Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/x2feWTktTwyBHKrOUzd6buDUjuU.roa
File: x2feWTktTwyBHKrOUzd6buDUjuU.roa (raw, json)
Hash identifier: ligBMajluKMyvklZAk4GV5Vw2Taqgg4c/vN04Ce3XMY=
Subject key identifier: C7:67:DE:59:39:2D:4F:0C:81:1C:AA:CE:53:37:7A:6E:E0:D4:8E:E5
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 019A0BAB3DD40B5AC4ADC867AC7037653C4D
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/x2feWTktTwyBHKrOUzd6buDUjuU.roa
Signing time: Wed 22 Oct 2025 11:26:03 +0000
ROA not before: Wed 22 Oct 2025 11:26:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207598
IP address blocks: 188.72.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:ab:3d:d4:0b:5a:c4:ad:c8:67:ac:70:37:65:3c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Oct 22 11:26:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c767de59392d4f0c811caace53377a6ee0d48ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:78:08:23:92:5a:2b:5b:20:89:5c:08:91:
3e:7c:46:f2:84:43:a4:b2:15:34:38:ae:72:c5:c5:
16:16:db:10:7d:44:90:a4:b6:33:a2:c9:c0:ab:3d:
59:d9:75:e9:d5:21:6e:05:7d:11:2c:4d:5a:9d:ab:
41:19:f5:ed:aa:a7:eb:cf:0a:9d:93:48:10:1f:3f:
46:e4:c2:12:5d:a8:4d:f9:fd:c2:38:12:d0:53:53:
d1:37:e9:38:59:d9:d2:b4:52:49:62:06:c2:2e:3a:
a6:48:0e:03:dd:f9:d9:6e:fc:58:64:7c:f2:42:64:
75:82:b6:d7:3a:3d:89:36:fb:14:0a:94:1e:bc:26:
be:6b:53:33:21:6a:52:1e:f3:ff:24:86:ae:47:cb:
9e:f6:82:eb:65:3e:b9:2c:fa:95:35:ba:61:32:49:
2b:4f:ae:4d:76:df:93:5f:bb:5c:e3:88:79:4d:ae:
93:77:29:83:43:54:e2:96:a0:f4:5c:20:0c:9f:14:
66:4b:f5:4b:ed:d3:95:09:f8:48:66:c4:6c:9b:0f:
59:8e:7a:6d:4b:d4:9f:7b:20:91:6a:d9:95:b0:6d:
7a:16:77:e1:78:cc:05:ca:20:a9:ab:3a:f6:bc:83:
77:0e:5d:36:03:19:c1:43:7b:d6:80:10:03:f6:26:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:DE:59:39:2D:4F:0C:81:1C:AA:CE:53:37:7A:6E:E0:D4:8E:E5
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/x2feWTktTwyBHKrOUzd6buDUjuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:52:f8:d0:4b:e2:5b:39:36:80:db:bb:3f:e7:62:3b:9c:16:
96:82:44:7e:94:3c:4e:a1:34:45:d4:cd:cb:ed:cd:b8:37:c5:
00:ba:c6:d2:00:02:a7:3d:79:37:07:55:05:4d:be:3f:86:ed:
2b:ed:73:27:f1:5d:aa:f1:af:3c:22:45:df:23:cf:e7:da:82:
1b:2e:3f:0c:ae:18:17:b9:dd:76:6c:d3:6d:42:cf:1a:c2:10:
6e:23:67:04:ae:9c:06:f9:80:7f:71:9d:80:7e:d2:27:a5:05:
01:48:c4:c4:18:9f:b4:bd:e9:c4:d6:1f:67:d2:6c:88:23:2c:
b6:dc:c3:fa:54:62:bb:50:85:0a:64:3b:fb:f9:18:67:a6:d4:
10:6a:ad:4f:b0:17:1b:05:14:f9:5d:3d:7d:8c:83:1f:46:ea:
0d:c1:24:2c:23:41:8e:2d:f3:6b:03:ef:6e:12:01:42:2f:67:
ae:79:fc:d2:aa:06:3b:e7:6f:ea:5d:74:4b:26:77:08:80:e1:
d0:61:4d:14:10:72:41:ca:d6:94:ac:06:b1:80:c9:79:3f:10:
0f:a7:86:eb:7c:36:18:5f:cb:e7:aa:8d:f4:84:98:40:3b:d1:
62:c3:5c:ca:ef:c1:66:2b:cb:ef:1a:42:17:2d:82:da:54:c1:
d5:3c:5b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:20:54 2025 by rpki-client