Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/UpC6gDLL8NBJUYJh0fB1QdxJsxc.roa
File: UpC6gDLL8NBJUYJh0fB1QdxJsxc.roa (raw, json)
Hash identifier: AMS5OmBsrOosO5V/m0O5SOOQUVpbn+jWhd8fpreEyHw=
Subject key identifier: 52:90:BA:80:32:CB:F0:D0:49:51:82:61:D1:F0:75:41:DC:49:B3:17
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 019A54BFBD9565910E974BC97A3487CC4A23
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/UpC6gDLL8NBJUYJh0fB1QdxJsxc.roa
Signing time: Wed 05 Nov 2025 16:00:43 +0000
ROA not before: Wed 05 Nov 2025 16:00:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204949
IP address blocks: 89.23.125.0/24 maxlen: 24
185.219.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:bd:95:65:91:0e:97:4b:c9:7a:34:87:cc:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Nov 5 16:00:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5290ba8032cbf0d049518261d1f07541dc49b317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:55:e8:45:08:21:8a:03:12:6d:9e:95:7b:
26:fd:30:b7:cc:13:67:6a:4c:fb:1e:43:cc:e3:9e:
24:3b:5b:aa:b1:d3:c9:11:25:5a:68:ea:4d:c9:98:
39:19:d1:11:67:2d:89:cc:f7:2b:94:bc:20:c5:8e:
61:d7:cd:31:60:9a:60:fa:20:5b:ec:54:23:80:9d:
24:18:f8:90:aa:4b:6b:03:cf:24:f6:ae:bf:30:1f:
29:fd:bb:a6:aa:a1:4e:21:12:cc:e0:a4:87:b3:cb:
43:7c:53:ff:fe:8e:47:35:f7:41:d4:25:f0:b2:78:
1b:d0:a0:ab:19:da:e1:45:b5:27:77:1d:b8:76:5a:
1d:0d:f3:5d:c8:a2:c9:e2:65:38:d9:8f:9c:b2:29:
d1:0f:ce:46:5d:c0:5d:d4:40:fc:5d:30:a0:f6:ee:
4e:9d:50:a2:ac:b7:e0:e6:87:b8:00:24:f1:56:74:
62:80:91:a7:0c:f1:20:2d:c9:8b:9a:26:69:e0:e5:
7f:94:c5:75:c6:7b:37:93:a0:5b:94:1d:1e:2f:69:
f3:54:e2:81:f0:4b:60:54:12:da:7a:fd:12:01:c0:
d8:73:3b:75:38:7c:d3:e7:21:36:b9:23:f0:1b:ab:
51:9b:aa:12:24:68:ad:87:78:72:fe:12:66:d1:48:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:90:BA:80:32:CB:F0:D0:49:51:82:61:D1:F0:75:41:DC:49:B3:17
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/UpC6gDLL8NBJUYJh0fB1QdxJsxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.125.0/24
185.219.168.0/22
Signature Algorithm: sha256WithRSAEncryption
53:00:ae:ad:b5:9d:f0:db:28:e3:d6:86:3a:cc:79:b5:6f:e8:
84:84:30:6c:6c:e8:02:ed:ca:c4:35:30:3e:73:c1:e0:a9:76:
5c:98:5b:70:d5:1f:1a:fd:03:39:b5:c5:a9:f1:0e:41:3b:29:
76:ed:e6:6e:61:13:fd:1c:92:45:23:1c:5b:e7:8a:6a:18:eb:
ed:ba:76:c5:49:6a:f7:05:4c:11:37:38:bb:7b:85:54:80:44:
6e:97:62:19:81:96:f3:92:f9:dc:68:b8:9c:b2:81:15:c7:fe:
f7:f3:c5:55:65:f2:ca:3b:0d:91:e7:6e:12:1f:0f:98:19:19:
a3:60:01:8d:24:d8:7a:a7:62:fc:62:7f:6d:1a:47:01:11:79:
c6:23:2f:03:d4:3c:a8:31:56:f0:80:42:7f:db:4c:bf:9d:d4:
65:6d:85:e0:21:65:4d:3b:85:35:30:36:d2:d3:6c:89:7f:26:
d8:71:af:3c:5f:ea:c4:6c:88:b0:14:0c:07:2d:7c:36:f5:12:
a4:84:93:f1:25:f0:82:f2:e3:f0:ae:5a:33:20:ac:95:9c:02:
de:12:3d:2c:9c:d6:9b:1b:7f:58:ac:72:ee:bc:02:ff:4e:aa:
db:8b:3a:af:03:4c:8e:dc:0c:92:67:f9:d2:6d:c1:c0:f0:69:
ce:87:b9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:26 2025 by rpki-client