Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/XavjocBFIutlJdfL1sKuNImyrMg.roa
File: XavjocBFIutlJdfL1sKuNImyrMg.roa (raw, json)
Hash identifier: oh/q69e5+eXgvcKp0NEmx4+imfE5MSwLrZ5wZjvugUY=
Subject key identifier: 5D:AB:E3:A1:C0:45:22:EB:65:25:D7:CB:D6:C2:AE:34:89:B2:AC:C8
Certificate issuer: /CN=fbbe33c8d18e53bfd24822098dc748640550c504
Certificate serial: 0198182EA078EA4D6B07BCCD1AF4073AA8C6
Authority key identifier: FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/XavjocBFIutlJdfL1sKuNImyrMg.roa
Signing time: Thu 17 Jul 2025 11:39:25 +0000
ROA not before: Thu 17 Jul 2025 11:39:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204513
IP address blocks: 185.118.106.0/24 maxlen: 24
185.118.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:2e:a0:78:ea:4d:6b:07:bc:cd:1a:f4:07:3a:a8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe33c8d18e53bfd24822098dc748640550c504
Validity
Not Before: Jul 17 11:39:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dabe3a1c04522eb6525d7cbd6c2ae3489b2acc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:31:71:ac:1a:9b:7e:59:61:cc:63:a5:8e:
cb:a9:c4:4a:a5:e0:f2:9f:4a:bc:ea:9d:30:87:7b:
9b:9c:5d:80:c0:80:be:6d:7c:84:72:2c:ae:8e:ee:
ef:22:7e:79:7d:f1:8f:f4:e6:7b:68:fe:45:51:c9:
df:f9:87:28:56:82:6b:f0:d4:8f:5c:54:8a:57:75:
d2:09:36:68:97:34:c3:b7:4c:61:24:2f:b5:b3:74:
db:a4:f7:43:5a:ff:c2:46:00:00:07:27:21:07:b7:
22:c4:22:72:92:aa:e8:ca:d1:fc:d7:50:ce:e9:1c:
ef:77:6b:66:65:41:66:61:d6:72:5e:2c:8d:a5:71:
f9:93:90:c2:70:4a:73:de:32:75:23:1f:ee:4d:13:
9a:75:86:47:05:03:dc:6f:25:aa:0a:ce:fe:49:41:
e1:89:44:c1:01:cc:7f:1f:0f:82:5f:bf:97:77:f4:
9c:c8:cf:d5:5a:f3:ed:cb:cd:93:59:7a:67:44:50:
db:6e:53:d4:ee:c6:d8:16:22:80:43:47:6e:d4:9e:
3b:d9:ba:c0:03:9f:a2:94:df:2b:12:ad:32:22:ea:
e4:b5:5a:4b:b1:be:17:0e:79:d2:7f:52:82:81:5a:
0b:9a:b0:e2:32:f7:2b:1b:9c:f4:5b:46:fa:35:b3:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AB:E3:A1:C0:45:22:EB:65:25:D7:CB:D6:C2:AE:34:89:B2:AC:C8
X509v3 Authority Key Identifier:
keyid:FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/XavjocBFIutlJdfL1sKuNImyrMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.106.0/23
Signature Algorithm: sha256WithRSAEncryption
55:e1:4e:5c:11:69:24:25:88:a3:0e:ba:37:19:13:f6:40:0d:
06:3c:3e:40:0a:13:ad:9b:54:a0:9d:41:ca:51:67:be:22:67:
4a:d2:58:d0:e7:fb:e9:31:33:a2:7e:65:5b:3d:20:03:d9:86:
59:02:3f:ee:b5:c7:74:57:f2:ed:23:3a:46:6f:d4:44:22:84:
68:76:a2:6b:bb:4b:11:c2:db:d0:2a:fd:78:89:15:bc:e9:17:
50:38:c7:81:9f:48:67:73:10:5b:0b:b2:0e:67:c3:ef:d9:65:
ba:ea:6d:9e:be:89:ea:97:50:21:d2:82:cc:a3:2e:96:95:36:
ca:aa:6c:6f:f4:7e:15:ed:35:88:14:09:2b:13:f7:8a:88:8d:
68:24:eb:e1:53:aa:9b:ca:95:7a:19:b2:e9:38:59:4e:53:e3:
05:ad:15:cb:31:2c:e5:50:6b:55:db:83:11:41:c4:d0:2c:83:
20:f0:1f:32:a5:28:5a:35:cb:41:28:5e:56:40:51:c1:fb:8e:
d7:9f:8a:45:75:3e:fa:71:c2:38:e5:dc:21:7b:f7:3a:9c:6c:
34:6a:03:ce:b0:6d:c7:88:37:54:56:10:ff:a1:33:d6:55:2d:
c3:41:eb:85:55:97:45:82:55:9f:ed:b5:c5:ea:14:3c:1e:ef:
13:47:31:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:41 2025 by rpki-client