Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CdPMl7GMo-WD7WI1AmMM_dtY_wI.roa
File: CdPMl7GMo-WD7WI1AmMM_dtY_wI.roa (raw, json)
Hash identifier: LAI4Io9tkh4f3XFOZfpN4U1HFCkZLy1gob5fCYRXEi4=
Subject key identifier: 09:D3:CC:97:B1:8C:A3:E5:83:ED:62:35:02:63:0C:FD:DB:58:FF:02
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019A2FD8B794F0ACD08816FB0C03284C792E
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CdPMl7GMo-WD7WI1AmMM_dtY_wI.roa
Signing time: Wed 29 Oct 2025 12:02:03 +0000
ROA not before: Wed 29 Oct 2025 12:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 170.168.4.0/24 maxlen: 24
170.168.5.0/24 maxlen: 24
170.168.26.0/24 maxlen: 24
170.168.27.0/24 maxlen: 24
170.168.32.0/24 maxlen: 24
170.168.41.0/24 maxlen: 24
170.168.43.0/24 maxlen: 24
170.168.48.0/24 maxlen: 24
170.168.49.0/24 maxlen: 24
170.168.50.0/24 maxlen: 24
170.168.51.0/24 maxlen: 24
170.168.112.0/24 maxlen: 24
170.168.113.0/24 maxlen: 24
170.168.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:d8:b7:94:f0:ac:d0:88:16:fb:0c:03:28:4c:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 29 12:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09d3cc97b18ca3e583ed623502630cfddb58ff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:45:2b:de:3d:c5:7c:f0:7f:19:6c:47:72:
ec:3b:65:d0:ca:2e:c9:00:65:79:a6:f2:0d:6d:5d:
10:4e:fd:90:a2:a5:cd:33:41:4c:fe:16:e6:d2:2c:
70:11:a6:85:cc:a5:a9:53:86:6c:4b:70:01:f9:83:
9e:b1:66:93:bc:f1:a5:c3:9d:d5:9f:83:67:f2:14:
d6:4e:67:17:0b:37:11:ca:48:2b:21:f0:e8:a8:f6:
15:5b:53:8d:53:b9:37:50:e8:06:b9:61:b8:71:1c:
5e:e3:9f:84:d2:28:06:2f:42:58:51:5f:8d:08:6b:
ee:75:18:25:1a:ff:1e:2a:c9:82:0c:69:d5:2d:7e:
b2:84:6e:ff:c5:8f:7b:eb:c8:6e:a4:07:3f:f1:f0:
a8:c8:01:4e:49:3b:04:e0:20:8c:98:0f:89:36:34:
d6:70:18:45:89:11:0a:6a:dc:09:97:69:7a:42:ee:
12:5a:e4:80:6d:60:a5:55:53:df:ac:26:7a:db:3c:
08:20:54:ad:f0:fc:c4:b8:36:46:e1:e0:7f:fc:49:
b3:fd:aa:4c:20:34:9d:56:82:23:47:bd:d8:67:c0:
dc:16:59:41:9f:48:73:23:5f:53:3a:54:59:66:c5:
6a:ce:f9:02:90:70:45:9d:b7:87:8d:a9:95:cd:7b:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D3:CC:97:B1:8C:A3:E5:83:ED:62:35:02:63:0C:FD:DB:58:FF:02
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CdPMl7GMo-WD7WI1AmMM_dtY_wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.4.0/23
170.168.26.0/23
170.168.32.0/24
170.168.41.0/24
170.168.43.0/24
170.168.48.0/22
170.168.112.0-170.168.114.255
Signature Algorithm: sha256WithRSAEncryption
71:42:4c:55:00:9a:6e:79:58:d8:08:73:e2:7b:d6:7f:a0:5e:
95:da:5f:ce:a9:d1:6f:43:82:2c:2c:12:08:c4:bb:7b:ee:62:
ef:af:43:e2:a6:26:7e:05:03:83:1e:79:32:7e:71:db:f9:14:
aa:51:75:24:f1:08:c1:0d:5a:8f:a2:79:df:a5:f0:4b:df:d3:
61:52:38:df:b9:5a:7d:a9:9e:5a:00:9a:43:b3:26:4f:21:d6:
b1:c1:d1:a0:1e:f4:e6:c4:e6:f5:29:d2:5b:8a:b9:56:af:fd:
9a:59:93:45:32:c9:f8:99:11:46:4a:52:cd:7b:16:d9:86:46:
6d:2f:9c:71:29:56:71:e3:fc:5b:45:79:87:6e:63:c8:3a:3e:
7b:1f:85:2e:16:be:20:91:2d:bf:a5:2f:41:12:d2:30:76:5f:
5b:1c:97:e2:2c:df:74:67:b3:db:cf:0f:96:0b:cb:8c:e6:de:
91:60:57:f6:79:79:e0:b1:a5:28:80:c2:1b:c9:01:78:78:c9:
e4:10:02:a0:97:53:fc:6b:ba:81:13:ef:78:6b:3d:b2:20:a6:
fc:48:d8:8a:9c:31:37:c3:8a:b9:12:11:d5:17:91:a0:80:7e:
58:6f:84:61:be:d6:e7:a4:df:c0:dd:68:9b:89:02:1e:05:88:
6b:dc:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:25 2025 by rpki-client