Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/xDk85mkgQuWalB3gqd14km-ibFY.roa
File: xDk85mkgQuWalB3gqd14km-ibFY.roa (raw, json)
Hash identifier: cwL93Aw5JJyqitIvfD6+Awn4jwkns5tDaXlp4E9iKuc=
Subject key identifier: C4:39:3C:E6:69:20:42:E5:9A:94:1D:E0:A9:DD:78:92:6F:A2:6C:56
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 01983C32969744A4CFB02A394C56A669C34E
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/xDk85mkgQuWalB3gqd14km-ibFY.roa
Signing time: Thu 24 Jul 2025 11:30:04 +0000
ROA not before: Thu 24 Jul 2025 11:30:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3292
IP address blocks: 192.66.103.0/24 maxlen: 24
192.66.104.0/24 maxlen: 24
192.66.105.0/24 maxlen: 24
192.66.106.0/24 maxlen: 24
192.66.107.0/24 maxlen: 24
192.66.108.0/24 maxlen: 24
192.66.109.0/24 maxlen: 24
192.66.110.0/24 maxlen: 24
192.66.111.0/24 maxlen: 24
192.66.112.0/24 maxlen: 24
192.66.113.0/24 maxlen: 24
192.66.114.0/24 maxlen: 24
192.66.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:32:96:97:44:a4:cf:b0:2a:39:4c:56:a6:69:c3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Jul 24 11:30:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4393ce6692042e59a941de0a9dd78926fa26c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:28:33:e9:a2:fb:0b:39:21:e3:d1:88:3c:
a0:c1:3f:46:6a:e0:e2:b2:df:68:e0:49:f0:84:fb:
46:9a:5e:08:6b:d7:cc:b6:62:bf:3a:23:d5:38:6d:
cd:8d:06:2e:42:d8:8b:01:3f:25:11:f5:e1:e2:fd:
18:86:13:e5:34:8b:19:b4:d5:8b:e7:69:1b:26:d4:
29:1c:bb:79:37:b1:3c:dc:84:35:64:d9:0c:e8:71:
1f:21:3c:80:f3:99:1f:c2:0a:98:6e:ec:a4:74:2c:
cc:6a:76:eb:84:08:8e:a1:fa:be:16:9f:78:89:3c:
b8:94:2b:85:15:d5:8f:37:77:f5:ae:29:62:ac:d0:
de:14:6d:a6:07:08:b4:55:79:d1:5f:45:f4:4a:69:
a2:04:e4:fd:dc:14:a6:ce:d8:ce:bf:ca:0f:19:be:
db:8c:c5:67:cf:55:0b:8a:ea:ac:c9:b6:6e:d0:68:
b2:81:62:eb:7c:86:0a:4a:7e:b4:de:09:a1:ec:de:
d2:5d:3f:4f:c5:69:36:72:8e:84:6a:63:30:b2:b4:
aa:18:b7:43:28:51:a4:b8:95:75:c7:ff:7c:cc:11:
4b:aa:2a:d0:e3:c8:e3:60:c9:8d:2b:a9:b5:68:c5:
9a:22:e8:1c:10:43:a1:32:c5:19:17:97:86:99:81:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:39:3C:E6:69:20:42:E5:9A:94:1D:E0:A9:DD:78:92:6F:A2:6C:56
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/xDk85mkgQuWalB3gqd14km-ibFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.66.103.0-192.66.115.255
Signature Algorithm: sha256WithRSAEncryption
60:b5:44:c0:d5:bd:72:49:a6:17:72:f2:ba:2b:33:55:b1:9c:
fa:41:da:e8:b0:ec:bc:fe:49:01:65:2c:a7:e5:f5:34:1e:e5:
be:dc:39:32:69:43:52:75:db:92:ed:e0:c5:0b:c6:4e:8b:65:
73:12:0b:1c:a4:da:11:97:57:83:fe:9b:f6:f9:a3:fd:12:b7:
ce:02:53:b7:7a:66:6d:b5:9d:2c:7b:02:81:1d:29:aa:6e:82:
78:3e:b0:97:2e:99:c5:98:44:bd:23:b6:2e:92:14:0c:02:d2:
c1:be:d6:80:64:63:bd:f8:57:32:dc:b3:2b:22:5d:f0:87:e9:
4f:af:58:40:f6:92:b3:5b:b3:d4:61:97:be:39:f7:e1:83:1a:
be:36:7e:c5:e9:6f:d0:43:5b:25:76:fb:1b:48:14:20:1f:6a:
be:96:1a:5a:f0:54:00:59:34:07:c4:9a:12:d1:16:99:87:ec:
bf:40:20:46:24:9d:ec:74:8c:d2:f7:d7:91:f4:da:dc:d7:38:
33:80:3f:94:82:50:c0:3d:09:56:68:01:d6:a9:41:0f:89:07:
b9:a8:cf:73:d9:0c:f8:d7:81:42:f0:c2:00:f7:bf:f6:01:a7:
cb:64:f1:b1:e8:35:89:36:28:4f:77:c4:57:3d:95:d5:48:f2:
af:bd:b6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:59 2025 by rpki-client