Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/mJg5-yk83oQM51KkbqBYbHixcrU.roa
File: mJg5-yk83oQM51KkbqBYbHixcrU.roa (raw, json)
Hash identifier: 5vdWsjquCkAIzmlRga/abDGAdDerH+rqhd68gtOvTB0=
Subject key identifier: 98:98:39:FB:29:3C:DE:84:0C:E7:52:A4:6E:A0:58:6C:78:B1:72:B5
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019A5FF3159AEEAE606661DF0B2C3131494B
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/mJg5-yk83oQM51KkbqBYbHixcrU.roa
Signing time: Fri 07 Nov 2025 20:12:37 +0000
ROA not before: Fri 07 Nov 2025 20:12:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206221
IP address blocks: 109.205.193.0/24 maxlen: 24
158.94.220.0/24 maxlen: 24
158.94.221.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 32
2a01:fb05:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5f:f3:15:9a:ee:ae:60:66:61:df:0b:2c:31:31:49:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Nov 7 20:12:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=989839fb293cde840ce752a46ea0586c78b172b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:5e:2e:9e:1f:fa:cb:2b:33:7c:9d:c3:ca:
ea:72:5e:e7:25:77:07:81:7f:35:54:69:77:50:c0:
f7:f4:6f:10:ab:d4:7e:65:09:db:67:de:6d:83:0b:
a0:e5:c9:27:df:a7:51:cb:71:14:f1:5c:86:6a:7c:
a7:43:95:71:38:a9:45:6a:64:5b:47:af:79:50:8e:
1f:67:59:13:9b:0b:35:9f:a3:29:f2:29:79:59:6c:
3a:d2:f2:ec:51:13:79:17:3e:1e:9b:56:da:c6:56:
13:6d:f1:dd:2e:e4:e6:9d:42:1c:9b:bd:92:52:e7:
1f:b2:c9:fc:81:18:2c:66:19:f6:ec:a4:90:5c:39:
a2:07:3f:ce:00:76:47:7d:13:1e:e9:2c:c2:12:97:
f5:fc:9e:7d:92:1c:c9:66:a0:c8:48:b4:c0:c0:6b:
4d:bd:28:11:23:7c:3f:e8:9b:06:e2:a2:46:a9:1b:
f7:eb:a7:00:cc:5b:88:ac:98:3e:53:f1:a0:c7:bc:
1c:84:7e:f2:19:f5:35:f9:24:37:f2:7e:c2:5e:c5:
81:30:42:ab:f6:96:8d:fb:01:25:75:b8:a3:c1:a3:
86:10:aa:21:ba:e8:b1:44:ac:5e:a0:72:c3:2e:c9:
a1:c0:3c:9e:b6:b6:fb:4c:29:a3:9e:5f:38:a4:d2:
c6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:39:FB:29:3C:DE:84:0C:E7:52:A4:6E:A0:58:6C:78:B1:72:B5
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/mJg5-yk83oQM51KkbqBYbHixcrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
158.94.220.0/23
IPv6:
2a01:fb01::/32
2a01:fb05:c000::/36
Signature Algorithm: sha256WithRSAEncryption
27:68:af:34:ef:fc:c5:3b:4f:82:49:ef:67:7d:85:72:fe:70:
3c:c4:9f:35:f4:1c:cd:27:5e:4e:56:3c:fa:0d:66:eb:3d:be:
18:aa:71:42:c9:0b:ea:f9:80:20:f6:11:5b:ed:a9:b2:12:bb:
a9:14:5d:1f:2c:b3:bc:00:b7:62:28:66:bf:1f:db:59:6d:7a:
82:3e:b7:67:72:db:b0:dc:e4:37:d0:e9:38:97:55:04:df:80:
12:33:3c:e1:c7:f3:de:2c:f4:11:c6:90:ef:81:17:b7:98:20:
d4:f1:2c:8c:d0:a7:c7:07:90:bd:7c:83:40:88:ed:78:8a:a8:
c8:c8:fb:f6:cf:26:6e:41:22:55:ae:70:48:b4:7b:4c:03:6d:
d8:93:b0:4b:db:90:d9:e4:56:1a:78:ea:fd:1e:4d:0e:05:f7:
97:87:43:bb:df:d1:86:e9:66:f4:d6:f3:ac:45:60:62:9c:30:
37:89:fb:b7:c0:7a:8e:01:0b:c3:02:8c:4a:2b:d2:28:dd:97:
b9:5e:a4:71:f9:e6:65:3d:5b:a3:76:74:5f:65:a6:56:3e:b9:
c2:e7:ef:4b:2c:b8:48:6c:33:75:84:a4:89:ce:8e:7c:97:8f:
16:b1:0c:db:0c:82:52:40:61:c4:26:01:4e:37:0e:6a:e0:34:
1b:8c:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:16:04 2025 by rpki-client