Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/p0ymz64pZpqpaW2w8PkuD4iPjNg.roa
File: p0ymz64pZpqpaW2w8PkuD4iPjNg.roa (raw, json)
Hash identifier: k9HVkjLLh7zprpobfFEV4sU8wkNYHVDJHaECefych14=
Subject key identifier: A7:4C:A6:CF:AE:29:66:9A:A9:69:6D:B0:F0:F9:2E:0F:88:8F:8C:D8
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019A489F7E703E095B01574337097CB2059C
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/p0ymz64pZpqpaW2w8PkuD4iPjNg.roa
Signing time: Mon 03 Nov 2025 07:30:03 +0000
ROA not before: Mon 03 Nov 2025 07:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209737
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:9f:7e:70:3e:09:5b:01:57:43:37:09:7c:b2:05:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Nov 3 07:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a74ca6cfae29669aa9696db0f0f92e0f888f8cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d2:a1:87:a1:2b:30:91:f4:76:dd:a2:a8:79:
78:d4:d5:22:f1:a0:4e:95:86:c0:b7:e6:12:32:c8:
dd:e9:a8:e4:12:5a:fa:d3:27:11:f0:72:2b:c4:ac:
4a:19:29:8d:f0:55:d4:2a:fa:2d:e3:1f:57:79:87:
cd:7a:cd:8f:3a:d5:bc:9d:46:96:f5:89:3d:b2:9b:
0e:d2:97:31:ee:30:35:c7:6d:ba:28:a0:dd:2b:a3:
d0:c5:ed:4f:bb:8f:c8:31:1d:6d:7e:34:a7:44:e3:
87:4c:48:82:86:a4:2f:06:c9:e5:69:64:ff:1e:44:
5d:83:d1:c7:8f:42:17:fe:0f:83:99:19:3f:9f:02:
e9:f6:c8:c1:28:34:2f:21:9a:7e:05:f8:22:63:63:
11:1a:d0:5b:4d:df:50:6b:d3:bb:36:9e:19:c9:5a:
70:d5:7c:a0:5c:bf:72:1c:2e:fd:02:f3:2b:18:e4:
6a:19:fa:8a:4a:38:1a:44:5a:d6:cb:82:52:d2:68:
84:ee:bd:d7:bd:f2:a2:ef:44:7f:d4:04:fc:b6:9d:
a1:20:0b:e5:24:bb:b9:23:ea:00:56:17:0f:52:b0:
6c:a5:60:c1:89:81:4c:17:a7:6f:9c:04:e2:35:90:
e0:9f:ad:43:f0:0b:1c:ac:8e:5a:c0:12:de:fa:69:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:A6:CF:AE:29:66:9A:A9:69:6D:B0:F0:F9:2E:0F:88:8F:8C:D8
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/p0ymz64pZpqpaW2w8PkuD4iPjNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0/24
109.236.51.0/24
185.86.6.0/24
185.254.28.0/24
193.35.155.0/24
194.62.55.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0b:0f:79:d8:0a:7d:8e:90:d7:42:17:bb:39:53:15:cf:a3:
62:10:81:e3:d1:db:2c:18:11:7e:b1:f5:f0:73:4c:73:71:16:
00:ee:0a:c5:8d:5c:a5:72:3a:01:9a:78:5a:cc:8e:87:c8:cc:
e0:f0:af:67:58:97:7b:06:0f:71:3e:a6:23:ed:08:a1:ab:0d:
1e:00:99:8f:d8:aa:57:22:1d:81:67:ec:82:0b:f9:0b:19:f3:
f7:40:cf:13:03:31:e4:4d:71:ef:63:bd:63:3f:1c:dc:6e:49:
36:24:e7:66:98:75:9f:ae:6c:76:8b:3b:ba:ad:cc:70:3f:27:
d8:0d:6a:9f:83:3f:e1:8b:ca:de:01:0f:6e:bd:7d:aa:d6:6e:
71:5c:c6:a3:30:26:52:aa:6f:4f:29:9a:9b:c9:b4:c6:36:a0:
34:ef:42:ca:41:ff:bd:f4:ab:ee:00:27:75:a4:3e:05:89:a6:
89:2a:e1:7f:f8:5b:e1:a9:48:ba:0a:d9:e4:ce:b1:b8:a9:cb:
1c:34:68:71:62:fe:a4:c7:80:a9:36:7c:a6:81:28:ca:68:56:
ab:ca:83:44:ed:88:57:a2:0e:02:84:60:07:65:4a:88:75:af:
d3:14:a7:e2:5b:85:b7:e1:ca:f6:2d:8f:a7:1f:86:e5:d3:e3:
da:bc:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:35 2025 by rpki-client