Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/xIllA8mBfD0CE_Yok6WhXftpMvk.roa
File: xIllA8mBfD0CE_Yok6WhXftpMvk.roa (raw, json)
Hash identifier: tUc/QZEe3fgD7JMv9CZx61iqBXYp1mekZgazOTqgam8=
Subject key identifier: C4:89:65:03:C9:81:7C:3D:02:13:F6:28:93:A5:A1:5D:FB:69:32:F9
Certificate issuer: /CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Certificate serial: 019A59C6E33EA57083DA768207950B46204F
Authority key identifier: C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/xIllA8mBfD0CE_Yok6WhXftpMvk.roa
Signing time: Thu 06 Nov 2025 15:26:37 +0000
ROA not before: Thu 06 Nov 2025 15:26:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213432
IP address blocks: 193.33.244.0/24 maxlen: 24
2a14:26c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:c6:e3:3e:a5:70:83:da:76:82:07:95:0b:46:20:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Validity
Not Before: Nov 6 15:26:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4896503c9817c3d0213f62893a5a15dfb6932f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:17:14:05:75:c8:d3:02:da:85:74:49:fd:
12:b9:f8:3d:4e:fd:6c:ad:cf:0d:be:d4:61:39:84:
0b:74:60:e4:2f:8b:1d:c5:e5:1e:8e:5a:89:21:65:
26:f2:10:2f:43:ca:01:37:d7:0f:ae:0c:73:a2:73:
11:ff:ea:f6:50:7b:5d:8d:1b:10:fc:b0:67:b9:43:
6a:f5:ea:a1:e5:46:96:8e:0e:a5:21:d2:d6:9e:c0:
89:d2:52:19:0e:b7:f5:88:d1:83:1c:61:9a:0c:c1:
4f:43:30:fb:d7:da:84:0f:63:64:1d:01:c6:96:96:
ad:da:3e:de:6c:56:ee:1c:6c:ad:f3:e0:85:cf:28:
83:1e:a5:01:e2:f1:eb:b9:f4:1f:e4:ce:41:43:d9:
04:3c:8e:73:6f:6c:ff:69:a2:d8:8c:02:8a:13:8c:
b1:12:e3:2e:c7:7f:2e:e0:61:f1:6a:b1:c6:45:1e:
56:c6:54:3c:c5:11:11:6c:2f:4d:13:47:dc:bb:1b:
3a:84:ea:2b:dd:d0:de:a0:d7:08:04:92:80:03:47:
e7:bf:82:6c:3f:48:c9:93:54:f8:7a:02:a9:a7:d2:
13:28:de:f7:09:bd:89:83:9c:e5:9f:ad:3f:02:18:
ea:c6:71:23:1b:26:ea:10:e1:f6:ce:1d:61:35:fe:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:65:03:C9:81:7C:3D:02:13:F6:28:93:A5:A1:5D:FB:69:32:F9
X509v3 Authority Key Identifier:
keyid:C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/xIllA8mBfD0CE_Yok6WhXftpMvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.244.0/24
IPv6:
2a14:26c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:1d:54:07:8d:03:93:5c:9f:32:9f:f6:8c:67:86:c6:77:ca:
1c:6e:ac:a8:1d:c8:f2:7a:46:50:87:cd:7f:25:7d:1d:01:a5:
75:2a:16:b5:bf:b1:05:e1:ae:de:5a:bd:39:91:13:b7:16:cb:
66:13:c9:d2:d2:c7:93:67:fb:50:5b:b8:01:88:e9:80:20:7e:
94:e7:77:1e:d2:50:66:03:e9:09:2c:60:18:c1:c4:43:57:2b:
ef:7a:6b:a1:55:63:e8:30:2a:6a:2f:3a:b2:b9:e5:29:47:e7:
16:7f:87:3d:44:a2:b8:ba:83:b3:2f:11:af:9c:84:3c:75:c4:
01:4a:93:c5:5b:1a:f3:52:87:e0:07:f9:ad:31:04:58:e4:02:
02:0f:7e:9d:a1:7d:98:18:fd:35:18:48:5b:30:a1:95:4c:01:
65:87:9e:ba:e8:15:ef:a4:ad:e4:77:fd:b2:65:10:b7:49:e8:
09:2d:79:f3:20:5f:4e:f6:64:62:b1:65:75:74:07:b8:8e:e1:
47:af:63:1d:65:da:1f:06:2a:86:dc:69:5e:bc:d5:30:33:7f:
83:31:b7:62:61:2d:8b:ff:17:3e:2e:8c:78:bd:02:23:37:13:
ae:84:85:0c:5b:cb:58:c9:f4:cd:61:8c:34:e2:a6:88:f3:b8:
82:78:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:31 2025 by rpki-client