Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/ADc0-Z75WPBsaBDTplhpevySpwU.roa
File: ADc0-Z75WPBsaBDTplhpevySpwU.roa (raw, json)
Hash identifier: PLV8H8uGdTSutML/LIXLIYXv/TzH5t9Y0T2S9cmwyI4=
Subject key identifier: 00:37:34:F9:9E:F9:58:F0:6C:68:10:D3:A6:58:69:7A:FC:92:A7:05
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019A39B87C19861E1737705F0B2E3609DA13
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/ADc0-Z75WPBsaBDTplhpevySpwU.roa
Signing time: Fri 31 Oct 2025 10:03:03 +0000
ROA not before: Fri 31 Oct 2025 10:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 158.94.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:b8:7c:19:86:1e:17:37:70:5f:0b:2e:36:09:da:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Oct 31 10:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=003734f99ef958f06c6810d3a658697afc92a705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:99:81:6f:a7:30:2c:60:34:79:84:83:ca:
69:c4:b7:cd:ba:22:d3:87:4b:b5:39:d0:ec:f8:7b:
3f:95:b9:e1:af:c7:30:0b:ae:e4:a4:dd:07:a9:1b:
18:06:12:f4:2b:67:b9:0b:49:a7:8a:76:a8:04:ff:
f3:32:6c:7c:45:b4:d9:1e:52:33:25:28:30:9a:1c:
a8:47:0f:f4:ef:ae:12:ff:af:64:73:5c:1f:1a:9f:
fd:87:f1:f7:ee:ad:f9:5d:a2:11:c9:28:a7:32:a9:
41:1c:65:b3:f6:4a:e9:99:22:e4:8e:1e:7e:91:35:
e1:d9:a2:4d:3b:0f:78:65:28:86:af:f7:97:a5:0c:
0a:64:30:15:16:35:79:80:3a:4b:52:c9:93:c7:c9:
94:1f:45:a7:fe:2e:10:31:39:5e:d5:7d:1f:14:cf:
df:a2:cb:60:fd:02:cf:bc:50:5c:b8:30:65:33:80:
e6:17:07:d4:4f:68:5d:fd:8f:2b:e2:7a:cd:6d:ce:
8b:1b:e5:84:f2:33:db:cf:d6:74:79:39:93:82:c0:
a0:1e:d4:2b:3d:ef:27:72:09:41:e1:47:ca:5a:2f:
87:62:9d:47:56:54:ef:d3:52:6c:7a:de:a8:fa:b7:
0d:07:38:17:82:ed:7d:c6:6b:27:0c:45:e5:6a:bb:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:37:34:F9:9E:F9:58:F0:6C:68:10:D3:A6:58:69:7A:FC:92:A7:05
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/ADc0-Z75WPBsaBDTplhpevySpwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c7:f2:34:1f:65:84:6c:f0:e5:e5:e7:ef:e6:4a:b0:7a:37:
39:92:dc:82:1a:07:42:5b:e5:b3:88:4d:15:d6:ee:8b:ea:48:
b6:91:e9:a8:7c:02:cc:e4:21:b2:d1:ac:13:ed:76:ae:69:11:
82:c7:e7:cd:09:44:2a:88:42:18:1a:c5:b5:0d:49:e0:5a:6f:
3d:aa:d7:ed:98:7d:89:15:21:5b:43:09:41:70:9a:2a:17:42:
f6:41:e9:89:ef:88:40:54:2c:07:4e:62:dc:29:20:4f:30:17:
c8:7f:ab:e1:90:62:7d:d8:17:38:26:3e:aa:77:5b:1d:63:30:
3b:56:8d:d5:a1:e0:da:8c:fc:4f:b3:d1:c6:7f:e4:62:e5:03:
8b:af:ae:c8:0e:b2:74:18:53:e6:25:b0:bd:03:33:2e:ef:20:
89:f3:e4:ea:8b:61:ce:eb:b0:20:b3:c4:f8:6a:40:ab:46:4f:
14:c1:bf:05:0d:6a:10:f7:69:9c:bd:95:47:f9:90:11:21:d4:
66:5c:5e:d0:ab:2a:35:ea:15:81:be:e7:ce:4d:07:ef:c8:c4:
ed:1c:96:cd:bb:6f:8e:0b:a1:48:93:7e:9f:24:be:63:49:d2:
21:cc:a6:39:92:fe:92:0e:6d:4f:47:49:95:0e:d4:42:4a:09:
3e:61:e2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:46:49 2025 by rpki-client