Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dfxLT2JhUGRpQ0jdMayu0W0UwDs.roa
File: dfxLT2JhUGRpQ0jdMayu0W0UwDs.roa (raw, json)
Hash identifier: 2KztM6u3jUXmphQpBi710B81tHtV2zCiNppJGmaNICw=
Subject key identifier: 75:FC:4B:4F:62:61:50:64:69:43:48:DD:31:AC:AE:D1:6D:14:C0:3B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01992D4775ED64CF2C50028E13ED080FAE3A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dfxLT2JhUGRpQ0jdMayu0W0UwDs.roa
Signing time: Tue 09 Sep 2025 07:01:21 +0000
ROA not before: Tue 09 Sep 2025 07:01:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198178
IP address blocks: 109.61.110.0/24 maxlen: 24
146.19.102.0/24 maxlen: 24
185.238.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:47:75:ed:64:cf:2c:50:02:8e:13:ed:08:0f:ae:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 9 07:01:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75fc4b4f62615064694348dd31acaed16d14c03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:44:70:88:18:5e:22:8f:63:4f:44:cd:27:
5a:3c:ed:c6:1d:b7:e7:98:76:51:02:3a:fd:c7:53:
34:30:b9:28:e2:18:0c:f6:ed:79:55:af:33:f2:17:
20:82:49:46:fb:85:65:05:40:61:14:24:fc:df:98:
0b:53:ec:42:a0:ee:63:ae:dd:00:a9:7f:f4:bd:6b:
94:e9:d2:ff:82:3c:73:ec:31:27:b1:d8:bd:b6:5e:
5c:0a:3e:e8:0c:fe:44:62:c2:c8:90:10:d6:83:29:
d8:80:1e:67:7e:b5:ce:e4:09:8f:07:d3:3f:b3:d5:
7f:3a:00:27:82:f0:a7:89:17:b4:c5:fb:46:f8:1b:
eb:1c:a6:b9:64:87:c7:62:32:82:6f:ed:9f:89:30:
46:f9:bc:04:aa:a3:fa:29:62:be:01:d7:ce:8c:95:
46:c4:3e:dc:15:94:39:b5:5e:bc:40:75:48:f2:ae:
e5:60:eb:d2:b4:ef:1d:b4:80:a0:c1:d6:81:2c:c0:
1f:a6:89:95:c2:3b:c1:92:1d:6a:89:f3:45:21:75:
f2:21:2d:66:86:d8:dc:d4:e3:34:50:c6:aa:82:e1:
4e:52:2a:ea:bd:23:7c:06:b6:f3:0e:0f:7d:87:81:
90:02:cd:f3:1a:65:f6:d2:8d:54:10:45:f9:2e:4f:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FC:4B:4F:62:61:50:64:69:43:48:DD:31:AC:AE:D1:6D:14:C0:3B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dfxLT2JhUGRpQ0jdMayu0W0UwDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.61.110.0/24
146.19.102.0/24
185.238.190.0/24
Signature Algorithm: sha256WithRSAEncryption
99:33:94:02:7a:a4:15:2a:c0:f3:5c:b0:1d:44:4f:6f:b4:4b:
7a:67:94:e1:aa:99:3e:08:d6:c7:d6:11:8b:1f:9f:d0:6a:ca:
b3:68:dd:08:7d:25:5c:a1:8c:e1:da:dc:b5:46:bb:76:db:31:
56:0c:bd:7b:35:7c:52:cd:33:5c:cf:b2:57:46:21:57:c8:8a:
49:18:29:cf:aa:22:71:9e:ef:d7:f3:23:4b:b1:95:66:4d:14:
95:16:ef:5e:5d:ea:19:b0:bc:5d:76:12:e8:bd:65:a7:a8:10:
98:94:93:64:48:e8:0d:c8:d9:7c:0a:86:d2:fc:f2:6c:2e:2d:
9d:8b:ad:73:9b:ea:c0:bb:08:a9:45:ff:c4:a2:6e:3a:ae:98:
d6:84:d9:c6:e9:e3:26:30:07:cc:87:b9:45:d0:45:c9:77:14:
ef:66:2a:fd:d2:1f:3f:93:29:c0:16:09:f4:07:08:d7:c2:23:
96:d7:dd:47:64:b2:c8:ce:71:8e:b6:ba:ed:8e:48:a1:92:e3:
57:49:f3:15:bc:58:2a:f4:e7:8c:5d:cd:36:81:5d:e1:5f:bb:
2a:fc:63:fa:bc:46:7d:7e:d8:5f:f3:c6:54:03:fb:87:fd:46:
d0:79:c8:40:e6:d0:8b:cc:22:11:2f:6d:1e:cc:a3:13:85:32:
5d:f1:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:06:07 2025 by rpki-client