Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/Mb06qDf9rtzvzYCg0U7zkpiC6ow.roa
File: Mb06qDf9rtzvzYCg0U7zkpiC6ow.roa (raw, json)
Hash identifier: xrftSxsmsKF+XldnXy9dslwB8tEYW7zhPs0yXnIxtKQ=
Subject key identifier: 31:BD:3A:A8:37:FD:AE:DC:EF:CD:80:A0:D1:4E:F3:92:98:82:EA:8C
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019A3433D434A1950B0FD9C08CF3BE9EFD35
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/Mb06qDf9rtzvzYCg0U7zkpiC6ow.roa
Signing time: Thu 30 Oct 2025 08:20:03 +0000
ROA not before: Thu 30 Oct 2025 08:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 78.108.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:33:d4:34:a1:95:0b:0f:d9:c0:8c:f3:be:9e:fd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Oct 30 08:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31bd3aa837fdaedcefcd80a0d14ef3929882ea8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:33:30:bf:43:9a:ad:0d:29:52:45:0f:7f:60:
38:1f:be:f9:90:53:78:55:fb:e2:0b:51:66:68:6f:
42:2c:5a:10:23:64:bf:67:3b:c5:d4:30:c1:d5:06:
40:7f:8d:33:76:e7:06:b4:26:16:62:94:82:21:0c:
4f:3d:5d:42:b1:4a:e8:1b:9b:bd:03:06:0d:33:22:
c1:57:aa:4b:43:89:2c:48:5a:fb:0f:9b:0f:68:f0:
1c:1d:94:52:96:28:b2:77:0b:cb:72:ad:b1:3b:5e:
3b:33:e5:5f:f7:1b:4c:eb:02:ec:ea:70:1d:de:4a:
1f:f9:83:ba:bf:6d:fa:d3:cf:27:f6:fd:2e:80:5e:
60:5a:a9:65:29:9b:ea:3f:43:f9:7d:2c:4b:e6:73:
f7:50:b5:a0:7b:f2:3a:d7:ce:ac:4e:1e:78:26:b1:
d3:7f:f6:86:71:78:14:06:11:75:4b:19:37:73:83:
e5:ba:0f:35:5a:32:3d:3b:e8:c7:cc:87:dc:53:21:
21:e7:b7:21:e5:88:34:a2:74:b3:f0:d2:8a:b2:b3:
d2:50:84:5b:14:a9:d3:69:e8:68:4d:07:15:b3:96:
71:34:16:85:bd:a4:4d:f7:c3:fd:d6:ad:58:68:09:
06:44:b1:e6:a6:58:09:f6:5a:63:23:14:4d:2e:ed:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BD:3A:A8:37:FD:AE:DC:EF:CD:80:A0:D1:4E:F3:92:98:82:EA:8C
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/Mb06qDf9rtzvzYCg0U7zkpiC6ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.62.0/24
Signature Algorithm: sha256WithRSAEncryption
27:60:38:c0:65:ac:75:76:ae:5c:54:36:a8:2a:e9:6f:e3:5a:
c5:60:74:c5:cc:8f:bc:0a:a5:d1:48:97:75:b9:d4:2f:25:8b:
c7:42:e5:32:18:3e:b1:d2:f1:b9:71:b8:c3:41:9f:7c:ec:1c:
4f:27:68:00:1b:ce:55:e8:89:94:80:12:06:c9:85:75:18:71:
47:1e:f2:69:ba:bb:ac:b2:69:8d:4a:86:d4:25:4f:6e:cd:d4:
20:a1:92:51:c5:37:b8:3a:70:b5:a0:c5:f8:5c:5b:21:80:df:
e9:da:19:a1:5e:03:cb:00:76:db:2c:da:00:24:be:c5:a4:45:
68:1d:1e:de:d1:f1:91:a3:b5:7e:84:d4:dd:8b:d1:95:ba:02:
78:98:3d:ea:48:ce:0e:a7:70:7e:a7:ff:22:e7:fd:7c:e6:d1:
3d:15:f8:e4:73:60:0c:c2:68:bc:35:79:13:30:66:a5:c0:98:
d7:4c:ab:dc:dc:16:ed:0a:c7:e8:2c:2c:38:19:64:4a:0d:6f:
b6:52:bc:79:c8:e8:e7:80:50:1d:42:59:bb:1d:9c:09:ac:19:
79:70:73:66:8b:0e:b0:4a:66:69:64:61:b7:d7:d4:00:75:03:
a5:22:4d:fc:ae:a1:2b:6d:1b:64:b8:82:8a:81:e2:64:1f:af:
2d:a0:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 09:34:50 2025 by rpki-client