Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/XDeCLHaiVkzWf79sZ4KqDvjzIWs.roa
File: XDeCLHaiVkzWf79sZ4KqDvjzIWs.roa (raw, json)
Hash identifier: mdSEOgj58o+M0FHsb2DdMQVIKduX1cG2ZN8Y1VO59WE=
Subject key identifier: 5C:37:82:2C:76:A2:56:4C:D6:7F:BF:6C:67:82:AA:0E:F8:F3:21:6B
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019A1BBADF5415C8AC84E675BCFCC5F09FB2
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/XDeCLHaiVkzWf79sZ4KqDvjzIWs.roa
Signing time: Sat 25 Oct 2025 14:17:02 +0000
ROA not before: Sat 25 Oct 2025 14:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.111.32.0/22 maxlen: 24
109.111.34.0/23 maxlen: 24
109.111.48.0/20 maxlen: 20
109.111.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ba:df:54:15:c8:ac:84:e6:75:bc:fc:c5:f0:9f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 25 14:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c37822c76a2564cd67fbf6c6782aa0ef8f3216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:a8:9a:26:6e:27:e6:36:7c:3e:f0:e5:e1:
83:8a:99:d3:5c:b7:37:a4:c2:3c:26:ea:33:1c:85:
0e:38:12:68:46:8a:4e:58:9d:54:b8:ae:8d:99:21:
b4:39:57:6b:e8:47:17:66:45:a0:36:af:46:b0:80:
3f:55:3e:52:37:1b:1e:92:12:d5:fb:7c:b6:e9:66:
fb:8d:d3:a9:21:e2:50:fc:e4:5e:fe:1b:f6:b6:ef:
aa:2c:cb:a7:8b:30:e2:b5:7e:1a:f1:61:af:d7:c5:
50:d6:77:0d:5d:06:dc:0c:b9:08:95:d4:37:b4:cf:
e7:8a:50:61:c9:fc:94:01:86:d4:be:5e:0d:d0:f6:
0d:d2:20:78:a3:2b:cf:a7:45:ca:06:84:e1:b5:54:
c6:ec:e7:85:0b:78:58:9d:03:98:fd:d6:f1:e5:82:
eb:99:9f:9d:c1:a1:7d:be:1c:ef:f1:e6:02:6f:34:
ec:7a:c5:6d:ff:d4:23:b6:ef:0b:0e:be:62:00:50:
b2:6a:f1:12:65:ea:f2:fb:ef:c1:e3:c3:e3:24:ac:
e4:a4:4a:04:f1:bd:83:e9:cd:3b:30:cd:26:18:fe:
2f:f7:d2:95:71:8d:04:d9:b7:92:99:d2:a4:a6:e7:
f2:13:cb:43:b1:2a:c2:90:7d:92:f9:57:cc:c8:8c:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:37:82:2C:76:A2:56:4C:D6:7F:BF:6C:67:82:AA:0E:F8:F3:21:6B
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/XDeCLHaiVkzWf79sZ4KqDvjzIWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.32.0/22
109.111.48.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:1e:6d:11:03:bd:ca:d0:66:8e:ec:d2:f5:fd:f1:25:f2:36:
cf:e1:38:e4:56:b2:0e:25:b8:8f:9d:3d:5e:3b:fd:c6:d5:f7:
f6:84:ae:2c:6f:72:f8:44:12:db:70:34:c6:80:60:54:b2:47:
ff:6e:69:cf:06:7c:a8:d7:8a:23:53:e8:28:e9:57:19:a7:b5:
c1:0d:68:35:9e:82:59:52:00:39:e3:c0:54:4f:94:54:57:2e:
aa:92:c5:6c:91:14:bb:8b:0e:4f:12:aa:4c:46:bd:0f:41:78:
dc:51:f7:b7:7c:ad:9c:a2:99:e7:3d:3d:35:3d:0e:88:03:48:
a9:14:51:01:cf:93:b6:d4:e8:03:b5:6e:d6:3b:bf:5b:13:10:
34:b9:5c:63:45:26:e8:8b:2e:7b:d2:13:d3:fc:9d:2d:bf:21:
fe:ea:26:6c:02:75:59:af:83:dd:ad:ae:d0:e5:f8:65:6a:1a:
e3:b9:e6:3d:d1:60:56:62:4d:6e:c1:6c:f3:65:7c:a9:22:35:
87:2b:9e:51:97:f9:e4:16:28:23:02:a1:c5:3c:2a:98:e8:1a:
4d:fe:5c:27:2f:22:0f:07:4c:5d:bb:93:ae:1c:ae:1a:93:4f:
0c:07:ee:65:ac:f4:8c:a5:df:be:73:b5:d9:06:e7:42:b8:61:
dd:d1:77:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:28:39 2025 by rpki-client