Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/6tWl5a8eFbUzEfNoih8c-OFqi5M.roa
File: 6tWl5a8eFbUzEfNoih8c-OFqi5M.roa (raw, json)
Hash identifier: nPQyQaRgXoHjIA2ktajZTr/QGc6vcJckxFwuI2DrnzI=
Subject key identifier: EA:D5:A5:E5:AF:1E:15:B5:33:11:F3:68:8A:1F:1C:F8:E1:6A:8B:93
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 019A0842BE3603958AF65FBB0D8BEE9FA621
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/6tWl5a8eFbUzEfNoih8c-OFqi5M.roa
Signing time: Tue 21 Oct 2025 19:33:03 +0000
ROA not before: Tue 21 Oct 2025 19:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59651
IP address blocks: 77.243.88.0/22 maxlen: 24
83.143.106.0/24 maxlen: 24
178.20.213.0/24 maxlen: 24
178.20.214.0/24 maxlen: 24
178.20.215.0/24 maxlen: 24
185.101.20.0/23 maxlen: 24
194.26.129.0/24 maxlen: 24
194.104.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:42:be:36:03:95:8a:f6:5f:bb:0d:8b:ee:9f:a6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Oct 21 19:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ead5a5e5af1e15b53311f3688a1f1cf8e16a8b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4d:1b:70:cc:4c:46:9a:d0:75:16:70:a1:bf:
15:21:d3:98:46:80:ca:c7:f6:2b:29:c3:64:20:34:
fa:20:72:9b:de:a7:62:f9:35:1a:28:e6:64:0d:a1:
5c:e5:3b:24:ce:8b:73:76:a5:a0:0d:f0:95:4b:72:
16:8f:8a:8b:60:5d:7b:e1:9d:a6:06:68:8f:78:68:
85:3f:a4:fe:13:e2:ac:5d:af:bb:3a:8d:2f:09:3d:
b7:99:af:7e:24:d8:e2:ae:a1:9e:3c:84:d3:a2:86:
d6:25:22:15:fe:ee:37:cb:3d:89:92:cf:a8:80:ce:
05:56:74:f3:9b:1f:05:18:72:3e:9b:5e:a9:45:aa:
83:0b:9c:31:6f:49:34:94:fa:2e:9b:ba:11:91:6d:
8a:52:1d:4b:82:55:13:cf:a2:72:9e:eb:2b:cf:2c:
7f:5a:d4:63:34:6e:cc:dd:02:5d:6e:ed:f5:de:58:
0a:25:d7:65:ee:30:8f:87:df:83:09:b6:fd:20:85:
26:60:78:46:e7:fb:3b:2d:09:91:1b:9e:e7:7b:d1:
88:c3:f4:dd:0c:3d:9e:83:bf:39:29:0c:28:e7:35:
97:ef:ff:95:ac:63:1d:76:c6:2d:cb:44:67:ce:84:
c3:ca:fc:83:8c:cb:15:52:50:83:fe:a9:24:15:d0:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D5:A5:E5:AF:1E:15:B5:33:11:F3:68:8A:1F:1C:F8:E1:6A:8B:93
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/6tWl5a8eFbUzEfNoih8c-OFqi5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/22
83.143.106.0/24
178.20.213.0-178.20.215.255
185.101.20.0/23
194.26.129.0/24
194.104.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:38:2c:f4:a0:55:c3:dc:e8:f9:d6:bc:bb:e9:e8:d8:ea:4d:
44:f1:92:32:39:89:3e:00:98:da:ff:19:27:ac:cb:e0:4f:d4:
13:de:11:80:f3:2d:ce:da:36:7d:f2:7f:87:55:5e:5c:b8:f4:
3c:a7:42:e4:11:23:9b:04:ad:58:f2:16:6d:6d:df:b5:6e:68:
f8:f6:86:6e:81:e5:45:54:e6:5b:9c:41:6b:52:b2:48:f4:6a:
05:95:84:82:cf:19:5c:af:ef:d1:da:96:1f:cb:20:0d:bb:84:
5d:58:7b:b0:ea:00:9c:7f:e9:5b:ef:e4:5f:5c:0d:51:e3:a1:
9e:b8:2c:76:35:d8:bb:06:51:63:98:e0:fd:45:1f:ed:11:1c:
a5:5b:02:a0:10:92:74:46:13:8d:84:df:69:5d:fd:b3:62:d7:
f4:fc:72:21:c3:38:0e:70:9e:37:ac:10:c8:e9:ef:13:e7:b0:
c8:52:45:03:19:5e:d3:f7:20:d8:fa:67:c0:75:05:4d:dd:bd:
8e:7f:6b:4c:f5:8f:f2:e8:16:57:3b:55:a3:87:67:c7:dd:1b:
17:3b:a5:6d:7f:be:ca:4b:a1:9d:00:2b:7a:6e:d6:04:5d:f2:
d7:5b:9f:20:7d:07:04:0a:83:fd:94:51:2d:36:d7:35:8f:d4:
4c:a7:a6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:29:39 2025 by rpki-client