Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dn1rb2wCUiJjbUP99kG112Kz0Pg.roa
File: dn1rb2wCUiJjbUP99kG112Kz0Pg.roa (raw, json)
Hash identifier: diw/B/vJL3e9UDmx8mv3lXrrXjVhjfIy0Zaa+4GOCSc=
Subject key identifier: 76:7D:6B:6F:6C:02:52:22:63:6D:43:FD:F6:41:B5:D7:62:B3:D0:F8
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0199FCA7CC28DD5A9906562BEE70F095CDA1
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dn1rb2wCUiJjbUP99kG112Kz0Pg.roa
Signing time: Sun 19 Oct 2025 13:27:59 +0000
ROA not before: Sun 19 Oct 2025 13:27:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 95.173.48.0/24 maxlen: 24
95.173.50.0/24 maxlen: 24
95.173.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:a7:cc:28:dd:5a:99:06:56:2b:ee:70:f0:95:cd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 19 13:27:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=767d6b6f6c025222636d43fdf641b5d762b3d0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:08:98:34:7a:4d:d9:07:39:58:7f:59:60:
b1:9e:0a:75:52:1d:00:4c:c9:42:a0:9e:43:06:26:
a2:dc:9a:f4:75:17:9d:2b:48:8f:70:67:72:8b:0d:
5e:3f:c2:eb:c3:ac:1f:b1:da:48:02:16:22:d1:f7:
dc:30:02:11:60:84:6d:6a:cf:92:cc:8c:f7:29:6a:
5b:16:45:13:d2:df:ba:37:e7:a7:2c:b8:ae:e8:dd:
3c:bb:5b:c5:e7:02:85:38:45:cb:e9:38:b0:5b:5c:
c1:f7:c5:64:33:c1:6d:d9:10:07:69:38:50:91:a3:
e8:38:93:31:16:51:96:db:f7:c2:61:11:ab:fc:6e:
15:de:e8:29:0d:62:f5:e8:b0:3a:5f:bd:df:03:d1:
a3:c1:34:9c:4b:19:cd:f4:c3:63:9d:1c:41:99:85:
d7:87:bf:f1:59:1b:90:46:07:e5:af:46:b3:6e:50:
52:80:75:59:d4:ba:f1:95:56:71:2e:86:c8:f8:7a:
98:86:e5:cb:31:b1:83:4d:59:2f:7f:cb:e4:32:53:
fd:f7:e3:4c:85:a4:bb:20:e1:f5:85:4a:62:f2:f3:
07:e6:df:93:8f:96:d7:95:bc:f8:dd:40:0b:ef:dd:
2b:91:21:ce:61:b9:7b:47:96:0f:23:ab:70:a3:1c:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7D:6B:6F:6C:02:52:22:63:6D:43:FD:F6:41:B5:D7:62:B3:D0:F8
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dn1rb2wCUiJjbUP99kG112Kz0Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.48.0/24
95.173.50.0/23
Signature Algorithm: sha256WithRSAEncryption
80:6e:90:ce:b2:b2:5f:86:19:dd:59:0e:42:87:9f:1f:fa:af:
97:2c:3a:d6:fd:a7:bd:ea:02:68:c7:fa:b8:59:17:22:a4:2b:
1f:d1:1d:eb:66:4b:2e:49:4e:4c:4c:9d:74:f0:d1:03:01:25:
0a:50:16:00:4c:2f:9d:c2:15:5a:28:5c:1a:ef:79:ee:32:47:
f7:7e:e9:2e:f8:d0:04:58:8b:4b:a8:9f:32:85:b2:61:6e:8e:
db:7e:ad:2d:71:19:39:df:44:14:8b:ee:97:df:3c:e9:e9:1e:
9b:af:56:20:06:02:24:31:a8:f7:2c:04:44:da:c4:8b:a7:ab:
6a:cc:3a:de:f9:74:92:39:2f:e3:da:15:c6:d3:0b:c0:2e:62:
ed:f7:86:8a:c8:8d:ef:c6:40:ec:21:84:9d:80:22:2c:e2:11:
16:a8:fe:10:c1:11:c9:0c:39:5a:6a:14:bf:41:af:48:9b:cf:
8a:7d:74:b8:3d:4b:2c:7f:02:a6:23:e1:d8:50:f3:be:9e:9c:
ed:89:76:fd:27:a6:5d:61:1f:a9:d1:7e:8e:d7:cf:89:41:12:
6d:3c:74:24:69:93:b4:1b:5d:79:97:cd:9a:c2:c9:7e:a8:65:
76:2a:e0:34:28:84:1f:08:93:83:eb:c5:1d:c0:aa:d7:0d:c2:
9b:cc:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:30 2025 by rpki-client