Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/782H0AxcAlnljl-2jFvv_NnZLbE.roa
File: 782H0AxcAlnljl-2jFvv_NnZLbE.roa (raw, json)
Hash identifier: VtnC37cIAKhdxlf0IOiEtkDfSYl3vVtBsHHBKTDNM08=
Subject key identifier: EF:CD:87:D0:0C:5C:02:59:E5:8E:5F:B6:8C:5B:EF:FC:D9:D9:2D:B1
Certificate issuer: /CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Certificate serial: 019A347D116869FADA5EBE92647CBD8673F1
Authority key identifier: 42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/782H0AxcAlnljl-2jFvv_NnZLbE.roa
Signing time: Thu 30 Oct 2025 09:40:03 +0000
ROA not before: Thu 30 Oct 2025 09:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8803
IP address blocks: 193.5.172.0/22 maxlen: 22
193.8.176.0/24 maxlen: 24
193.8.177.0/24 maxlen: 24
193.8.178.0/24 maxlen: 24
193.8.179.0/24 maxlen: 24
193.8.180.0/24 maxlen: 24
194.124.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:7d:11:68:69:fa:da:5e:be:92:64:7c:bd:86:73:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Validity
Not Before: Oct 30 09:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efcd87d00c5c0259e58e5fb68c5beffcd9d92db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:d0:37:65:51:4f:c1:c1:b2:ba:04:9b:44:
c1:d7:1c:2f:37:94:39:b3:93:98:92:e3:f0:bc:60:
7a:e8:02:1a:af:ab:f8:a7:cf:9d:93:95:b9:f1:4f:
86:5a:d7:3d:8e:19:df:fa:c6:21:f9:5e:a3:f0:5d:
c2:08:e9:3a:f8:8e:c3:2a:8c:29:ad:a6:58:d0:e6:
6c:77:1a:01:df:50:a3:dd:29:6d:a3:c2:18:77:fb:
05:86:43:0e:29:20:eb:84:04:9d:8e:6f:c5:a3:3d:
ac:05:14:5d:17:a2:15:4a:3d:d3:c4:cd:08:14:d5:
85:6f:8b:b4:49:d2:48:3f:d4:c3:1a:77:63:2b:17:
19:a7:31:36:cf:4b:7a:91:84:d5:81:90:0d:85:01:
19:94:56:6e:c2:88:85:c2:50:e3:0c:dd:86:4e:d3:
c5:5e:76:84:6c:2e:cc:50:68:b7:fb:41:63:1f:18:
e8:8d:e8:d3:a8:32:e8:40:67:5b:1f:70:64:3e:e4:
72:32:54:8f:b1:ce:c5:c2:0b:0c:2c:8a:bb:70:ec:
e1:41:78:46:ad:fe:ad:47:5c:61:9f:16:bc:49:9b:
1d:7f:18:38:3e:b6:3e:a7:03:5e:07:76:0f:d2:96:
b7:9a:f3:b4:fa:fc:73:50:f9:d2:ab:fb:cc:c8:0b:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CD:87:D0:0C:5C:02:59:E5:8E:5F:B6:8C:5B:EF:FC:D9:D9:2D:B1
X509v3 Authority Key Identifier:
keyid:42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/782H0AxcAlnljl-2jFvv_NnZLbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.172.0/22
193.8.176.0-193.8.180.255
194.124.217.0/24
Signature Algorithm: sha256WithRSAEncryption
29:28:a5:fe:f0:85:5d:b6:23:f1:72:b8:f3:5f:3f:c0:04:40:
3d:37:36:df:39:91:9b:67:0d:22:8b:45:49:3b:67:ab:2a:10:
a8:43:0c:8a:84:6c:90:4a:18:23:86:56:e0:29:36:52:ee:45:
84:26:ca:bf:2c:81:01:f6:89:72:ec:83:d6:d5:d1:f0:91:61:
7d:45:c9:4b:26:77:68:02:9e:2b:c7:3d:5f:c5:06:ce:31:34:
39:f9:94:64:c0:9a:b6:ac:41:2c:59:9e:46:3f:1d:91:be:6a:
03:f8:fb:c3:b2:17:e9:e9:e8:cb:db:87:d1:b3:b1:7f:07:e3:
a6:43:ab:f6:7e:cc:64:33:26:cd:df:c0:bc:3b:a4:1a:2f:ef:
86:fe:05:11:db:4a:0c:b2:df:ce:44:21:8c:ce:35:e4:e9:ab:
03:36:78:d5:42:b9:c1:9c:cc:02:93:ba:3e:b2:48:da:01:74:
88:6d:f1:7f:e9:c7:9d:75:1a:d5:57:bf:c9:9f:8c:dc:c1:2d:
4f:29:99:87:9a:06:ee:cb:6b:2a:cc:50:16:d5:da:d2:5e:10:
8d:ec:42:15:c4:de:cf:c8:8d:ed:b8:38:e5:bc:34:9b:4d:23:
3d:bb:86:a2:d0:77:b5:d1:e6:7e:0a:b2:43:a9:e7:ce:8a:87:
f8:39:df:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:07:05 2025 by rpki-client