Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/236LhhUxi4bM3CWFXv5ENeEDLw0.roa
File: 236LhhUxi4bM3CWFXv5ENeEDLw0.roa (raw, json)
Hash identifier: mXwa812L7Sgc5PaLadbZYWsB2jusWGtKQaaUXJX7ZCw=
Subject key identifier: DB:7E:8B:86:15:31:8B:86:CC:DC:25:85:5E:FE:44:35:E1:03:2F:0D
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019A011AB673287401E677A97B5BD6BB37C5
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/236LhhUxi4bM3CWFXv5ENeEDLw0.roa
Signing time: Mon 20 Oct 2025 10:11:58 +0000
ROA not before: Mon 20 Oct 2025 10:11:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209643
IP address blocks: 109.205.193.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:1a:b6:73:28:74:01:e6:77:a9:7b:5b:d6:bb:37:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 20 10:11:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db7e8b8615318b86ccdc25855efe4435e1032f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d2:ca:61:26:21:2b:83:d6:05:c1:61:d5:53:
61:d6:31:19:74:1c:89:d3:4f:24:56:c1:45:13:9d:
b6:bb:73:35:ce:ce:e1:aa:58:a6:3d:8a:6a:a5:cd:
90:5b:50:f0:90:8f:a1:25:45:fa:10:c5:77:e8:d6:
97:5a:22:6d:b7:e0:b0:e1:4a:d8:97:57:a8:1c:d0:
b1:58:1b:96:e9:d4:35:05:55:54:f1:aa:99:72:97:
87:e3:0d:fc:99:f3:bd:32:eb:2b:b4:a8:1e:d0:04:
9c:54:2a:f5:7e:ec:ed:f8:9e:ce:ed:8c:47:fa:c4:
cb:30:a5:23:23:8f:7a:0d:d0:61:f8:1c:a1:bc:e5:
0c:e1:90:fa:bb:16:8f:fb:3e:ac:ec:d5:f3:f8:1c:
fe:73:b3:6d:c5:fa:97:67:43:dd:5b:ac:2b:88:0c:
5b:6f:9d:9c:20:df:32:a5:65:d7:ee:ee:b6:bc:35:
32:b3:cd:eb:ef:09:cb:41:41:1d:d1:04:14:9e:8b:
36:78:67:50:5e:2a:fa:4e:7e:cb:46:06:2b:71:16:
c9:c6:af:1b:04:8e:3b:69:5b:be:77:a2:4c:07:28:
6e:fe:90:ed:c5:cd:40:29:f9:79:0d:a9:8a:61:21:
8d:24:23:25:10:66:46:3e:37:58:70:7e:53:39:44:
3e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7E:8B:86:15:31:8B:86:CC:DC:25:85:5E:FE:44:35:E1:03:2F:0D
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/236LhhUxi4bM3CWFXv5ENeEDLw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
IPv6:
2a01:fb01::/32
Signature Algorithm: sha256WithRSAEncryption
4e:90:cd:55:21:e5:21:63:94:85:19:61:33:35:67:20:56:8d:
9a:67:df:1b:79:40:d1:58:8a:c2:83:09:5d:51:3b:c3:55:81:
20:f0:2e:26:76:34:55:9d:ed:3f:c3:6a:62:34:50:8e:f4:35:
76:8e:12:50:10:f6:cb:00:f6:23:dd:5c:c8:4f:96:4b:b6:5f:
95:60:c5:b3:a3:dd:70:04:c6:e8:06:de:13:5f:6b:ff:00:df:
f5:c6:c4:66:1e:fb:ee:a2:3d:cc:a7:0a:7c:56:0d:89:8a:2e:
b6:bf:b7:89:2e:cf:eb:1e:e2:ff:68:94:a3:3d:5c:fb:17:7f:
30:75:ba:eb:ab:4d:e9:a6:83:79:dd:ce:ae:59:fa:37:c4:1f:
d7:42:17:de:cd:3f:79:de:f5:93:60:23:b1:93:e3:48:81:ea:
c9:ed:2c:c1:53:f2:04:f9:4b:63:1d:d3:0d:7e:32:f2:ac:01:
c4:20:45:c5:50:f8:6d:28:3c:61:34:c3:b1:64:b5:83:66:d4:
7b:12:e6:01:10:81:27:16:82:d0:15:30:ab:79:dd:8e:19:f3:
df:7e:cc:03:f7:c6:16:63:f3:75:d5:f5:c6:9e:01:d4:7b:7f:
24:54:bb:2f:f3:7d:2f:ca:ff:69:18:36:e0:03:f0:d8:d0:cd:
7d:8e:96:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:42:11 2025 by rpki-client