Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/x9BcC6ltMUELLRncxVedvnwwXNY.roa
File: x9BcC6ltMUELLRncxVedvnwwXNY.roa (raw, json)
Hash identifier: jxvG/ttMoT+2Bd+EyDxTlnkS/FvSnX4leCJ6G9YBtks=
Subject key identifier: C7:D0:5C:0B:A9:6D:31:41:0B:2D:19:DC:C5:57:9D:BE:7C:30:5C:D6
Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial: 019A52AEDDD9FD446EF704EEC6F8447E7866
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/x9BcC6ltMUELLRncxVedvnwwXNY.roa
Signing time: Wed 05 Nov 2025 06:23:03 +0000
ROA not before: Wed 05 Nov 2025 06:23:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60722
IP address blocks: 92.255.65.0/24 maxlen: 24
94.101.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:ae:dd:d9:fd:44:6e:f7:04:ee:c6:f8:44:7e:78:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Validity
Not Before: Nov 5 06:23:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7d05c0ba96d31410b2d19dcc5579dbe7c305cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:63:aa:b6:fa:1b:89:22:9c:63:1d:02:35:8d:
16:30:c7:a9:80:fd:12:c0:d6:5f:6f:0c:e8:2c:45:
7f:8b:b6:07:58:ad:92:e8:85:0b:31:3c:08:f1:c8:
98:42:73:47:3c:08:60:00:ac:04:33:c9:fd:db:67:
d1:2d:90:0c:0d:6c:e0:70:40:20:75:dd:84:20:95:
6f:8e:7c:20:82:70:5a:f9:a0:31:14:5e:e7:6d:3a:
98:e3:fa:96:58:bc:0d:15:78:5d:07:f2:93:4a:86:
62:4c:bb:27:31:97:88:0a:69:d8:b9:f1:90:61:93:
06:15:a9:7a:2e:80:fb:2b:6a:00:2f:37:ba:3f:60:
11:07:ef:e6:36:4c:e9:bc:d2:61:61:df:42:df:03:
89:84:ec:20:f6:f9:13:d1:69:a1:30:d7:c6:76:b4:
af:b4:3c:52:38:fa:b5:e6:07:e0:4e:0b:5d:1a:3e:
c1:5d:1b:66:0f:ff:d0:d7:30:53:6b:97:82:91:a4:
74:93:1e:00:e9:73:86:92:da:2e:90:70:63:c2:ae:
60:bb:0d:17:35:99:51:d5:1b:2d:32:8d:9f:04:51:
9d:e1:22:b4:cb:d1:6c:78:42:3f:32:da:66:5b:30:
84:f9:6d:6c:6c:33:b4:74:2c:bf:30:6a:67:29:78:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D0:5C:0B:A9:6D:31:41:0B:2D:19:DC:C5:57:9D:BE:7C:30:5C:D6
X509v3 Authority Key Identifier:
keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/x9BcC6ltMUELLRncxVedvnwwXNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.65.0/24
94.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d2:99:14:32:10:44:10:34:bb:81:42:22:49:b5:ca:3b:4c:
17:7c:a2:d9:17:c4:4e:1d:b6:74:57:36:61:24:26:db:1c:10:
f1:6e:f0:e2:b5:63:c9:53:80:6c:06:d3:20:63:49:ce:f9:49:
01:5b:ff:a0:31:f0:c4:6f:56:14:61:06:b5:44:47:e4:37:80:
a3:c8:a0:bc:bd:d0:46:bb:7c:7e:ca:40:23:9f:26:5a:87:ba:
b3:65:4b:31:f5:56:53:09:89:19:58:7b:8b:c9:19:47:13:50:
7c:05:2a:6f:e7:aa:84:e7:d7:7e:12:84:da:f0:65:68:af:7d:
ce:93:f1:9b:5c:25:37:dc:61:4e:53:30:22:7e:76:70:c0:38:
a8:e8:e1:90:e6:a7:6c:99:cb:bf:ec:43:2e:82:66:d4:cd:e0:
71:35:d1:0f:f2:f4:36:14:9b:99:4a:5a:18:ac:34:57:2e:98:
8d:42:58:dd:94:1a:6f:43:44:e1:ed:c1:5d:bd:77:10:7f:85:
82:aa:96:1c:86:78:26:33:9e:60:bf:76:50:ac:60:99:6a:d0:
f6:5c:af:f1:d8:03:f8:29:ab:01:e3:2e:af:d2:d7:f4:ff:f7:
73:46:54:ac:3c:71:16:49:49:2c:1f:12:b1:58:49:20:a6:d1:
9a:32:51:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:34:46 2025 by rpki-client