Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/DxRHYi3CQd120f4p2OEmONB-q_k.roa
File: DxRHYi3CQd120f4p2OEmONB-q_k.roa (raw, json)
Hash identifier: Nm9YPsn3d6IoILadqnF7/U4vjvEcTo5EZcDoiQfCWNI=
Subject key identifier: 0F:14:47:62:2D:C2:41:DD:76:D1:FE:29:D8:E1:26:38:D0:7E:AB:F9
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E24E15B6AB6DD4FA12296507E325A0CD
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/DxRHYi3CQd120f4p2OEmONB-q_k.roa
Signing time: Mon 25 Aug 2025 17:37:04 +0000
ROA not before: Mon 25 Aug 2025 17:37:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 85.203.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:4e:15:b6:ab:6d:d4:fa:12:29:65:07:e3:25:a0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:37:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f1447622dc241dd76d1fe29d8e12638d07eabf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:53:dc:ed:5c:a2:18:c0:8b:9f:46:fd:07:
30:5c:af:a1:4d:52:41:13:86:ba:e6:36:4c:59:6c:
9c:4c:53:3e:5c:57:2f:17:26:2b:96:b6:38:a0:13:
ce:09:27:43:f5:b0:8d:b9:b9:7c:c8:61:44:d9:0a:
6f:17:bd:c6:1d:e4:2f:34:61:7f:a8:1b:2b:32:f8:
56:dc:65:a0:17:9d:a5:a0:b9:18:2d:91:26:92:80:
60:79:7b:94:28:6e:9b:27:d3:ef:3e:cb:db:7d:b4:
8a:1f:9e:8c:49:51:77:08:3a:cc:77:9f:3e:6a:43:
21:a3:a5:00:13:4a:4a:f4:5c:9b:8f:3f:fd:8f:66:
d3:29:db:39:1b:9a:e7:fe:5a:3e:a6:99:fa:d2:35:
97:1f:57:a7:9b:e9:dc:26:4a:cd:4d:48:37:a9:3d:
36:0e:87:32:2e:96:6e:df:c1:11:73:43:27:40:ce:
18:86:64:91:1f:30:df:39:4a:58:03:eb:e1:1a:8f:
63:71:d3:9e:57:26:e0:0e:9d:d2:a0:c6:34:ce:f5:
99:1b:9d:8a:de:88:1c:96:37:52:15:63:03:a0:4c:
e0:31:16:ee:97:b7:db:46:40:ee:b8:0e:12:63:47:
53:88:11:c9:41:a8:1f:42:88:21:4e:b9:3b:75:b6:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:14:47:62:2D:C2:41:DD:76:D1:FE:29:D8:E1:26:38:D0:7E:AB:F9
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/DxRHYi3CQd120f4p2OEmONB-q_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.33.0/24
Signature Algorithm: sha256WithRSAEncryption
14:59:6d:3e:0d:b2:11:56:e6:f4:b8:f0:4b:0c:b7:06:52:0f:
18:07:b5:80:86:37:42:18:de:eb:bd:ef:cc:c8:8c:32:aa:b7:
da:4a:42:f3:56:8e:d1:d5:7e:94:ce:85:74:67:96:d7:4e:89:
f7:5f:f3:0f:83:15:10:4a:ac:b2:91:11:88:59:c6:42:d0:b4:
20:90:bd:48:2f:11:b7:85:20:9d:08:ca:9b:a7:16:b3:30:08:
4f:b0:43:33:46:39:d4:95:a2:d9:e3:5f:46:5f:5d:e9:a4:15:
e6:a4:09:a4:1d:72:3e:0b:b9:6f:10:b1:9b:07:e1:f7:e3:c3:
26:23:21:d4:4d:82:42:70:7b:2b:a5:62:1a:c4:dc:81:2f:89:
ae:67:4a:ab:ec:22:a2:55:a4:dc:8b:02:be:0d:e5:01:ef:d7:
5f:76:a9:c6:47:21:95:b4:e0:e0:9d:ed:ca:47:df:6d:26:c9:
af:fc:d1:55:40:7c:9d:61:fa:69:81:dc:0b:77:af:8b:72:a1:
d7:54:b0:c9:b9:d9:93:10:ad:f8:ad:87:43:65:12:60:87:51:
df:ea:54:98:c3:bd:b8:84:7a:1c:47:f1:d8:e4:33:44:1a:c8:
25:ea:4a:c9:73:95:03:b8:be:7e:b4:af:30:b0:8b:40:36:b1:
b0:a8:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:35:44 2025 by rpki-client