Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/0M1DXLxFQPCIyP5uwRc-fW0Dx88.roa
File: 0M1DXLxFQPCIyP5uwRc-fW0Dx88.roa (raw, json)
Hash identifier: UKdFC31e7EJQlxrXslshjmj+pJgArEgscyigyYDMTLM=
Subject key identifier: D0:CD:43:5C:BC:45:40:F0:88:C8:FE:6E:C1:17:3E:7D:6D:03:C7:CF
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 019A4E207CD5EF7D91FBCE74893178367F38
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/0M1DXLxFQPCIyP5uwRc-fW0Dx88.roa
Signing time: Tue 04 Nov 2025 09:09:03 +0000
ROA not before: Tue 04 Nov 2025 09:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20857
IP address blocks: 185.4.132.0/22 maxlen: 24
185.138.40.0/22 maxlen: 24
2a02:c500::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:20:7c:d5:ef:7d:91:fb:ce:74:89:31:78:36:7f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Nov 4 09:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0cd435cbc4540f088c8fe6ec1173e7d6d03c7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:5a:f2:07:1f:48:2b:38:02:58:06:24:02:
57:07:a1:fa:5d:45:c6:98:55:eb:25:f6:96:94:3e:
4a:61:4b:8f:f1:4f:76:a7:83:11:f8:90:4e:89:a2:
b5:e3:ef:32:cd:5e:c8:b8:b5:8c:27:12:df:8b:8a:
3f:41:98:3b:06:2c:4e:83:92:7c:ba:45:e5:c1:42:
f0:f5:76:df:f9:f8:91:5e:65:aa:78:f3:4a:8f:6f:
29:79:c3:d5:97:1e:01:e8:87:ab:61:a6:34:d8:3c:
49:b2:23:88:2e:ea:48:90:97:77:e6:5a:2c:d2:1b:
9c:dc:b2:23:f5:d8:34:ed:f9:d3:19:b8:71:ac:7a:
38:1f:8d:0f:9c:36:2a:56:e4:a4:75:98:0e:a7:cf:
7c:3f:3c:fe:d2:3b:c3:d1:b2:74:42:56:29:2e:4c:
fa:bc:b1:2a:f4:81:bb:3e:d9:9d:20:d8:f1:d5:ce:
26:66:77:93:51:1d:1d:0b:13:8a:f9:e1:4d:7d:60:
23:69:f9:c0:c6:b4:84:f3:6f:0d:97:85:b5:51:4c:
ca:7f:fe:4a:7e:bb:7d:b5:e2:a1:9a:94:05:28:50:
5f:55:8d:32:86:fe:20:e8:65:65:37:8a:d1:57:b4:
2a:ad:7f:b9:b8:b2:bd:1d:72:23:df:1d:35:42:55:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CD:43:5C:BC:45:40:F0:88:C8:FE:6E:C1:17:3E:7D:6D:03:C7:CF
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/0M1DXLxFQPCIyP5uwRc-fW0Dx88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.132.0/22
185.138.40.0/22
IPv6:
2a02:c500::/29
Signature Algorithm: sha256WithRSAEncryption
b5:f8:b7:2e:f5:37:cb:11:d5:c4:cf:03:c4:0e:96:19:9d:9e:
53:05:cb:04:95:d1:44:10:73:1e:39:68:32:36:dd:e5:6e:23:
06:1a:82:05:0b:a7:09:3b:89:de:cc:68:a0:fb:f2:2c:00:33:
d9:98:8d:42:04:11:7d:31:e1:f1:e2:dd:11:f3:4c:02:db:55:
36:a1:12:0d:e3:79:62:c7:74:f2:02:52:e3:fe:fd:e5:44:73:
36:35:50:61:0b:25:87:97:0b:94:02:10:6a:6a:25:ec:54:c3:
1a:bd:c9:a3:69:60:3f:c6:50:51:c3:d3:12:dc:0d:e0:e1:45:
54:76:f6:a9:76:16:e9:e8:1a:c2:de:e3:a6:bc:31:13:b0:75:
69:a5:77:cb:b2:ed:80:d6:ee:b6:56:67:64:fc:f5:2e:13:93:
4b:0c:ba:1f:ca:f2:12:c8:50:5e:94:94:0d:5f:e0:65:d1:b5:
dc:95:68:7d:9b:d1:31:68:b9:12:7b:97:6a:2f:3b:52:ba:f9:
c4:39:ac:f3:99:81:a0:00:62:13:1e:4d:f0:c6:a1:f3:f8:d4:
ce:c7:d9:66:72:b8:bd:fc:22:f5:0c:24:32:5f:82:b9:cb:c6:
28:a0:34:e9:79:d8:49:26:04:f9:35:e7:48:0c:33:d9:dd:24:
e1:df:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:01:07 2025 by rpki-client