Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/Pd6y31NGl2E53PuxfNWQ2uuokU4.roa
File: Pd6y31NGl2E53PuxfNWQ2uuokU4.roa (raw, json)
Hash identifier: JFGjsWEPBeCuSIlrpF4Du2GayxrXTaSof5LXDS+PGd4=
Subject key identifier: 3D:DE:B2:DF:53:46:97:61:39:DC:FB:B1:7C:D5:90:DA:EB:A8:91:4E
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 019A68FE73E018DEE2DAF37FF6EC538EA3D9
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/Pd6y31NGl2E53PuxfNWQ2uuokU4.roa
Signing time: Sun 09 Nov 2025 14:21:37 +0000
ROA not before: Sun 09 Nov 2025 14:21:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13079
IP address blocks: 213.168.128.0/19 maxlen: 24
213.168.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:68:fe:73:e0:18:de:e2:da:f3:7f:f6:ec:53:8e:a3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Nov 9 14:21:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ddeb2df5346976139dcfbb17cd590daeba8914e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:00:f8:fc:47:18:04:e4:ec:af:dd:63:4e:
5c:f2:5b:02:42:ed:80:ea:9e:0e:68:1d:1c:13:88:
9e:75:5a:5b:61:0b:87:e0:87:24:57:14:5a:62:f9:
d8:39:c5:0c:12:f1:6a:4d:c6:aa:4d:e1:ff:fe:a4:
6d:cd:03:cf:5f:79:01:01:c3:0d:39:44:37:b3:d8:
5f:34:54:bc:4b:b8:51:9b:16:a0:99:43:10:87:aa:
fc:79:7d:5b:4c:6b:8c:c8:6d:6e:8e:a2:8e:b8:70:
7b:50:0f:26:29:8a:3b:e1:a3:15:1f:dc:e7:f7:93:
8d:c0:52:c2:22:9d:79:85:8c:20:0d:8a:6f:d0:0f:
81:68:0b:4c:d0:ab:7e:2f:6a:ab:c2:80:fd:2a:c5:
14:38:03:5c:dd:6c:03:cd:b8:0b:6e:10:2d:0c:41:
15:6a:4f:67:0b:11:1a:29:99:a4:db:8e:f7:37:1a:
b5:bf:2a:26:e4:4c:b9:5e:0b:24:e8:56:b9:f7:b5:
05:e5:31:cb:94:36:d9:40:00:9b:2e:1c:91:2e:9c:
c6:df:1a:e1:82:b5:04:72:6d:e8:36:8a:f2:ab:12:
66:56:83:53:04:be:a2:e8:73:d7:f6:49:de:ac:fb:
95:f9:53:eb:2f:47:37:26:86:89:54:c7:0b:9f:37:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DE:B2:DF:53:46:97:61:39:DC:FB:B1:7C:D5:90:DA:EB:A8:91:4E
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/Pd6y31NGl2E53PuxfNWQ2uuokU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.168.128.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:44:53:f1:67:8d:a6:ef:cb:7e:73:0f:2b:47:63:6e:47:03:
6e:da:2d:9c:ed:70:7d:6c:ee:20:0c:92:c6:f7:b5:09:b4:0c:
0c:b6:f5:16:11:44:e4:11:a4:5f:58:38:a7:6d:8d:c3:b0:99:
8f:51:51:79:09:5e:55:ad:e0:f3:b0:64:30:86:0e:ca:f2:d7:
bc:8c:98:29:f2:8d:8d:23:ea:58:f1:4e:e9:88:fb:b2:84:f4:
21:9a:5b:69:43:88:b9:c3:9f:25:28:85:53:ff:3d:82:f5:57:
ea:54:dc:71:70:6e:c9:00:b1:68:af:22:04:9b:95:6a:a4:e0:
08:b2:00:38:b7:ed:b9:d6:81:83:2d:b2:95:b0:82:70:8b:ab:
d9:79:bc:fd:74:59:a1:f9:cc:3d:11:2b:66:36:81:67:06:db:
48:82:95:60:5e:7b:33:4f:9e:42:4f:0a:2b:28:0c:b0:a4:10:
47:fd:46:52:e6:f7:56:d2:23:26:2d:4e:2a:16:b9:35:a5:01:
fd:5b:e1:d9:a6:18:a2:5c:b1:3b:00:b9:ed:93:8d:5a:fa:68:
50:89:c1:74:10:14:17:87:c4:9f:82:5f:f3:28:5b:27:23:06:
8a:59:ab:f6:68:10:89:72:40:4b:a8:be:09:a8:40:4e:71:f0:
58:e3:a7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:53:16 2025 by rpki-client