Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/DPHxPFz4hD849uPgUxDNkAj6z10.roa
File: DPHxPFz4hD849uPgUxDNkAj6z10.roa (raw, json)
Hash identifier: Piql48dJ9y76IkzwD/1Mb1jMycR207R9MhGmJ1kgKWk=
Subject key identifier: 0C:F1:F1:3C:5C:F8:84:3F:38:F6:E3:E0:53:10:CD:90:08:FA:CF:5D
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 019A72D5FB639347DC6DEC7EFA24BA3E9A02
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/DPHxPFz4hD849uPgUxDNkAj6z10.roa
Signing time: Tue 11 Nov 2025 12:13:37 +0000
ROA not before: Tue 11 Nov 2025 12:13:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57732
IP address blocks: 185.6.183.0/24 maxlen: 24
195.60.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:d5:fb:63:93:47:dc:6d:ec:7e:fa:24:ba:3e:9a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Nov 11 12:13:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cf1f13c5cf8843f38f6e3e05310cd9008facf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:a6:ee:5a:e4:3a:58:38:92:ac:d5:e9:5d:
9b:f6:ad:30:5c:08:86:7b:be:d8:f8:ed:98:38:05:
ac:6d:e9:57:35:d8:da:a9:83:73:55:f7:18:42:be:
e9:af:9e:19:d0:ae:e3:8b:a3:86:6a:42:1a:88:98:
90:30:20:38:c9:d9:dc:f0:1f:49:ae:6d:2a:0f:e0:
7c:c5:74:33:0b:3f:88:3f:4e:88:53:17:9b:f1:f3:
df:3d:1f:9d:86:80:2d:0b:b9:c5:c4:b9:93:32:e9:
b3:e3:a6:4b:05:7e:06:a6:14:6b:3d:ec:7a:ff:60:
76:17:5c:ed:75:1f:fc:aa:df:6c:f7:35:59:90:64:
44:42:bb:c9:36:34:fb:e1:d1:9e:2d:9f:67:1f:cb:
27:51:fc:20:e2:22:fb:a7:33:a9:9c:3f:a2:68:f4:
eb:2c:a2:25:9b:81:cb:22:95:be:03:9e:da:6e:44:
cd:0b:05:78:43:a1:4b:6d:91:c6:f6:18:46:af:30:
51:2a:bf:13:ae:94:69:32:40:a7:ae:3f:34:90:17:
3d:9a:4c:c1:fc:77:05:11:27:78:0d:10:7a:75:ae:
f9:fa:14:ec:36:5a:62:7d:9c:81:e0:80:79:2a:d2:
7e:06:a0:c1:0f:d4:f3:8d:63:de:e9:95:97:4f:5e:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F1:F1:3C:5C:F8:84:3F:38:F6:E3:E0:53:10:CD:90:08:FA:CF:5D
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/DPHxPFz4hD849uPgUxDNkAj6z10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.183.0/24
195.60.204.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:de:7a:7d:8e:87:fe:e3:8f:a0:96:45:bb:79:e9:fd:cd:c6:
6b:37:58:d9:3c:41:02:ea:4b:9e:a3:9b:2c:6e:ed:8b:8a:91:
ef:30:95:90:0e:b1:ce:4e:b2:2c:3b:49:89:76:9c:4b:1b:9a:
10:cf:36:8f:9b:37:0e:bc:8b:30:ba:71:08:b4:0d:22:56:76:
a8:6f:9c:47:ff:f6:8b:99:8a:8e:5d:53:70:f9:97:d1:93:68:
02:1f:49:ca:c4:ae:4a:00:d3:21:36:a4:aa:8f:ab:5b:07:59:
17:f8:97:29:b8:a7:57:7f:50:91:2c:5f:80:3e:a4:9b:ac:55:
be:66:48:f4:6e:a1:88:84:d1:70:61:04:41:c6:75:f0:4c:15:
8d:ed:21:13:87:38:8c:f8:d9:13:20:0a:2e:4d:e2:73:37:12:
91:71:bd:ce:97:2f:6b:6c:c7:02:df:84:7e:07:26:78:81:48:
32:19:e7:57:a6:0a:27:f3:7c:e6:cb:a7:a2:a1:d9:b9:b7:14:
82:12:82:9c:43:2c:02:71:36:61:1a:3f:6a:a3:09:54:8d:73:
25:77:06:9c:f1:5c:d8:5f:da:98:2a:c3:27:22:23:99:7b:20:
9e:fe:fc:17:a2:1b:fd:9f:dc:b7:6e:33:60:d6:32:b1:5a:96:
24:ba:d9:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZpy1ftjk0fcbex++iS6PpoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDExMTY1MTNjMjNkODdhYWNiZjViMWJiZWUzOTk4MWM3
NjMxYzEwHhcNMjUxMTExMTIxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2YxZjEzYzVjZjg4NDNmMzhmNmUzZTA1MzEwY2Q5MDA4ZmFjZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0im7lrkOlg4kqzV6V2b9q0wXAiG
e77Y+O2YOAWsbelXNdjaqYNzVfcYQr7pr54Z0K7ji6OGakIaiJiQMCA4ydnc8B9J
rm0qD+B8xXQzCz+IP06IUxeb8fPfPR+dhoAtC7nFxLmTMumz46ZLBX4GphRrPex6
/2B2F1ztdR/8qt9s9zVZkGREQrvJNjT74dGeLZ9nH8snUfwg4iL7pzOpnD+iaPTr
LKIlm4HLIpW+A57abkTNCwV4Q6FLbZHG9hhGrzBRKr8TrpRpMkCnrj80kBc9mkzB
/HcFESd4DRB6da75+hTsNlpifZyB4IB5KtJ+BqDBD9TzjWPe6ZWXT165GwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAzx8Txc+IQ/OPbj4FMQzZAI+s9dMB8GA1UdIwQY
MBaAFFrREWUTwj2Hqsv1sbvuOZgcdjHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAt
MjNhYzk3OWQ0MWFkLzEvRFBIeFBGejRoRDg0OXVQZ1V4RE5rQWo2ejEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAtMjNhYzk3OWQ0MWFk
LzEvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuQa3AwQC
wzzMMA0GCSqGSIb3DQEBCwUAA4IBAQDA3np9jof+44+glkW7een9zcZrN1jZPEEC
6kueo5ssbu2LipHvMJWQDrHOTrIsO0mJdpxLG5oQzzaPmzcOvIswunEItA0iVnao
b5xH//aLmYqOXVNw+ZfRk2gCH0nKxK5KANMhNqSqj6tbB1kX+JcpuKdXf1CRLF+A
PqSbrFW+Zkj0bqGIhNFwYQRBxnXwTBWN7SEThziM+NkTIAouTeJzNxKRcb3Oly9r
bMcC34R+ByZ4gUgyGedXpgon83zmy6eiodm5txSCEoKcQywCcTZhGj9qowlUjXMl
dwac8VzYX9qYKsMnIiOZeyCe/vwXohv9n9y3bjNg1jKxWpYkutkd
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:16:06 2025 by rpki-client