Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/677kxNZJxuXIAZm_Makc75cUEbY.roa
File: 677kxNZJxuXIAZm_Makc75cUEbY.roa (raw, json)
Hash identifier: 1yzLVg+YEn46sLvgy8a6l3Pk9qoeFrmDFUm9GZOIf14=
Subject key identifier: EB:BE:E4:C4:D6:49:C6:E5:C8:01:99:BF:31:A9:1C:EF:97:14:11:B6
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 019A101C53C74984227A5F4370196B5A9360
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/677kxNZJxuXIAZm_Makc75cUEbY.roa
Signing time: Thu 23 Oct 2025 08:08:03 +0000
ROA not before: Thu 23 Oct 2025 08:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203217
IP address blocks: 185.194.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:1c:53:c7:49:84:22:7a:5f:43:70:19:6b:5a:93:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Oct 23 08:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebbee4c4d649c6e5c80199bf31a91cef971411b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:1e:46:4d:f3:7a:38:3d:2d:c4:9c:f7:f4:
8f:b0:6f:f8:d4:70:db:f9:8f:23:9b:30:4c:3e:88:
bd:2a:aa:ee:8e:93:ca:c9:f1:fc:70:0a:4c:a9:20:
93:1b:f7:5c:4c:1b:28:91:82:bc:df:9d:c8:2c:58:
25:f0:9c:17:91:32:1b:88:a9:98:66:63:65:88:ac:
10:67:12:ec:6e:3d:d2:d2:27:75:e0:6b:12:0f:04:
16:72:44:b9:c2:bf:cc:85:83:8c:a4:da:db:57:c1:
19:a9:4f:89:01:62:47:24:be:a0:1d:ce:76:1f:9a:
a1:ff:df:15:df:87:08:7c:62:a8:39:43:db:e8:12:
fe:36:1c:80:c3:2a:b6:fb:fb:90:64:1f:54:5e:40:
d0:e2:a6:00:c7:88:da:66:dd:3f:70:c8:b4:d6:5d:
54:25:fe:a5:5f:9d:83:d6:63:8e:13:58:a5:56:2e:
14:7f:1f:e0:d8:c9:70:85:13:0d:5d:f6:98:39:20:
0d:96:91:f1:ec:c3:e7:b3:bb:a3:f3:4a:91:8f:c1:
14:09:1a:5b:d6:ca:e8:0d:ac:1e:bd:9d:23:c2:2a:
d5:8d:07:33:0b:0a:61:58:da:17:f0:16:d9:bd:26:
4b:b8:6c:52:b3:98:92:cd:07:84:a2:17:29:d5:a7:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BE:E4:C4:D6:49:C6:E5:C8:01:99:BF:31:A9:1C:EF:97:14:11:B6
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/677kxNZJxuXIAZm_Makc75cUEbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
35:e4:80:60:44:2f:f2:51:46:56:a8:1a:29:b0:c8:27:a4:70:
d9:a6:19:4f:15:61:0e:a2:90:79:3a:9a:4d:b4:be:fc:0c:0d:
16:68:21:07:f9:a2:25:0d:7b:1f:46:2a:54:a8:6a:16:01:34:
16:4c:5d:a8:0b:46:f3:d4:85:c6:70:1a:c8:95:06:79:5d:64:
8c:bb:37:47:3c:b6:f2:a2:3e:0b:bc:16:42:0a:15:b1:26:50:
a0:5a:b4:69:49:d2:d2:bf:67:d5:76:0f:5e:cd:9c:29:ee:ef:
61:b9:3f:e5:75:2a:5c:ba:11:01:1a:c0:f1:bc:c0:e0:e2:29:
97:38:6c:09:a4:c8:41:d8:84:a5:51:33:0e:7c:5d:c8:d8:c4:
eb:41:22:dc:88:c4:2c:6b:6d:99:a7:72:e3:45:0a:ef:30:3d:
68:77:27:fd:a1:bf:0d:1c:e1:68:20:47:9e:47:e5:73:72:da:
90:ff:05:86:4e:55:ec:7b:75:94:4a:37:35:d5:ef:ca:06:ae:
a7:52:6e:dc:78:21:d2:45:a2:f6:53:b5:15:e6:4b:6a:fe:cc:
86:f5:45:cc:64:01:9e:ce:a8:2d:74:a2:dc:3e:23:53:18:44:
40:42:5a:4c:f0:38:59:13:b2:7a:36:fb:71:2f:40:ba:3e:09:
ab:77:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:13:50 2025 by rpki-client