Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9yJkoXRLJiAo-gNP2MCi92qZ840.roa
File: 9yJkoXRLJiAo-gNP2MCi92qZ840.roa (raw, json)
Hash identifier: NmQ6JDn9ymB2T+NnjttVMR7rl/LgH3UyloASY7+euns=
Subject key identifier: F7:22:64:A1:74:4B:26:20:28:FA:03:4F:D8:C0:A2:F7:6A:99:F3:8D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019A343CFC62C236528EE6F54438681855BF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9yJkoXRLJiAo-gNP2MCi92qZ840.roa
Signing time: Thu 30 Oct 2025 08:30:03 +0000
ROA not before: Thu 30 Oct 2025 08:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 185.246.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:3c:fc:62:c2:36:52:8e:e6:f5:44:38:68:18:55:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 30 08:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f72264a1744b262028fa034fd8c0a2f76a99f38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:09:99:46:c6:8d:4a:d5:e7:1e:d6:be:c2:
2d:3d:fe:82:c3:3a:43:ea:15:24:bd:c0:f1:c3:c0:
90:d7:c1:26:31:31:2a:0c:a5:7d:ae:c3:f4:6e:60:
d0:23:fa:d1:26:a8:52:51:ed:e5:aa:41:19:54:e4:
f6:7b:57:c2:d0:75:b1:48:74:81:fb:7a:64:03:ab:
10:58:7e:54:0f:1e:ca:23:92:b6:17:c8:6b:f9:ab:
c0:ba:3d:82:56:e0:ee:9a:6e:e8:65:4d:85:0e:dc:
a9:40:c5:53:a4:24:50:8d:20:28:2a:31:b2:3a:14:
95:7e:87:a4:8c:ef:ea:f0:67:ca:27:e0:47:a0:fb:
b8:d3:41:32:a2:6d:0d:6e:ff:9d:8b:60:09:19:c1:
89:c9:6e:50:11:61:04:8c:b2:1a:ae:6a:f6:8e:0d:
6e:5a:23:65:50:b4:b6:46:ea:75:0d:ed:ce:ab:43:
74:c4:e4:fe:3e:ee:a1:41:02:a7:da:02:eb:ae:24:
de:8d:d9:e2:e8:e5:2b:68:f2:e2:ad:cd:32:46:03:
df:ca:5a:7f:d8:e2:f2:1f:6a:87:48:a4:bc:fe:63:
54:29:53:f2:66:4f:1b:95:3d:a1:ad:46:6f:37:97:
2d:43:9b:9a:b6:b5:66:b4:18:77:3f:7f:36:d7:46:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:22:64:A1:74:4B:26:20:28:FA:03:4F:D8:C0:A2:F7:6A:99:F3:8D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9yJkoXRLJiAo-gNP2MCi92qZ840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.112.0/24
Signature Algorithm: sha256WithRSAEncryption
75:8f:90:e2:d2:d1:a0:ef:5c:7a:7c:0d:d7:46:25:9f:a6:c6:
81:06:88:2e:89:39:87:01:04:7d:35:24:1c:40:e4:33:2a:eb:
25:2c:57:a4:cd:fe:da:82:c0:27:72:57:2e:48:c2:19:bd:4b:
05:cd:de:1c:01:e7:77:34:c4:69:ef:25:c7:c9:b2:2f:d7:5f:
7d:d0:ee:00:d4:7e:4b:88:f9:7c:bc:df:cf:41:38:1b:52:dd:
9a:80:2e:a3:ec:47:56:39:14:34:8e:de:8d:03:7e:4d:87:b1:
bc:70:35:cf:fb:0d:69:bb:bd:72:c5:79:ec:95:b9:a8:08:88:
6f:10:61:1d:17:d3:f7:f4:c2:c6:5b:04:80:52:04:c6:1a:f7:
24:93:7b:da:2a:5d:f1:23:9a:fb:5e:f7:e1:af:e2:a3:b1:f3:
ea:b5:9f:a7:fa:79:e3:5d:c5:93:37:38:cf:65:3e:bf:8d:05:
8b:3b:1f:5c:ae:65:db:07:44:c9:53:02:92:14:68:8e:b1:c5:
a2:1d:8a:d8:d5:9d:73:6c:bc:b1:a2:ba:af:62:5f:ca:34:7c:
20:6b:10:54:ac:6c:da:be:99:ca:44:41:1c:8d:ba:bf:3c:41:
28:55:2f:67:64:e5:72:56:58:70:2a:8b:15:54:32:c4:a0:22:
2d:6e:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 08:27:33 2025 by rpki-client