Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/Panm1LrJmzFbCeMY6auzDqltMH4.roa
File: Panm1LrJmzFbCeMY6auzDqltMH4.roa (raw, json)
Hash identifier: pK/SKAriGKfng+iefu9gjvhHjR0adoVJ2FdRhaw344s=
Subject key identifier: 3D:A9:E6:D4:BA:C9:9B:31:5B:09:E3:18:E9:AB:B3:0E:A9:6D:30:7E
Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial: 019B7CEE31D2B439F22847F9885F94D1B01C
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/Panm1LrJmzFbCeMY6auzDqltMH4.roa
Signing time: Fri 02 Jan 2026 04:19:03 +0000
ROA not before: Fri 02 Jan 2026 04:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210605
IP address blocks: 185.25.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:31:d2:b4:39:f2:28:47:f9:88:5f:94:d1:b0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Validity
Not Before: Jan 2 04:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3da9e6d4bac99b315b09e318e9abb30ea96d307e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:11:6f:06:4f:e3:00:d5:1a:b5:f5:ed:a8:
df:af:fd:85:36:e0:d1:4b:25:5d:19:28:6a:e3:d6:
8e:ea:ad:30:15:02:26:63:10:32:75:11:54:5d:39:
e4:20:cc:4a:94:1e:0b:d5:2d:d2:58:da:dd:04:80:
a6:a4:5c:ad:b8:3f:88:b2:c0:e8:2a:a2:ad:23:5b:
c9:98:ef:02:79:83:9e:c5:7d:23:60:f7:7c:50:fa:
b3:c2:94:b7:9d:14:e1:52:8f:20:5f:06:8b:d9:12:
9b:72:01:4b:00:1c:d0:f2:2f:02:5f:1e:5a:82:be:
73:d8:96:d1:58:02:af:ae:73:a8:d1:36:59:1a:fb:
bc:19:df:82:9f:3c:1a:99:3e:cb:5d:58:b9:3e:3b:
51:fb:f9:b6:f1:91:6b:55:03:b3:34:37:00:29:c7:
61:f4:12:c3:f8:9d:96:aa:ef:7f:f3:eb:75:ae:0b:
87:bd:ca:a2:ac:5b:35:b0:fd:5a:b3:db:e1:a1:c6:
6d:ee:de:6c:a1:28:fc:da:29:1c:56:78:9c:98:96:
d8:4e:ba:81:6c:bb:1a:98:1a:a5:b6:2a:ce:4d:81:
d8:43:64:75:ba:73:71:1a:63:50:f5:44:8e:43:16:
29:fe:af:d2:30:88:eb:4c:b0:fa:98:69:77:3f:a5:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A9:E6:D4:BA:C9:9B:31:5B:09:E3:18:E9:AB:B3:0E:A9:6D:30:7E
X509v3 Authority Key Identifier:
keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/Panm1LrJmzFbCeMY6auzDqltMH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.115.0/24
Signature Algorithm: sha256WithRSAEncryption
db:8c:8f:76:55:e7:16:16:5d:ef:d8:84:1b:3c:82:4b:98:ba:
89:33:c6:77:40:d2:aa:fa:98:7f:8c:ee:7f:96:d7:ed:d9:db:
28:a9:b4:44:3d:77:9f:5a:c1:0f:4e:1d:f2:b9:47:0d:96:d5:
90:31:19:dd:8d:53:59:27:ad:1d:c6:84:d3:5f:07:3e:ff:ff:
f9:d2:37:11:98:b5:a3:e1:6d:e9:c4:23:0d:6c:d6:3e:1d:8f:
47:17:8b:80:55:34:81:7e:ca:59:6f:eb:80:d4:bf:c0:15:64:
2e:49:a2:0e:60:27:c4:04:17:f4:55:4b:a5:8c:dc:03:75:b1:
cd:eb:08:b4:37:eb:c4:a0:28:42:b4:d4:dc:15:42:90:74:03:
7d:9b:69:8e:08:ec:bf:c1:ba:0c:d9:98:55:ec:20:c7:7f:ea:
32:41:86:52:e7:37:8a:61:60:73:2a:e1:ac:2a:73:fb:99:ec:
54:ba:78:d1:60:67:23:04:5f:e5:37:53:14:a8:33:35:8c:21:
fa:1f:d6:bc:4a:02:33:c8:c1:77:c8:66:9f:07:f7:e7:73:40:
5f:b1:dc:d1:47:25:b5:43:22:de:bb:fb:4b:49:53:2e:e7:b6:
22:a4:3b:11:2e:39:65:c9:9a:30:2f:06:a8:43:16:c0:c3:a6:
73:cf:1e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:25 2026 by rpki-client