Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/1MXWay8i8Jgpl2Ec45766ozfEQI.roa
File: 1MXWay8i8Jgpl2Ec45766ozfEQI.roa (raw, json)
Hash identifier: iWtw4F9PH8kF6GGDUuqXl1iDAmwZFyA4kEph6c61hFg=
Subject key identifier: D4:C5:D6:6B:2F:22:F0:98:29:97:61:1C:E3:9E:FA:EA:8C:DF:11:02
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 019A5CD02AB6EE7B0F2DC21C81925830C6C7
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/1MXWay8i8Jgpl2Ec45766ozfEQI.roa
Signing time: Fri 07 Nov 2025 05:35:37 +0000
ROA not before: Fri 07 Nov 2025 05:35:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215033
IP address blocks: 85.90.210.0/24 maxlen: 24
213.177.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:d0:2a:b6:ee:7b:0f:2d:c2:1c:81:92:58:30:c6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Nov 7 05:35:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4c5d66b2f22f0982997611ce39efaea8cdf1102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:5b:87:bb:01:1b:09:26:f2:26:c0:af:57:
32:81:b2:a7:95:36:76:23:44:9c:ac:91:a4:9c:3c:
8c:0e:04:fe:a5:4c:37:28:2c:8b:07:3f:30:9b:dd:
f0:41:9f:20:08:f0:16:a2:a7:f4:c3:ca:4a:6b:8f:
8a:b3:f9:9b:0e:96:0d:55:a2:74:f7:2d:8e:4d:6b:
d2:82:4c:4f:c7:d8:4f:ff:b5:1a:fc:85:e2:54:d0:
66:b8:65:81:5d:bd:6d:39:1d:f4:27:a6:28:c7:e7:
b0:42:62:d8:c7:42:7d:4c:f9:15:ce:c6:bb:82:bf:
21:b6:56:f7:a1:d3:f4:4a:00:07:d4:8c:66:97:0c:
70:24:4a:e6:89:f8:3e:30:10:93:f6:39:f4:81:3a:
3d:ff:33:cd:61:28:3c:a1:9d:37:4d:9d:2d:ae:32:
37:7a:f5:14:e4:08:01:32:34:16:0d:72:cc:e6:87:
c4:27:6f:10:4b:9c:d6:79:77:63:5e:4d:d5:d3:9d:
ef:dc:56:1e:49:a8:44:04:f3:5d:c4:ee:bf:65:a3:
b9:f4:73:65:fc:b5:b0:b4:c8:25:90:9a:30:9a:b2:
cf:f5:40:2e:23:78:83:40:a7:fe:fd:70:fb:81:92:
35:4e:13:35:47:3c:fb:1e:ec:a6:91:30:cc:af:d9:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C5:D6:6B:2F:22:F0:98:29:97:61:1C:E3:9E:FA:EA:8C:DF:11:02
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/1MXWay8i8Jgpl2Ec45766ozfEQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.90.210.0/24
213.177.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a6:ed:1d:e6:05:18:d9:56:27:99:1b:17:cd:31:b9:bb:c1:
b6:54:6d:ee:dd:a5:8f:be:47:d2:9f:c9:b9:68:84:d7:82:77:
74:f6:aa:6f:03:88:2e:da:2d:20:d4:86:85:f6:f6:27:0d:b7:
19:4a:bd:99:25:03:0b:17:32:f5:65:3f:0f:3a:64:70:03:87:
ed:59:02:85:6b:17:60:5c:ed:60:ac:93:54:ad:53:3d:4d:19:
2d:ee:7a:b0:a9:7b:3f:45:c4:17:a5:82:bb:5b:23:4c:6d:25:
bf:de:45:98:45:ab:35:3b:d6:36:a0:2a:0d:00:49:1b:33:8f:
e3:fa:e8:03:f4:4f:89:06:c4:5d:6d:c0:b2:6c:4f:6c:8f:7e:
7e:23:8c:30:91:5d:1e:0a:f3:cb:fd:90:ba:c9:0f:ee:a5:de:
85:31:ac:ca:3e:01:61:26:cd:41:33:c4:9b:1b:53:a6:53:b3:
ce:9e:14:19:d8:91:f7:12:a6:1d:02:e8:bd:9d:90:bd:e1:16:
ac:13:e1:3e:2f:c8:b5:f0:63:2c:ba:64:c3:43:50:23:c2:21:
ed:ad:a0:37:5c:1b:7b:d3:43:e8:a1:27:16:17:0a:77:1a:da:
63:b3:66:05:82:9c:4f:c6:34:ed:b0:fa:02:2b:bc:dc:7c:f9:
69:51:36:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:49:29 2025 by rpki-client