Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/1-LDLwStGzUMrrV5QzmoRCQ8qrEo.roa
File: 1-LDLwStGzUMrrV5QzmoRCQ8qrEo.roa (raw, json)
Hash identifier: cdBNdf7iqKZd9SFWXblKfPWgwOyg7ATIsmgjUz2MrVM=
Subject key identifier: F8:B0:CB:C1:2B:46:CD:43:2B:AD:5E:50:CE:6A:11:09:0F:2A:AC:4A
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 019A2FF6ED5853487D57E72515960FF2342C
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/1-LDLwStGzUMrrV5QzmoRCQ8qrEo.roa
Signing time: Wed 29 Oct 2025 12:35:03 +0000
ROA not before: Wed 29 Oct 2025 12:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216024
IP address blocks: 217.65.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:f6:ed:58:53:48:7d:57:e7:25:15:96:0f:f2:34:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Oct 29 12:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b0cbc12b46cd432bad5e50ce6a11090f2aac4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:26:b2:8f:a0:76:8a:74:08:f8:9b:71:20:
7c:11:6a:e8:51:3d:57:2a:86:aa:8a:b6:d2:a2:d6:
c5:0c:12:76:c5:ff:74:93:e2:43:fe:f0:71:60:6f:
b3:f3:86:8d:28:29:8d:12:82:c1:01:33:e0:7f:d6:
5b:86:ff:90:93:bd:b9:63:20:44:29:86:e3:cf:2a:
43:d1:0a:e8:e4:6b:2d:9d:27:1d:ed:59:af:4d:53:
a8:09:fe:8c:e1:27:bf:ed:e3:9c:0c:0b:8e:5c:cb:
bb:77:a6:e5:e4:85:9e:d0:44:84:16:ca:70:bb:58:
ce:cc:a9:fb:dd:4a:ec:82:0b:b6:2c:78:ef:c1:9e:
73:16:9b:34:ec:01:74:01:9a:74:f5:75:57:65:21:
63:61:99:fa:41:d6:70:b8:76:1f:85:4b:45:92:ab:
fc:89:b0:23:13:5f:17:1f:00:d1:26:b7:44:dc:de:
b0:1d:99:0e:43:67:0f:6a:2d:fd:09:45:a1:5c:be:
b7:da:aa:df:e0:72:dd:4a:12:f5:67:66:a6:98:57:
71:2f:0b:d0:64:ed:a2:5d:75:be:80:e6:13:91:75:
ae:8e:e4:63:cb:8d:76:50:66:c7:03:7f:67:97:4f:
b4:90:20:a2:2b:34:a0:9f:35:62:24:25:96:4d:d4:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:CB:C1:2B:46:CD:43:2B:AD:5E:50:CE:6A:11:09:0F:2A:AC:4A
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/1-LDLwStGzUMrrV5QzmoRCQ8qrEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.79.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4f:b2:2f:2d:4e:a6:88:78:46:67:b1:7d:c4:41:5d:95:58:
2d:5c:77:4c:76:7d:02:6a:af:51:6b:16:a5:29:5c:d1:1b:df:
21:ea:c8:08:52:dd:7a:54:6b:92:5a:31:5c:10:d3:98:ef:2a:
01:c0:08:25:9d:23:ee:99:0d:ee:71:1d:e5:04:a0:40:7f:6b:
89:05:c2:97:11:47:35:1d:18:b8:02:f1:e2:42:ec:e2:f1:94:
40:c3:54:0b:cd:8c:f5:00:e3:31:67:a4:ee:60:bd:78:b2:9c:
01:04:00:91:f7:94:78:d2:ee:52:34:4f:66:56:df:01:27:93:
91:b4:60:39:18:10:cb:9d:aa:8b:86:85:96:bb:75:68:35:ba:
03:99:d5:31:93:5c:6c:a1:74:41:80:a5:28:2e:6f:95:21:83:
cf:aa:99:56:4e:48:76:0d:7c:88:95:4a:36:ad:f2:07:79:57:
b9:8d:6d:9b:c5:8d:76:2c:02:fb:bf:37:07:2b:62:95:39:17:
3a:5a:af:56:4b:55:9c:02:9c:b8:76:86:c9:b9:86:3b:1c:41:
6e:76:32:24:06:3e:6c:04:32:1c:e4:b7:ac:f3:d7:c3:7a:39:
9d:db:7c:45:4f:a3:95:11:c5:8c:6a:5a:f9:6e:9f:44:a7:e4:
df:3a:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:46:02 2025 by rpki-client