Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/25USMCW28SlOYzjIhoJiiuh4h0I.roa
File: 25USMCW28SlOYzjIhoJiiuh4h0I.roa (raw, json)
Hash identifier: k660Q4VTzt2dHaw/HTP9yUtrSZfRqK5ii3bgKkxIMvI=
Subject key identifier: DB:95:12:30:25:B6:F1:29:4E:63:38:C8:86:82:62:8A:E8:78:87:42
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01A13E9E39D006AAEED747AE851B287C5F65
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/25USMCW28SlOYzjIhoJiiuh4h0I.roa
Signing time: Thu 15 Oct 2026 08:11:59 +0000
ROA not before: Thu 15 Oct 2026 08:11:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198130
IP address blocks: 85.28.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:9e:39:d0:06:aa:ee:d7:47:ae:85:1b:28:7c:5f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Oct 15 08:11:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db95123025b6f1294e6338c88682628ae8788742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:2a:46:02:7a:f9:47:8e:b5:31:88:ff:48:
d1:62:d2:a3:1e:b6:57:ea:92:6e:82:43:fa:79:4f:
c5:92:d8:fa:1d:ea:a0:2c:2d:af:e5:78:db:e5:e1:
25:a3:3a:3b:06:b6:82:68:c3:9f:0c:99:a8:23:ad:
0f:2f:13:68:bf:80:23:7d:67:5e:84:a0:c3:df:78:
45:b7:69:27:bf:ec:7b:09:ba:29:77:e4:22:3d:10:
39:c9:d4:e9:b3:e6:a6:e2:b3:2c:42:65:04:ea:6a:
26:5e:e7:24:34:2f:f4:eb:30:e2:9b:b7:e8:a6:f9:
51:1c:31:ac:a0:89:4a:67:97:f5:ab:79:ab:c8:71:
1f:6f:b8:54:07:6c:9b:a9:a6:dc:9d:d5:8c:08:36:
5d:5c:69:1f:f7:28:31:52:07:e0:8a:77:b3:f5:0a:
09:4e:71:a7:54:f9:24:86:ec:25:b1:f5:50:e2:0d:
b2:35:a7:3e:de:19:aa:0c:52:f1:9d:c4:db:05:e7:
4e:b7:c5:57:49:f0:14:04:9c:9c:43:5f:60:c3:06:
b7:ab:93:8a:d7:ed:8e:c1:19:18:cd:e7:62:8c:bc:
a4:b1:1a:0e:fd:ac:e3:20:a5:af:29:c5:05:10:cd:
90:d3:7a:0b:e1:f0:f1:8b:e5:db:ed:ad:a8:c6:49:
8d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:95:12:30:25:B6:F1:29:4E:63:38:C8:86:82:62:8A:E8:78:87:42
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/25USMCW28SlOYzjIhoJiiuh4h0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.61.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:99:69:90:bd:16:0d:84:bf:ea:6a:e3:ff:6d:15:af:20:1e:
0b:48:e4:5f:79:06:23:e2:41:4a:ee:cd:47:f7:17:b1:75:45:
23:4e:6c:da:e7:5e:b1:fb:5e:22:ae:a7:f7:ae:00:c2:a8:b7:
32:43:f3:6a:bc:26:8d:db:20:4f:4f:67:a8:0e:05:9b:f9:e6:
72:16:03:7d:47:67:f3:15:3e:2b:63:84:bf:43:3d:34:aa:5f:
cb:d3:c5:4e:93:85:d7:38:80:62:aa:88:33:f1:2c:32:f9:26:
14:cc:cc:1d:20:3a:31:99:5f:44:38:cd:ca:35:e9:f7:c2:78:
a1:95:43:e9:a2:c8:5e:1d:12:76:2a:5f:8f:f5:82:35:e1:47:
6b:cf:fd:d5:eb:98:83:58:9e:96:67:71:cd:25:2b:cb:38:8f:
0c:c8:72:f0:f3:a8:17:c8:ea:66:0d:c2:fa:62:f1:a9:f1:cd:
5f:5f:36:f9:53:8e:0e:d1:e4:0e:ba:a1:a8:24:45:f2:c6:c7:
dd:f8:d9:6e:af:cb:41:12:ef:37:54:c9:05:91:9a:75:95:0b:
f9:85:50:fb:02:22:13:c5:f9:35:9e:2a:e4:40:48:6e:78:32:
0e:22:3f:a0:4a:00:26:20:54:2b:a9:95:71:1d:c9:22:12:52:
23:96:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:55:30 2026 by rpki-client