Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0df3ec-cf1e-484e-a904-0b9f1a78380b/1/cv0gl9cvwKs-jxVapPhEQiuUtWM.roa
File: cv0gl9cvwKs-jxVapPhEQiuUtWM.roa (raw, json)
Hash identifier: wV8sF47DErWXMoT9zyk/YhxsmPvXFd1mpPEJaFwc9ro=
Subject key identifier: 72:FD:20:97:D7:2F:C0:AB:3E:8F:15:5A:A4:F8:44:42:2B:94:B5:63
Certificate issuer: /CN=cb9dda549d9be8aeba679aa54115cc1eb6220b2a
Certificate serial: 019A2D5C6C08C0CC5AA4A2389494AA239EB0
Authority key identifier: CB:9D:DA:54:9D:9B:E8:AE:BA:67:9A:A5:41:15:CC:1E:B6:22:0B:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y53aVJ2b6K66Z5qlQRXMHrYiCyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0df3ec-cf1e-484e-a904-0b9f1a78380b/1/cv0gl9cvwKs-jxVapPhEQiuUtWM.roa
Signing time: Wed 29 Oct 2025 00:27:02 +0000
ROA not before: Wed 29 Oct 2025 00:27:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42357
IP address blocks: 185.218.196.0/24 maxlen: 24
194.140.194.0/24 maxlen: 24
194.140.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/0df3ec-cf1e-484e-a904-0b9f1a78380b/1/y53aVJ2b6K66Z5qlQRXMHrYiCyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/0df3ec-cf1e-484e-a904-0b9f1a78380b/1/y53aVJ2b6K66Z5qlQRXMHrYiCyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/y53aVJ2b6K66Z5qlQRXMHrYiCyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:5c:6c:08:c0:cc:5a:a4:a2:38:94:94:aa:23:9e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9dda549d9be8aeba679aa54115cc1eb6220b2a
Validity
Not Before: Oct 29 00:27:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72fd2097d72fc0ab3e8f155aa4f844422b94b563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:79:31:a0:51:c1:50:16:33:3c:22:ba:13:
a1:98:c0:5e:6d:21:2b:5b:78:9f:97:5d:65:47:b5:
50:42:89:e5:5a:48:9e:42:8c:ae:2d:75:a3:5f:53:
38:b2:49:b6:51:4e:dd:83:95:31:25:e2:86:f1:bd:
3e:12:a4:5b:dc:e5:e5:04:9b:6c:24:5d:a0:08:e5:
74:c8:d9:5e:5a:02:4f:3e:e3:c6:51:dc:da:f0:e0:
37:60:44:d5:38:11:91:d9:fb:8c:63:27:56:2f:fa:
55:1e:45:36:25:63:9d:67:63:13:fd:50:e0:5f:8c:
4e:97:b0:25:5a:8f:89:4d:b5:4e:9a:59:06:20:58:
3e:25:83:9e:00:b5:d1:a9:0a:5c:97:c3:d3:5e:20:
4c:87:c8:7d:27:99:10:4d:23:08:6b:e8:e2:b8:23:
20:98:68:a5:2a:8f:7d:5f:61:98:7a:71:03:be:e4:
5d:77:f6:68:74:c5:fa:f3:aa:44:11:fc:39:4f:c9:
79:a6:ba:06:aa:8b:4c:6d:62:8b:7e:87:16:f3:23:
a5:50:3d:9b:97:b8:d5:14:12:49:dd:c7:d4:17:23:
74:88:c5:c5:57:2f:72:09:72:fe:e1:61:94:e8:1d:
61:97:1a:69:8b:09:74:18:5d:34:8d:57:94:31:5c:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FD:20:97:D7:2F:C0:AB:3E:8F:15:5A:A4:F8:44:42:2B:94:B5:63
X509v3 Authority Key Identifier:
keyid:CB:9D:DA:54:9D:9B:E8:AE:BA:67:9A:A5:41:15:CC:1E:B6:22:0B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y53aVJ2b6K66Z5qlQRXMHrYiCyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0df3ec-cf1e-484e-a904-0b9f1a78380b/1/cv0gl9cvwKs-jxVapPhEQiuUtWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0df3ec-cf1e-484e-a904-0b9f1a78380b/1/y53aVJ2b6K66Z5qlQRXMHrYiCyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.196.0/24
194.140.194.0/23
Signature Algorithm: sha256WithRSAEncryption
23:62:80:51:85:f1:cf:20:38:e9:80:2d:90:74:0c:75:82:34:
39:95:8a:8d:c2:85:eb:84:d0:57:d0:8e:a9:7c:ad:59:b8:39:
0b:5a:6c:d8:20:36:c0:9f:00:55:c5:07:e9:eb:e0:e9:75:8f:
da:37:14:0e:49:b1:57:80:97:6c:0d:e9:bd:8e:48:dd:19:4e:
61:7b:48:78:b3:46:f7:e3:f2:8e:12:38:ba:2a:c0:91:63:d3:
ba:43:50:d6:77:b6:08:79:1b:26:2b:f2:63:d5:3f:cd:0a:96:
be:8b:6a:13:d1:60:f4:a1:76:e4:ca:10:93:b8:d2:07:46:8f:
c3:84:a4:9d:1d:55:26:77:b3:88:7e:f8:21:80:3a:1f:4a:50:
12:d2:90:83:b5:6b:07:79:e8:9a:df:2e:d4:47:05:79:37:31:
4a:f6:de:b5:64:cb:7b:12:af:01:d3:14:3e:7c:0b:66:a5:8b:
36:8d:16:41:70:a0:0b:da:09:15:c0:7a:b4:ae:5e:6e:c1:51:
cb:3c:1f:d8:d2:eb:2d:78:15:fc:1c:d0:17:90:0e:94:e8:7f:
f3:b8:36:b1:f1:d6:78:12:01:c4:73:bc:f6:36:68:3a:a4:c4:
38:ce:d8:37:6d:4f:7e:cf:80:65:83:d4:04:a9:f0:68:16:1a:
af:bf:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:54:48 2025 by rpki-client