Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/18_cAqALLbeGjkZBydKs4yVEa04.roa
File: 18_cAqALLbeGjkZBydKs4yVEa04.roa (raw, json)
Hash identifier: 2j4zMvQfBeAmLY6Bhyc15ljZBNnJKvD1IRdd0wfaQ60=
Subject key identifier: D7:CF:DC:02:A0:0B:2D:B7:86:8E:46:41:C9:D2:AC:E3:25:44:6B:4E
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019A24A632FF8C817F16E0774FFBD974E478
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/18_cAqALLbeGjkZBydKs4yVEa04.roa
Signing time: Mon 27 Oct 2025 07:51:03 +0000
ROA not before: Mon 27 Oct 2025 07:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 109.122.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:a6:32:ff:8c:81:7f:16:e0:77:4f:fb:d9:74:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Oct 27 07:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7cfdc02a00b2db7868e4641c9d2ace325446b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:40:45:24:2b:1d:22:4a:0b:21:15:fe:17:
66:47:d2:65:d8:b9:76:da:4a:96:a3:30:a2:60:6c:
77:18:13:7a:22:1f:89:06:97:00:82:de:09:7b:fc:
de:86:4a:8f:60:8c:22:21:9f:87:4d:d7:26:df:b9:
1c:98:89:d4:27:30:3a:43:03:1a:0e:21:ad:22:b4:
f4:b4:c4:38:02:c3:77:ab:35:20:30:37:cf:ed:eb:
e8:92:f6:5d:fd:3b:62:0f:f0:ea:85:ee:91:89:5c:
f4:1b:a2:f9:59:9c:6b:11:46:8f:42:0e:db:e9:7a:
8e:3a:08:ba:e5:11:eb:62:6b:07:95:f7:2e:36:2a:
a1:29:fb:57:d2:c0:ae:78:6b:62:cf:ab:e9:36:3c:
c1:01:14:a6:ab:c4:2b:9f:42:8c:fc:09:fb:b0:36:
53:94:c6:03:29:9e:5f:5b:cb:df:7c:90:d6:06:65:
00:d0:7b:ee:88:fe:34:1b:b5:ec:09:17:1f:2b:1e:
bb:03:fb:15:0c:14:e0:09:41:4a:38:e7:0c:c8:23:
99:e0:8f:79:b3:92:80:63:f9:65:7a:bb:d1:27:5f:
56:a3:d1:9f:08:61:48:d2:99:02:20:15:cf:fa:b0:
c1:70:9a:a4:67:e0:57:cb:f6:04:15:c2:89:83:97:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CF:DC:02:A0:0B:2D:B7:86:8E:46:41:C9:D2:AC:E3:25:44:6B:4E
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/18_cAqALLbeGjkZBydKs4yVEa04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8b:20:02:b9:9f:35:01:a1:15:27:9c:b5:bf:4c:c0:20:a5:
07:d8:b6:33:ca:74:31:bf:e1:95:81:47:3c:00:69:06:cc:b8:
77:8e:5f:31:0d:10:b2:e3:c4:41:85:5d:ce:9e:2a:85:48:03:
8b:0a:dd:03:7b:99:90:4c:5a:7d:62:e5:b8:54:f9:39:fc:e3:
28:ff:e1:37:9f:35:99:4b:dd:82:d2:60:ba:b2:b2:eb:cd:81:
02:68:08:41:c7:08:09:c4:56:6a:17:91:dc:7b:bb:50:f7:6a:
39:ee:26:87:8c:f8:c2:59:63:2d:1f:cf:e9:c9:47:1a:cc:28:
2e:6c:44:dd:19:53:d0:ef:c9:a5:0c:3c:93:63:e4:3a:2c:14:
10:0e:20:5d:bc:1f:fc:03:92:1b:d3:04:37:94:d3:6f:2a:e2:
b6:51:ea:b2:43:5d:f7:b0:b4:8b:b5:0f:32:67:57:c5:d9:11:
3b:63:04:4c:e2:65:b4:08:6f:ac:7a:15:80:a8:30:78:88:e6:
98:7f:21:16:4b:4a:af:a7:77:10:47:5b:f8:28:2f:fd:21:8d:
65:cf:33:2a:3e:e5:b8:76:10:7a:96:5b:7f:7e:45:6b:9a:69:
f7:60:35:e7:0d:0a:8e:9a:96:86:a6:c1:e8:28:37:3b:de:63:
3e:5f:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:25:02 2025 by rpki-client