Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/0j4zGysO_O-dzNVZ-jKiyP9Ggsc.roa
File: 0j4zGysO_O-dzNVZ-jKiyP9Ggsc.roa (raw, json)
Hash identifier: Gf2VsJuB8duFQ6nJJfI/YawuoQ34OO9JSfa7KF4vi0Y=
Subject key identifier: D2:3E:33:1B:2B:0E:FC:EF:9D:CC:D5:59:FA:32:A2:C8:FF:46:82:C7
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 019A17C38DDAB7973988621B5DA922AB4F4A
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/0j4zGysO_O-dzNVZ-jKiyP9Ggsc.roa
Signing time: Fri 24 Oct 2025 19:48:02 +0000
ROA not before: Fri 24 Oct 2025 19:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 195.66.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:c3:8d:da:b7:97:39:88:62:1b:5d:a9:22:ab:4f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: Oct 24 19:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d23e331b2b0efcef9dccd559fa32a2c8ff4682c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:f0:93:02:b7:21:52:0d:95:d7:1d:33:94:
4f:e9:5a:3f:da:38:b5:7f:62:f2:29:70:7c:5c:81:
c7:6f:a6:be:d7:c6:35:e4:ff:f5:63:6a:01:99:58:
2a:49:53:ad:67:c6:34:dd:23:64:8c:0c:db:b0:83:
c0:33:49:cf:d4:2a:30:ee:a1:d7:f3:02:6f:2c:04:
15:fc:54:fc:4b:e3:13:64:3f:90:2d:39:1a:7b:03:
b1:17:c3:b9:2d:d1:0d:6d:7c:2c:18:29:f1:c5:ce:
b8:78:74:53:e2:4c:f4:53:de:1c:ed:28:ce:8a:86:
08:6c:e3:e9:25:b8:f4:80:ff:e2:04:36:5d:00:9d:
c4:29:76:a0:c4:7d:5b:63:cb:72:c2:90:cc:19:23:
76:29:e3:15:0a:6d:29:5d:fe:a8:f9:e7:f8:95:27:
0a:31:15:cf:2c:fb:f2:ea:04:a4:fc:b1:7f:d1:1c:
e2:86:ec:5d:0b:92:d9:84:e4:8b:2d:46:94:4e:e7:
cf:95:27:28:31:a6:4c:47:6c:da:68:c2:43:6d:25:
b0:bd:7a:22:21:69:be:f7:b4:2a:06:37:e9:6a:69:
e9:1d:40:eb:de:a8:11:b8:47:0b:cb:75:3a:97:62:
31:94:98:9e:e9:de:74:54:09:54:90:07:4d:66:ee:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3E:33:1B:2B:0E:FC:EF:9D:CC:D5:59:FA:32:A2:C8:FF:46:82:C7
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/0j4zGysO_O-dzNVZ-jKiyP9Ggsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:05:8d:ce:ab:26:ae:9c:a9:34:62:df:3f:07:54:b5:53:c6:
19:79:67:4a:84:cf:c8:33:dd:92:80:b0:d0:a1:2e:00:1e:c6:
34:4f:1c:a1:79:1b:2c:d4:c7:a1:18:80:a3:7a:15:5b:4d:22:
b4:3c:5c:a9:ed:50:c7:fc:01:eb:53:fc:e7:bd:be:08:8c:29:
e1:9e:d4:04:a9:a7:67:eb:f6:22:d4:c9:7c:7d:d3:d3:dd:89:
71:ab:12:c7:d1:46:22:ce:a2:4b:c2:07:2c:4e:61:df:e7:2d:
18:03:7d:c0:92:31:7f:aa:64:8f:a8:5a:00:b1:b4:35:0b:c6:
94:e3:0d:3a:03:01:07:c4:75:97:80:ba:03:ba:57:f1:e0:41:
30:32:29:73:d2:43:80:cc:e9:42:fe:aa:bc:86:74:87:54:b2:
47:59:36:4f:71:52:22:77:8b:0e:55:88:38:04:00:0f:ba:df:
e1:cd:d6:67:3d:50:ea:13:65:ea:c8:d3:7f:83:b5:15:2a:0b:
4f:cc:77:dc:47:78:3c:ce:1d:cb:a0:e7:53:91:03:7f:a9:56:
7f:bc:07:6c:dd:59:a6:da:5d:86:b6:67:3c:a8:fe:d6:a4:0a:
94:c2:9a:8a:da:46:82:29:53:14:17:88:51:00:80:51:27:68:
a9:71:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:22 2025 by rpki-client