Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/D6r05J6D3sA79ZZwq1eEGmeTVdE.roa
File: D6r05J6D3sA79ZZwq1eEGmeTVdE.roa (raw, json)
Hash identifier: 4BzqyVO9j3Co5UPBfledlmasXeXWcyyXJrp3dBPxaTE=
Subject key identifier: 0F:AA:F4:E4:9E:83:DE:C0:3B:F5:96:70:AB:57:84:1A:67:93:55:D1
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 019A499D16A82AB9EF2DFA4F15DDDF51E98C
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/D6r05J6D3sA79ZZwq1eEGmeTVdE.roa
Signing time: Mon 03 Nov 2025 12:07:03 +0000
ROA not before: Mon 03 Nov 2025 12:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210895
IP address blocks: 188.137.178.0/24 maxlen: 24
188.137.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:9d:16:a8:2a:b9:ef:2d:fa:4f:15:dd:df:51:e9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Nov 3 12:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0faaf4e49e83dec03bf59670ab57841a679355d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:02:c6:92:14:65:d3:24:16:91:03:a9:e1:
5c:4b:29:30:cb:e0:f9:98:dc:db:7b:80:5a:1f:7b:
16:ff:12:4f:9f:b9:79:7f:2b:a4:95:4f:3f:65:48:
a2:73:00:9e:37:71:ba:8d:d0:b7:d3:51:22:15:66:
cf:c5:78:b8:75:51:cd:1b:88:9b:fa:00:61:3b:1e:
06:4c:0f:37:d4:a7:1c:83:07:c9:34:c5:44:10:b4:
90:cc:77:58:11:36:d4:2e:8c:b2:36:2a:4c:c7:7f:
b5:3c:b5:5a:aa:73:d8:7c:af:8e:b8:41:a5:94:30:
44:0b:d6:22:ad:af:43:11:37:62:ac:aa:59:80:1d:
90:fb:36:92:5e:19:bc:80:d2:9f:3b:26:d7:dd:e0:
4b:5b:46:14:be:22:09:b0:1f:53:6c:21:b8:53:32:
70:fc:8c:7b:66:07:33:fc:69:11:d8:ab:d6:2a:6e:
6e:74:e4:1a:65:00:2b:d5:e8:bd:fd:99:e7:da:2f:
3c:5b:db:4e:e0:59:d9:84:8b:96:a6:bf:ac:ca:eb:
c2:92:ef:25:27:b3:b2:6b:63:e5:b9:4c:fc:ca:66:
e2:5b:84:6f:9d:97:c9:2f:20:0a:05:6b:f0:d5:eb:
8d:bd:77:f0:77:38:ae:08:18:0e:0e:c3:55:38:be:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:F4:E4:9E:83:DE:C0:3B:F5:96:70:AB:57:84:1A:67:93:55:D1
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/D6r05J6D3sA79ZZwq1eEGmeTVdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.137.178.0/24
188.137.244.0/24
Signature Algorithm: sha256WithRSAEncryption
94:84:c7:ee:c8:7c:27:e2:f9:b9:88:a1:ab:7a:28:f6:22:2d:
d0:97:69:a3:50:8a:cb:9d:e5:ca:f0:ee:e3:02:95:cc:31:ae:
15:30:00:24:18:97:10:2a:75:03:c2:60:4a:81:3e:6b:4d:af:
e1:4d:93:a7:b5:bc:7a:2d:30:0d:b8:38:cb:82:38:d4:50:78:
2a:c8:66:d8:23:eb:18:b0:aa:87:2c:58:66:1d:76:72:91:0e:
87:d2:48:77:ef:65:f3:ea:6c:c9:9f:bd:ac:0c:54:26:59:17:
dd:1f:ee:16:a2:09:1f:68:7e:30:e6:9e:fd:b5:e2:f6:e0:02:
5b:f1:de:9d:8e:5b:85:22:92:99:20:1b:67:3c:7a:2a:c1:c0:
22:f6:5a:b3:2e:b1:c2:07:02:6b:a7:21:e9:3e:e6:e7:93:68:
55:f7:df:3c:ae:f1:0f:bf:3b:02:ad:d8:86:e1:fd:cd:3b:f0:
67:18:59:8d:a9:9b:c2:91:46:41:05:c9:18:0c:27:77:45:8f:
33:4b:53:4b:86:f6:be:69:b5:cd:95:3c:b8:92:6e:ad:12:df:
e7:8b:84:52:9b:72:df:18:9f:2a:aa:a8:f7:b5:cd:b5:a0:3f:
9d:12:93:e7:38:11:a2:9b:38:69:f1:6a:c3:83:85:3a:77:26:
07:03:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:13 2025 by rpki-client