b:90:c0:3b:6a:95:74:3f:b9:5a:
db:02:54:c6:2a:0b:38:62:68:9b:e0:24:37:f2:13:09:a2:fa:
12:2a:b5:8f:47:17:c9:6c:46:8b:b6:2a:04:8d:de:ba:9c:3b:
2c:6f:52:5a:45:09:eb:4b:57:7c:76:f1:c4:a4:0d:30:d2:4a:
9a:85:ff:8d:cd:13:c7:f8:21:d4:a4:47:77:9f:da:7d:ad:96:
6d:88:50:6c:89:4a:07:a2:c7:1e:08:f4:95:7b:a6:07:0a:cc:
f3:08:45:96:de:5b:d8:8f:d1:d4:74:03:55:a9:d8:9c:6c:df:
1a:72:3d:20:71:66:b0:05:f4:00:cf:01:e5:be:76:37:f5:52:
f6:13:e4:40:e1:3f:35:04:47:16:ae:0e:5e:e6:3a:64:91:62:
49:13:6c:81:be:f3:44:50:a9:87:80:2e:36:af:f1:33:31:bb:
56:be:97:28:5b:9e:a4:4e:01:9f:5b:13:1a:ca:c9:94:cf:b3:
fe:85:d6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 04:18:39 2025 by rpki-client