Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/cohdEXDzPpK1tPeOsjxWZZoy2kw.roa
File: cohdEXDzPpK1tPeOsjxWZZoy2kw.roa (raw, json)
Hash identifier: 2bds0nHUGtIa8S7dmK+K256GFklwRiA4VOfKja/NXL0=
Subject key identifier: 72:88:5D:11:70:F3:3E:92:B5:B4:F7:8E:B2:3C:56:65:9A:32:DA:4C
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019A113AE295D8CFD712747F28B56F867D02
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/cohdEXDzPpK1tPeOsjxWZZoy2kw.roa
Signing time: Thu 23 Oct 2025 13:21:03 +0000
ROA not before: Thu 23 Oct 2025 13:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34872
IP address blocks: 109.205.193.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 06:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:3a:e2:95:d8:cf:d7:12:74:7f:28:b5:6f:86:7d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 23 13:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72885d1170f33e92b5b4f78eb23c56659a32da4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:07:4c:0d:65:63:86:5d:b3:42:0a:0e:70:
cb:6a:38:04:c3:ae:43:a3:3e:8a:e4:2f:51:fb:e0:
fd:81:da:7a:f4:68:60:a4:c2:6e:ad:3a:3e:0f:ad:
f1:2c:30:ac:4b:0c:a1:b1:37:97:6b:90:47:1a:27:
31:8e:3d:f3:25:ff:43:d5:58:58:9e:b6:1b:98:9d:
f6:9e:79:c5:20:3d:06:a1:6b:64:97:8d:bd:d9:cf:
7e:46:c3:20:11:dd:3c:7d:d8:77:88:e2:20:c9:a4:
d9:ff:d2:28:89:d0:17:b9:f5:72:d3:3e:a4:1f:59:
4b:ec:b9:40:44:3b:34:e3:ee:48:44:90:e9:83:2b:
be:6c:9d:a5:55:31:21:5f:b5:a0:44:90:30:5c:22:
c5:98:9c:b5:28:21:50:c8:b4:c3:f8:3c:9f:54:ce:
cd:32:b7:b8:aa:68:ff:d2:1c:35:da:5b:ba:dc:3f:
9d:e9:b5:9e:50:4d:5d:42:b0:23:e0:c9:ec:9b:25:
5e:08:6a:b5:ba:7c:52:2a:37:6f:0f:3c:f2:be:1f:
b3:87:49:fe:88:bf:92:59:7d:fb:16:95:6a:a7:9f:
2c:73:09:19:a2:3e:61:b5:eb:1f:9c:a3:41:fb:a6:
7c:1b:71:2a:c7:39:69:28:dc:1c:2f:91:ed:1f:03:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:88:5D:11:70:F3:3E:92:B5:B4:F7:8E:B2:3C:56:65:9A:32:DA:4C
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/cohdEXDzPpK1tPeOsjxWZZoy2kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
IPv6:
2a01:fb01::/32
Signature Algorithm: sha256WithRSAEncryption
32:65:f7:66:d7:99:f5:cd:b3:23:b2:71:0f:1a:17:bc:7f:65:
14:3a:a9:4f:c2:e6:3f:58:88:a6:7d:f7:6b:85:89:bb:37:a0:
77:4d:ae:8e:24:0c:94:58:3a:5a:a4:f5:b5:da:4e:04:ed:8f:
c8:65:4f:fc:a9:0e:71:d5:99:6f:52:aa:0d:88:82:1b:58:30:
40:05:a4:b4:7c:3e:38:c3:64:eb:fc:93:7a:29:e7:60:4d:2f:
2a:6a:4a:ff:6c:e8:ec:32:48:80:0f:8b:7d:33:fa:14:ab:19:
5c:d5:56:33:c2:85:bf:2a:32:ca:71:ba:28:aa:f2:e1:84:23:
26:75:75:b3:2a:03:7d:93:72:52:b0:58:bf:0a:34:c9:99:21:
95:2b:51:d3:ff:54:09:51:75:11:07:99:8c:90:27:14:40:c2:
14:d6:8c:7f:6b:2f:92:c8:ca:09:47:18:d9:a2:80:8a:ab:99:
29:e1:5d:d5:dd:d7:0a:96:78:3b:2d:43:6b:56:af:84:66:b8:
2d:45:69:dd:b0:c1:8e:39:23:f3:77:e3:61:8f:b1:3f:fd:30:
93:ef:fc:0a:ac:94:5b:3b:6f:14:91:df:79:65:92:8d:44:eb:
de:0b:c8:bc:a2:bf:c3:8a:e1:d0:6d:50:e4:a6:ab:51:a8:48:
40:5f:01:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:10:47 2025 by rpki-client