Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/7cMsuu_jwZ4DOvuoBVdx2pi1zRQ.roa
File: 7cMsuu_jwZ4DOvuoBVdx2pi1zRQ.roa (raw, json)
Hash identifier: /MIDEJVEQSp9V1rCF5ezc9jg3qtYKJbL8o4PDhdKQ+g=
Subject key identifier: ED:C3:2C:BA:EF:E3:C1:9E:03:3A:FB:A8:05:57:71:DA:98:B5:CD:14
Certificate issuer: /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Certificate serial: 019A23DDB25C02B2FA3134F0346EB318E144
Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/7cMsuu_jwZ4DOvuoBVdx2pi1zRQ.roa
Signing time: Mon 27 Oct 2025 04:12:02 +0000
ROA not before: Mon 27 Oct 2025 04:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47582
IP address blocks: 185.175.100.0/22 maxlen: 24
2a0b:e500::/31 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:dd:b2:5c:02:b2:fa:31:34:f0:34:6e:b3:18:e1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Validity
Not Before: Oct 27 04:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edc32cbaefe3c19e033afba8055771da98b5cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:44:2c:35:fe:b8:17:de:4c:2f:4b:aa:45:43:
87:74:d4:e2:3c:ba:cc:ee:2a:f3:c0:2a:f7:00:da:
11:c8:e5:28:02:e9:aa:62:1f:09:ea:9a:a3:34:a3:
54:b1:e8:c4:bc:f0:bc:a4:bc:34:27:bb:a7:49:11:
5f:a7:de:ff:07:f8:bb:c0:2f:78:4e:9b:3b:a5:38:
a2:f0:38:2e:a5:14:1c:2a:6b:65:f2:a8:49:49:47:
20:1e:80:c4:f5:2a:bd:e9:04:4e:9c:5a:63:ff:df:
9d:32:87:10:02:3e:df:65:eb:f5:72:ef:9f:a1:51:
9a:60:e2:48:22:a5:23:d6:f1:c5:82:8a:ed:0f:75:
9b:75:05:ff:4a:4e:5f:12:d0:c0:3d:79:c0:b8:56:
77:43:fa:81:67:41:ad:b3:38:54:98:69:60:2a:b0:
4a:38:ac:62:e5:5a:5d:2c:14:94:59:5b:45:9d:23:
81:a3:f3:c6:d3:95:cd:f0:cd:b9:7e:db:48:76:20:
66:29:fb:64:ff:2f:04:50:91:b6:5c:bf:dd:9e:2f:
c6:ca:0f:ff:9f:9a:dc:e1:6e:c7:88:8f:a6:31:c9:
a0:d6:81:28:33:74:4b:ed:1c:84:af:36:b4:60:77:
40:e4:60:c3:d0:1c:7f:f5:58:1a:7e:5b:4f:69:f6:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C3:2C:BA:EF:E3:C1:9E:03:3A:FB:A8:05:57:71:DA:98:B5:CD:14
X509v3 Authority Key Identifier:
keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/7cMsuu_jwZ4DOvuoBVdx2pi1zRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.100.0/22
IPv6:
2a0b:e500::/31
Signature Algorithm: sha256WithRSAEncryption
5f:2e:fe:11:cf:10:77:c4:26:2a:10:f5:cd:41:d0:d9:62:8e:
25:d0:29:be:4c:12:32:aa:07:1a:57:5a:18:26:88:54:3d:f6:
5b:21:a6:ff:aa:e7:51:0a:df:6a:e4:ce:a7:01:ff:ee:47:21:
c6:7b:7c:74:ec:1a:18:82:8d:51:d0:32:f5:36:05:1b:95:e1:
28:ce:7e:57:e8:aa:82:0b:a3:e0:4c:b2:48:90:d1:21:42:71:
ed:9a:92:61:23:3a:38:00:20:37:b2:c9:b8:8c:0e:c5:78:35:
16:de:f1:c2:0f:19:c7:55:f1:b6:7e:71:ff:8b:86:5c:09:e7:
b2:9f:4b:71:fc:f7:5f:7a:4f:fc:e0:32:c9:75:5b:f7:cd:a8:
ab:d8:66:e7:1d:b8:3d:32:f5:bd:47:62:39:87:68:85:65:d3:
51:9f:82:e0:f3:ea:0b:0d:71:8c:3d:9a:d2:0c:40:a1:0a:3d:
e2:d9:2e:9c:62:f2:5e:0b:d7:a6:e5:7a:78:13:57:bf:65:10:
2e:3a:e8:5a:f2:af:fa:c4:48:fb:08:83:ae:43:0a:3f:f6:b2:
c0:f8:d9:87:fb:6a:f8:7f:06:4e:d5:49:07:ba:2d:45:15:40:
bb:58:dd:f1:b2:8a:80:48:7f:46:df:bc:79:f9:7e:11:29:6f:
d2:84:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:08 2025 by rpki-client