Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/AGfqt0Fez0MZXwHxBwMvHI2laJc.roa
File: AGfqt0Fez0MZXwHxBwMvHI2laJc.roa (raw, json)
Hash identifier: 3flR0vw+7HV07hNU6MM3VzWxFgugACGxcRcbeKB+uUo=
Subject key identifier: 00:67:EA:B7:41:5E:CF:43:19:5F:01:F1:07:03:2F:1C:8D:A5:68:97
Certificate issuer: /CN=188f13c9cc14f55ee2220b44976992d11d5de871
Certificate serial: 019A4E207CC59D69818FC30468FED2EEA28A
Authority key identifier: 18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/AGfqt0Fez0MZXwHxBwMvHI2laJc.roa
Signing time: Tue 04 Nov 2025 09:09:03 +0000
ROA not before: Tue 04 Nov 2025 09:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206272
IP address blocks: 171.22.28.0/24 maxlen: 24
2a0a:b680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:20:7c:c5:9d:69:81:8f:c3:04:68:fe:d2:ee:a2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188f13c9cc14f55ee2220b44976992d11d5de871
Validity
Not Before: Nov 4 09:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0067eab7415ecf43195f01f107032f1c8da56897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:fd:6b:d8:21:f1:a7:a5:dc:d0:f4:26:b0:
ce:7d:83:23:3b:02:45:b0:68:9a:bf:f6:01:ce:53:
d7:74:46:0b:13:ed:30:dd:56:ff:07:00:9e:59:47:
88:f3:97:96:c8:35:6f:bf:b5:17:e0:46:0e:7a:ef:
33:11:9a:36:fe:c6:d6:56:0d:87:18:12:7b:6b:e1:
0e:ff:9e:bc:61:fe:52:c9:48:32:37:b9:f8:2e:71:
2e:fd:95:11:52:e3:b9:5b:66:cf:15:bf:2e:3a:ae:
45:f1:cd:9c:0c:8c:a0:c9:cb:02:f8:d9:82:4a:8b:
71:a8:7a:69:3b:64:d2:2d:7c:8b:29:44:65:73:1f:
5f:18:3a:97:79:b3:2a:40:3b:ea:1c:c9:08:6d:30:
37:e9:fd:5f:d0:c6:b2:bd:35:38:72:82:99:6f:d2:
c0:de:91:dd:d1:e9:28:98:91:20:b4:63:93:ea:d4:
65:14:26:fc:b8:17:1a:89:98:0b:29:a1:c2:06:98:
8a:42:20:61:6c:ef:2d:cd:84:73:cd:c9:28:0c:ba:
6c:17:b2:db:96:da:54:bc:8b:1d:c7:9b:fe:ef:22:
0e:59:2c:d7:96:b5:1d:55:8c:36:1b:f3:aa:eb:28:
9d:73:41:30:94:70:46:d8:ea:57:41:d5:c1:f1:95:
c6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:67:EA:B7:41:5E:CF:43:19:5F:01:F1:07:03:2F:1C:8D:A5:68:97
X509v3 Authority Key Identifier:
keyid:18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/AGfqt0Fez0MZXwHxBwMvHI2laJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/24
IPv6:
2a0a:b680::/29
Signature Algorithm: sha256WithRSAEncryption
0c:97:8b:53:47:90:7a:46:f5:ae:6e:b3:f4:3d:b6:db:a9:f5:
2f:1c:c2:bd:99:b0:6d:4e:a6:de:cc:99:02:49:63:48:79:b5:
f5:c0:c9:ca:8a:3f:57:51:70:fd:89:23:86:1d:b0:c7:6d:84:
45:83:fc:56:99:8a:af:7e:58:74:00:c9:bd:70:eb:3f:e3:2e:
e7:84:ca:8e:bd:7c:82:21:de:36:cd:9d:27:84:7f:4b:0f:1a:
2c:00:42:0c:70:a5:12:e4:39:20:18:f6:c7:a3:52:9d:57:a7:
66:a1:b7:41:b2:d2:31:98:b7:7b:3e:12:b4:f8:66:36:e6:14:
1b:0d:22:74:3e:ea:5d:59:04:a5:f8:53:57:29:22:94:e6:5f:
f0:60:8e:19:29:75:c7:42:98:e0:90:bf:1d:c6:d0:10:6d:e3:
c2:d2:6d:8d:0b:6f:fc:29:3d:4b:19:18:65:16:fa:ed:fa:c4:
d0:15:57:ba:45:55:10:e5:e8:a5:f2:5c:1b:64:f9:c8:99:30:
7b:0d:2f:e2:46:08:d5:b4:8f:3e:1d:9b:82:c1:ef:9a:d6:d0:
ef:3d:6a:09:67:7c:bd:71:30:1e:e6:24:d5:28:57:35:a5:67:
b2:66:0e:6e:98:30:37:72:8c:3b:d5:e4:04:74:1e:98:e7:bb:
d4:72:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:11 2025 by rpki-client