Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-DMGlE2DALi_zJDSuCgOWJSQOdI.roa
File: 1-DMGlE2DALi_zJDSuCgOWJSQOdI.roa (raw, json)
Hash identifier: pY46S4qzZW3hWiXdYSz/eg2cvVcyHp6k6aNvfbgcjFI=
Subject key identifier: F8:33:06:94:4D:83:00:B8:BF:CC:90:D2:B8:28:0E:58:94:90:39:D2
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019A29DFF36874A829A782773ECFE05AE0E5
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-DMGlE2DALi_zJDSuCgOWJSQOdI.roa
Signing time: Tue 28 Oct 2025 08:12:13 +0000
ROA not before: Tue 28 Oct 2025 08:12:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 194.231.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:df:f3:68:74:a8:29:a7:82:77:3e:cf:e0:5a:e0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 28 08:12:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f83306944d8300b8bfcc90d2b8280e58949039d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:03:03:e1:31:39:d6:42:05:1a:f0:c9:84:
08:fa:86:d0:94:13:f9:88:49:08:5b:95:9d:df:1e:
ea:a5:aa:70:7b:72:e9:33:61:65:e2:d9:64:24:24:
0f:27:33:a2:88:33:09:61:a8:30:37:83:59:d6:58:
2c:08:52:08:79:d0:79:03:97:82:26:7c:ad:39:9f:
e2:37:ca:17:d8:85:56:02:2d:b7:55:45:5a:60:30:
2c:11:c4:42:5a:21:c5:ec:4f:27:20:88:b7:15:10:
83:fa:cc:1c:21:a0:6e:f8:b1:b4:e1:64:d1:51:a6:
f4:e2:a5:d0:23:72:c7:a6:d5:67:f1:89:e3:39:e8:
e7:3f:f3:ac:97:d3:36:4a:cd:4e:39:fd:ea:c7:0b:
11:ce:09:68:ea:e0:37:5a:36:d1:6c:f2:c9:db:a1:
1f:1b:47:37:e7:2f:21:45:ed:1c:81:9d:b3:98:33:
45:03:9c:e8:91:91:34:ad:85:e0:c3:6f:df:1f:d4:
50:52:79:f2:5b:e4:01:12:a4:24:d4:bc:e3:c8:7e:
8b:10:a8:6c:bc:f5:17:ad:2b:7b:9f:65:ee:d3:4a:
a4:9e:f4:da:c1:d4:59:c3:61:9c:50:b3:28:62:9b:
5c:d0:6b:eb:82:34:52:02:da:92:33:5b:ad:ac:f9:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:33:06:94:4D:83:00:B8:BF:CC:90:D2:B8:28:0E:58:94:90:39:D2
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-DMGlE2DALi_zJDSuCgOWJSQOdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.222.0/24
Signature Algorithm: sha256WithRSAEncryption
78:92:06:97:bc:5d:a1:3d:bb:79:89:ff:e7:bd:df:54:88:af:
86:f7:d0:a7:b4:ed:bc:eb:9c:b6:6c:41:67:3e:d8:c7:7a:b7:
d7:66:1a:19:94:b3:d5:02:04:e9:77:41:0b:52:ad:65:ec:02:
b6:ff:8a:0e:9e:5f:3e:f4:ec:94:22:0f:87:f3:b1:be:f3:7d:
98:e3:dc:55:bf:9b:4f:9b:98:f5:15:67:7b:ac:f3:3d:e2:6f:
34:f3:27:4c:dc:ba:1a:d8:9d:03:23:32:11:cd:c0:a1:d5:03:
76:86:30:07:c5:77:59:9b:ec:f0:79:dc:ac:2f:9d:2b:eb:fe:
46:31:fa:2d:d2:38:4b:1e:e6:e9:25:64:9a:b2:ef:13:89:01:
c1:1c:9c:26:b1:ce:f4:e7:9b:aa:e8:ab:15:99:41:fa:18:1b:
92:7a:a7:de:8b:6b:e4:11:f6:75:d4:69:7d:17:22:85:9b:1f:
99:4b:0a:89:37:c2:a4:f3:a2:fb:fc:1e:17:5a:70:d1:63:cb:
16:e3:d2:4f:34:7d:74:6b:82:97:0a:67:c4:32:89:a7:0e:5a:
56:c2:02:19:b1:c5:b2:78:78:b7:00:e5:e8:2b:85:b4:d2:7f:
ea:62:4d:17:28:68:79:5a:b3:65:55:de:5a:b3:dd:52:04:68:
f6:cd:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:13 2025 by rpki-client