Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/goaehW6miRu49OgNqpgG3rbQsXI.roa
File: goaehW6miRu49OgNqpgG3rbQsXI.roa (raw, json)
Hash identifier: ONFsgrV+lwe2PVqjFxq7Gt+JlrAemij5QB6wyp+3m1Y=
Subject key identifier: 82:86:9E:85:6E:A6:89:1B:B8:F4:E8:0D:AA:98:06:DE:B6:D0:B1:72
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 019A0C549CE136CF3C30CC3420828910B33E
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/goaehW6miRu49OgNqpgG3rbQsXI.roa
Signing time: Wed 22 Oct 2025 14:31:03 +0000
ROA not before: Wed 22 Oct 2025 14:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213657
IP address blocks: 93.180.132.0/24 maxlen: 24
93.180.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:54:9c:e1:36:cf:3c:30:cc:34:20:82:89:10:b3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Oct 22 14:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82869e856ea6891bb8f4e80daa9806deb6d0b172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:68:1d:3b:e4:ec:78:47:f9:29:a6:af:78:
ee:90:90:93:76:e4:34:67:27:43:64:0a:7f:c1:84:
48:91:31:a4:6d:3b:df:ad:9e:68:fb:dc:93:a5:f0:
1f:8b:07:a7:28:9b:dc:9f:53:bf:3f:8d:70:4d:e6:
ed:68:85:e8:e0:76:5f:64:ba:68:97:4d:32:56:53:
45:12:7a:37:26:b7:57:66:bc:61:c4:80:bf:0d:1f:
f1:66:26:75:27:37:5b:43:7e:96:7e:6c:cc:fd:4f:
c7:38:b3:23:b4:57:c4:73:b1:bb:69:e4:a3:61:36:
d3:5c:21:7f:4d:57:96:9f:79:6b:18:ce:d7:00:8f:
94:65:2c:82:2b:c8:35:ee:5e:ed:99:67:5a:a5:9a:
0f:be:07:2f:1b:02:9a:80:2e:73:85:d1:a0:d8:a1:
61:3c:47:30:b8:f2:b3:c7:c2:70:f4:f8:c6:ad:f1:
ec:04:df:ef:1e:18:b8:58:46:0f:38:ef:77:ec:1a:
75:bd:1e:44:24:cb:69:6e:8e:d3:4c:63:d1:b5:84:
e1:c2:6d:4f:b7:eb:dc:a3:ef:b0:ab:b1:42:7c:4a:
f0:2a:be:a8:7a:bc:8a:67:6b:30:4f:1d:34:48:60:
36:09:6c:12:c5:be:8d:4b:d8:a5:33:6e:10:7e:9e:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:86:9E:85:6E:A6:89:1B:B8:F4:E8:0D:AA:98:06:DE:B6:D0:B1:72
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/goaehW6miRu49OgNqpgG3rbQsXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.132.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:f7:ea:25:a9:34:5b:ec:28:20:fd:c5:16:dd:ad:c1:09:ce:
91:65:a6:60:98:50:31:e1:e3:c6:68:06:fc:60:69:66:d1:ba:
7f:4c:a7:01:b6:61:30:1f:ec:c5:24:b8:95:0b:4a:47:86:95:
f8:d7:64:89:4d:65:0e:16:45:c7:01:37:2e:e7:4c:2f:7e:83:
64:ee:ea:f7:a8:c9:20:fe:5f:fb:1d:06:5c:7d:94:d8:a1:d8:
8f:c6:ac:36:12:92:e4:db:a2:6a:90:54:65:d4:c6:11:43:e3:
ce:b7:02:76:1a:9d:d1:41:a5:ee:bc:81:7c:0e:10:58:6d:e3:
ce:1c:ff:f1:8f:e3:8b:b6:67:95:80:d8:46:55:8a:fb:e3:a9:
d1:96:24:69:02:03:0d:16:e5:d8:81:29:34:bc:f5:cb:02:3e:
14:cb:7f:bc:49:eb:ed:42:80:4e:0d:88:02:80:a4:7a:6c:0f:
b0:f8:ba:29:16:6f:a1:7c:d0:44:cc:86:12:91:c0:68:b2:e5:
6a:66:08:35:db:45:ca:ae:df:51:7e:ac:0d:af:ea:5e:6d:66:
3c:3e:09:e9:81:d9:c9:64:1f:6e:5d:31:01:98:a7:2a:63:a9:
c0:7b:6f:d7:cf:7c:01:0f:61:e2:b7:dd:74:ab:85:40:8f:2e:
a2:2f:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:05:21 2025 by rpki-client