Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/iuZqfYD0hiTIvYqwWHAL_dTt-d8.roa
File: iuZqfYD0hiTIvYqwWHAL_dTt-d8.roa (raw, json)
Hash identifier: TADQbHhC3NVuwnA1AHCcNT5GSSVPXnhWpWfVu/iqF94=
Subject key identifier: 8A:E6:6A:7D:80:F4:86:24:C8:BD:8A:B0:58:70:0B:FD:D4:ED:F9:DF
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 0199A5246C6AC9AA7ADBAE57CD983F2C625A
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/iuZqfYD0hiTIvYqwWHAL_dTt-d8.roa
Signing time: Thu 02 Oct 2025 13:37:31 +0000
ROA not before: Thu 02 Oct 2025 13:37:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.23.56.0/22 maxlen: 22
2a00:6be0::/32 maxlen: 32
2a04:d780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 04:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:24:6c:6a:c9:aa:7a:db:ae:57:cd:98:3f:2c:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Oct 2 13:37:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ae66a7d80f48624c8bd8ab058700bfdd4edf9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:16:b7:6b:be:4f:51:0c:74:be:df:36:72:
ce:8b:f4:37:56:94:f4:0a:97:d4:8e:89:32:4c:aa:
f1:c7:88:d7:50:21:42:69:0e:22:77:75:15:b9:18:
49:ad:29:82:a2:a7:c5:ca:63:90:be:a8:9f:8b:9d:
67:df:d6:52:62:37:c3:5c:d4:1f:99:40:1d:36:4a:
34:61:e0:94:1e:c5:17:eb:f6:91:bb:81:65:2e:10:
6f:41:7e:a4:63:2e:97:c9:c1:ac:bc:f4:86:f8:f9:
38:b5:4f:2b:09:fd:ec:aa:92:32:2d:ca:1f:d4:81:
02:b8:dd:a7:ab:a5:bd:b6:af:37:c7:5b:fe:8d:1c:
d0:33:a0:5b:04:df:98:f1:db:ee:34:c8:d7:c0:37:
c3:8c:a4:45:b2:2f:5a:e6:70:4c:16:97:4d:c7:a0:
1f:a4:4b:f5:b6:b7:ef:5a:d3:01:0f:4a:c9:70:e7:
61:9b:55:4b:61:3e:c0:bd:1b:0e:42:69:cd:fc:65:
d3:4e:09:da:c0:e7:e4:04:4e:41:72:49:4f:73:fd:
44:ac:22:b6:c9:45:bc:22:d0:3f:c8:c9:0c:b6:a4:
af:93:07:63:b3:e4:27:72:d2:76:8c:f4:44:58:c5:
ec:93:29:49:c0:dd:56:98:fc:01:e8:85:39:02:e4:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E6:6A:7D:80:F4:86:24:C8:BD:8A:B0:58:70:0B:FD:D4:ED:F9:DF
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/iuZqfYD0hiTIvYqwWHAL_dTt-d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.56.0/22
IPv6:
2a00:6be0::/32
2a04:d780::/29
Signature Algorithm: sha256WithRSAEncryption
b6:43:ee:d7:c5:8e:47:5b:c2:ae:a7:61:35:0e:53:76:ae:e3:
94:04:87:3d:b6:6f:2d:f5:43:d5:dc:6f:d2:df:d6:d8:ae:d8:
1e:7e:59:80:4e:7a:5f:6c:68:0f:49:3a:30:64:19:1b:be:27:
6b:6f:25:54:c0:94:9e:26:38:da:e6:cd:12:dd:01:9a:b6:cc:
91:42:f6:09:39:2b:26:b6:24:07:33:4e:ef:ea:78:44:47:5d:
de:9c:09:47:3d:4b:30:0c:35:4f:75:6a:71:48:21:05:3a:cb:
03:63:37:9d:79:86:22:fa:1a:9f:02:b3:09:e2:e5:58:db:8a:
44:7d:7d:bd:5d:a5:70:36:5f:68:1e:d6:67:66:fc:78:16:fe:
f7:46:51:ed:56:ef:9c:b8:5e:ea:c8:4e:f0:cf:82:9e:7d:46:
cb:d7:88:19:6a:6d:1a:5d:87:f7:e3:fc:e3:c6:3a:0b:b3:c5:
1e:53:af:10:61:44:a4:2d:27:89:7a:26:54:f1:77:31:da:a5:
b2:6c:dd:5b:44:07:2c:37:41:6a:c5:3c:44:03:ff:d2:76:ed:
47:f4:cb:58:16:dd:d5:28:e7:a0:70:6c:4a:be:19:cd:ac:55:
1a:c9:e9:49:8a:82:30:0d:ad:89:3c:1b:b4:93:d1:2a:5f:63:
1b:67:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:43 2025 by rpki-client