Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/f6JeufGW2lCJK2Fq36WrD5nhNQ4.roa
File: f6JeufGW2lCJK2Fq36WrD5nhNQ4.roa (raw, json)
Hash identifier: fWpRQy4BGYecUExHy8QQpY4WySNw0miKYzuPwOjiykQ=
Subject key identifier: 7F:A2:5E:B9:F1:96:DA:50:89:2B:61:6A:DF:A5:AB:0F:99:E1:35:0E
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 019A07C8FBC769481435ED2915099140D011
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/f6JeufGW2lCJK2Fq36WrD5nhNQ4.roa
Signing time: Tue 21 Oct 2025 17:20:03 +0000
ROA not before: Tue 21 Oct 2025 17:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.93.14.0/23 maxlen: 23
185.93.14.0/24 maxlen: 24
185.93.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:c8:fb:c7:69:48:14:35:ed:29:15:09:91:40:d0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: Oct 21 17:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fa25eb9f196da50892b616adfa5ab0f99e1350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:4b:61:fb:28:69:80:e4:4d:02:d3:c5:7d:
44:90:5d:76:67:f3:1e:67:9f:11:a9:a8:cb:04:86:
8f:54:64:6c:e6:36:9e:8a:66:de:f3:e4:ff:1c:15:
73:a9:96:df:b7:ad:9d:68:7e:aa:a5:bf:37:3a:f9:
6a:7b:32:1d:3c:23:89:d2:d5:80:86:fd:0c:0d:45:
e1:67:53:4a:39:13:ed:20:21:6a:13:0d:b3:08:c3:
9c:6c:fb:81:21:2b:ef:98:a3:96:d0:f2:ab:f7:27:
21:bd:22:26:21:cf:dd:e7:36:f5:d5:b0:6e:25:5c:
df:fa:a7:ff:81:f3:40:c7:35:86:7e:d2:9a:87:7f:
f5:c9:56:8d:78:97:fd:7a:16:43:f1:fe:be:26:94:
62:48:db:62:7f:36:55:3b:90:39:81:6c:4b:f3:73:
30:f3:37:4b:47:0a:b2:5d:19:1d:38:7a:8e:23:5b:
18:0f:70:1e:aa:2e:f1:77:2c:d8:21:a5:b4:8c:75:
aa:e6:60:dc:70:44:51:8d:74:c2:ff:6d:8c:e8:92:
c2:01:db:cd:2b:5e:2e:1e:38:47:87:b4:79:e8:7f:
e6:d6:31:a0:dd:65:4f:44:43:4f:05:70:c3:c1:98:
d9:26:5f:2a:8e:83:c2:77:5c:c1:b4:4a:35:e6:3b:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A2:5E:B9:F1:96:DA:50:89:2B:61:6A:DF:A5:AB:0F:99:E1:35:0E
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/f6JeufGW2lCJK2Fq36WrD5nhNQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.14.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:d5:d0:f7:4e:57:11:e6:cb:34:20:b8:db:3d:e9:76:a1:4a:
05:56:0f:9c:ab:3e:99:d9:26:32:75:58:13:60:6e:90:17:45:
2f:da:7e:6b:bc:4c:17:b4:d1:51:b4:61:fb:e1:9e:b5:04:32:
b1:7d:ae:f5:02:85:ee:08:01:a2:ad:8b:3b:b2:ce:67:7c:14:
68:95:1f:e2:81:88:99:9e:17:c1:36:c0:5b:1c:a4:72:d2:35:
ef:d5:f8:52:ec:2a:a1:97:26:8d:cf:08:be:9c:78:b0:8b:54:
0c:ca:a3:57:ea:1d:f9:05:6f:c2:fa:29:cf:70:81:60:1e:6f:
f5:7a:12:89:09:49:1f:13:a5:c9:9c:8f:cd:9c:45:d0:06:44:
30:72:5c:9a:61:7f:47:b2:8e:37:54:a3:a5:1b:6b:db:22:07:
b4:96:18:72:5e:0f:76:aa:90:f8:6e:e2:94:f8:7e:00:18:bd:
45:12:79:4a:b8:bb:16:da:b5:76:b1:49:46:1e:39:65:fc:3c:
b4:4c:6d:9f:61:2e:09:9f:d9:83:18:4f:50:8f:e9:00:cd:da:
cc:43:3e:bf:42:88:6f:58:f9:c5:ff:84:13:d0:d1:ea:07:52:
6c:47:4b:66:af:c3:8c:df:a1:04:e9:ff:c4:01:62:e5:dc:55:
5b:35:bd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:51:00 2025 by rpki-client