Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/0EWA36I6mOSoPIDfmQ0kLWD6rlg.roa
File: 0EWA36I6mOSoPIDfmQ0kLWD6rlg.roa (raw, json)
Hash identifier: OJc1UNQ6b/j4oso8+DOkIj53sxADM+WwR3tDYFPAPDk=
Subject key identifier: D0:45:80:DF:A2:3A:98:E4:A8:3C:80:DF:99:0D:24:2D:60:FA:AE:58
Certificate issuer: /CN=d5b021b1e84126593cef6d98803413aa72d001e0
Certificate serial: 019A08CB27FC4D635D4EEBE54672AA710DEB
Authority key identifier: D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/0EWA36I6mOSoPIDfmQ0kLWD6rlg.roa
Signing time: Tue 21 Oct 2025 22:02:02 +0000
ROA not before: Tue 21 Oct 2025 22:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209934
IP address blocks: 185.212.100.0/22 maxlen: 22
213.163.248.0/24 maxlen: 24
2a0b:7640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:cb:27:fc:4d:63:5d:4e:eb:e5:46:72:aa:71:0d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b021b1e84126593cef6d98803413aa72d001e0
Validity
Not Before: Oct 21 22:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d04580dfa23a98e4a83c80df990d242d60faae58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:12:05:14:dc:f0:e0:0a:af:eb:83:b1:95:
a9:93:a3:05:64:97:14:07:d8:89:46:0c:bb:20:d9:
48:dd:f9:7f:2d:b3:6e:e3:ec:f3:40:29:fd:60:7d:
b1:93:1d:fa:03:a8:27:87:cb:a2:7f:23:b7:3e:42:
26:2b:37:d6:c0:1e:ac:a3:65:13:5a:b0:25:64:c5:
b3:83:a3:2c:59:44:60:5e:16:17:e0:56:14:a1:dd:
60:ab:3a:55:2b:95:b7:3f:75:8c:e4:9d:ed:47:f7:
4c:f6:9d:20:98:44:98:3c:7b:f0:bc:54:90:31:1e:
27:9a:f8:b2:cc:79:e3:32:1c:ee:cc:d9:a9:d8:67:
47:5b:fa:2c:77:b9:8f:05:2e:8d:5b:37:e1:08:ff:
3c:9a:d7:72:de:b6:9b:42:7c:8b:eb:aa:e5:d2:c5:
3d:c9:02:77:de:96:85:4d:43:fe:a4:40:75:c3:57:
8a:90:7c:11:e8:8a:60:51:bf:c2:45:cd:c7:af:05:
fd:38:d1:64:93:d7:30:e8:5b:d6:70:cb:00:41:59:
02:cb:9e:61:04:6f:bb:74:8d:f6:57:e2:7f:67:b7:
b7:0c:eb:b7:58:b0:70:fc:a3:38:57:87:a4:9c:63:
8a:43:9d:56:98:37:c1:53:d2:2c:cb:3c:d4:2b:8e:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:80:DF:A2:3A:98:E4:A8:3C:80:DF:99:0D:24:2D:60:FA:AE:58
X509v3 Authority Key Identifier:
keyid:D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/0EWA36I6mOSoPIDfmQ0kLWD6rlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.100.0/22
213.163.248.0/24
IPv6:
2a0b:7640::/29
Signature Algorithm: sha256WithRSAEncryption
7f:6b:36:1f:08:5e:41:9f:fa:b7:c8:8e:9d:ae:c7:f1:48:bd:
07:c5:4d:1d:b8:ad:4c:20:b1:2f:b8:9d:19:ce:c1:06:45:20:
5e:82:26:01:6e:08:e5:7f:c3:7a:78:ac:72:f7:ff:30:c4:be:
2a:c9:dd:13:57:3c:65:8c:f9:b7:aa:10:50:eb:93:37:bd:27:
1a:f4:9e:ff:02:d0:db:b3:07:15:c5:ae:2f:59:61:65:bb:60:
af:e9:e4:a7:7e:a4:d4:be:cf:0f:b2:c4:aa:fb:3b:79:56:fd:
37:3f:10:7e:51:e0:11:94:03:b2:1d:17:1c:47:86:eb:77:ba:
c1:ab:75:52:13:f9:9b:a6:22:d0:77:f7:bc:71:3c:2f:51:cd:
87:5e:f3:4e:73:4b:76:b4:5f:e2:f9:f8:3c:43:2a:aa:95:78:
28:ae:c2:fb:02:51:d5:db:a4:f4:11:de:97:59:a4:a7:5b:5d:
eb:b2:bf:8d:11:13:c4:62:8c:46:d0:58:00:2e:da:17:9d:ee:
c7:05:95:7c:6f:c2:0a:7a:b4:1b:09:83:3b:d5:df:03:02:c9:
1c:cf:fb:ce:c9:63:60:c5:58:d1:0c:e9:a4:fa:38:15:c4:23:
f0:1b:ed:65:75:1c:62:b7:83:98:8b:b9:48:ef:67:6e:c1:6d:
ca:cb:ad:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:13 2025 by rpki-client