Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/5njdZzWdsNDIaM0kWByHFuFGfmo.roa
File: 5njdZzWdsNDIaM0kWByHFuFGfmo.roa (raw, json)
Hash identifier: 6bcMTWIGXv7X8+rpMto5rgu/3kqg17XHm1d6XPzHA6c=
Subject key identifier: E6:78:DD:67:35:9D:B0:D0:C8:68:CD:24:58:1C:87:16:E1:46:7E:6A
Certificate issuer: /CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Certificate serial: 019935CB3C19283C47ED5C2F8686C4D57F25
Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/5njdZzWdsNDIaM0kWByHFuFGfmo.roa
Signing time: Wed 10 Sep 2025 22:42:15 +0000
ROA not before: Wed 10 Sep 2025 22:42:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 185.216.13.0/24 maxlen: 24
2a13:6300::/32 maxlen: 32
2a13:6303::/32 maxlen: 32
2a13:6304::/32 maxlen: 32
2a13:6305::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:cb:3c:19:28:3c:47:ed:5c:2f:86:86:c4:d5:7f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Validity
Not Before: Sep 10 22:42:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e678dd67359db0d0c868cd24581c8716e1467e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:39:26:58:cf:6e:8c:5c:a9:2f:4d:a2:79:
6a:54:c6:6d:e2:b5:ed:6c:a3:8e:a8:ab:3b:49:90:
54:54:d2:5a:eb:99:45:b1:88:8a:4c:cb:8d:47:c1:
3d:09:db:81:a6:1c:fa:b7:33:0e:76:0e:83:f1:d4:
0c:15:39:25:e6:70:a2:d3:10:0f:a9:dd:73:ec:2d:
c1:b0:13:76:28:dd:b7:98:56:0c:b1:7d:90:7b:57:
b0:4b:54:e1:8d:b4:62:f1:7d:7f:cc:8a:5c:6a:f6:
6a:30:17:69:18:10:cd:20:21:dc:0e:65:25:23:6f:
3f:29:54:0e:6d:5c:7c:33:10:9e:32:e0:a6:78:c7:
4a:00:fa:4c:5f:ef:c3:1c:5b:90:d0:21:bd:34:5b:
0d:00:d1:e1:83:11:57:f8:c3:38:4c:c9:9d:f9:5e:
05:c0:8a:75:cc:76:58:08:5f:cd:31:bf:65:ad:30:
1b:58:88:04:69:a8:04:5a:0a:4b:ef:aa:93:00:10:
56:d7:4a:db:ed:f2:5c:63:bb:b4:09:0f:6b:fd:b9:
2e:15:7a:dc:20:f9:89:18:6f:50:a1:88:ba:1c:33:
0e:5c:a6:91:07:9c:d7:55:40:23:18:4b:f0:11:00:
88:af:f4:26:92:b9:15:d1:fb:d6:9e:70:cf:00:79:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:78:DD:67:35:9D:B0:D0:C8:68:CD:24:58:1C:87:16:E1:46:7E:6A
X509v3 Authority Key Identifier:
keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/5njdZzWdsNDIaM0kWByHFuFGfmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.13.0/24
IPv6:
2a13:6300::/32
2a13:6303::-2a13:6305:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:7a:16:bd:3d:5e:65:3a:ba:9f:8f:92:9b:e2:db:84:1b:7a:
1b:94:a7:cc:9d:ff:94:a8:b4:aa:64:22:0f:68:58:35:e9:08:
c3:55:39:82:f8:6b:01:95:da:96:13:4c:d7:47:f5:49:0d:af:
fb:c2:d7:f5:11:64:69:9c:1b:47:95:fd:a5:49:f8:f6:88:82:
96:9f:c1:d3:dd:9e:4d:a9:0f:0c:dc:fe:19:58:20:97:80:5f:
84:b5:8a:06:5d:14:7e:12:35:47:59:52:b6:de:f3:07:9a:39:
f9:5d:d4:f5:6c:5d:62:e4:e8:8a:af:13:75:19:44:9f:05:aa:
23:ea:2e:6f:e1:6c:dd:96:89:6b:19:73:c8:fe:29:88:c2:1f:
3f:df:98:c8:50:bf:58:05:f5:fc:e2:82:88:66:5b:01:e6:a9:
9c:9d:dc:d0:ab:6b:b6:20:9c:0a:c9:21:b8:6e:e4:2e:62:b3:
7d:8c:8c:57:e9:67:f9:67:c3:b4:fc:41:e7:aa:6b:64:b4:be:
cf:a8:d0:ba:45:b1:59:e4:5f:62:37:94:e8:6a:af:ec:09:d9:
a6:87:6e:64:8f:56:ac:b0:e5:b5:a6:13:1d:ad:19:13:4a:67:
bd:3d:46:f0:32:28:5b:e6:95:96:cf:2d:49:fe:a6:3c:b3:33:
de:52:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:31:11 2025 by rpki-client