Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/sRARFo8h99_3G186d4SLHxMo4NM.roa
File: sRARFo8h99_3G186d4SLHxMo4NM.roa (raw, json)
Hash identifier: Ta0KosuiHLazmKN+JXD0BdhBvoFm09Df65X9K+SWVyw=
Subject key identifier: B1:10:11:16:8F:21:F7:DF:F7:1B:5F:3A:77:84:8B:1F:13:28:E0:D3
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 019A062DE789A0FCDE998249D6335F48206A
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/sRARFo8h99_3G186d4SLHxMo4NM.roa
Signing time: Tue 21 Oct 2025 09:51:03 +0000
ROA not before: Tue 21 Oct 2025 09:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25627
IP address blocks: 79.170.64.0/22 maxlen: 22
79.170.64.0/23 maxlen: 23
79.170.65.0/24 maxlen: 24
79.170.66.0/23 maxlen: 23
79.170.68.0/22 maxlen: 22
79.170.68.0/23 maxlen: 23
79.170.69.0/24 maxlen: 25
79.170.70.0/23 maxlen: 23
79.170.70.0/24 maxlen: 24
79.170.71.0/24 maxlen: 26
87.237.80.0/23 maxlen: 23
87.237.80.0/24 maxlen: 24
87.237.81.0/24 maxlen: 24
87.237.82.0/23 maxlen: 23
87.237.82.0/24 maxlen: 24
87.237.83.0/24 maxlen: 24
87.237.84.0/22 maxlen: 22
87.237.84.0/24 maxlen: 24
87.237.86.0/24 maxlen: 24
87.237.87.0/24 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:2d:e7:89:a0:fc:de:99:82:49:d6:33:5f:48:20:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Oct 21 09:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b11011168f21f7dff71b5f3a77848b1f1328e0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:d7:9b:4b:c7:ef:e1:ec:cb:ad:a4:1c:3f:
b7:03:13:af:99:38:f6:4a:d2:4d:06:18:d0:72:f4:
cd:1d:fb:b2:47:0d:ca:53:50:a1:e8:2e:d3:b4:f2:
51:ee:e6:98:34:95:f5:47:98:52:c7:c6:84:4f:33:
db:81:c1:e4:64:a0:f0:52:5a:c4:a9:28:43:41:5b:
ad:a9:fb:3f:03:25:f6:64:67:72:98:a8:78:69:3f:
ed:22:c6:db:ae:2a:99:d0:46:23:1f:f5:74:a0:08:
97:eb:b2:d0:be:89:04:aa:df:bc:4e:a1:76:20:9b:
3b:91:a8:1b:23:b2:9e:8a:ab:84:14:8c:96:f3:5e:
58:78:97:70:d1:e9:ab:f6:3f:6f:a8:93:19:2f:fc:
d5:04:1d:93:fb:55:01:97:6a:4d:11:ca:ff:66:d8:
70:96:0a:a3:97:9f:6f:40:30:8e:82:3e:04:ee:6f:
e7:a5:e7:da:df:be:6f:b6:95:b1:c7:97:d1:80:6c:
92:e9:2c:1d:cf:87:e5:59:27:99:6b:aa:52:50:a5:
cb:69:6c:9f:06:28:74:7c:88:8d:2f:d7:24:c0:b4:
4c:a8:d2:6f:cc:c5:0d:24:77:26:6c:ee:04:fd:21:
97:cd:9a:d7:d7:46:c2:f7:53:6f:23:20:8c:64:b2:
96:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:11:16:8F:21:F7:DF:F7:1B:5F:3A:77:84:8B:1F:13:28:E0:D3
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/sRARFo8h99_3G186d4SLHxMo4NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.64.0/21
87.237.80.0/21
Signature Algorithm: sha256WithRSAEncryption
38:7f:fd:30:85:2d:c4:e8:b7:1f:79:0c:09:36:14:84:83:2b:
bb:2d:6c:d3:42:b6:dd:ed:b5:aa:bc:d0:f2:f2:12:02:f6:78:
58:cf:fe:96:aa:6b:ba:b7:11:6a:bb:b8:99:1a:71:ea:be:df:
9e:8c:51:ba:26:a3:a7:52:40:00:b2:60:07:e8:9e:a0:ed:dd:
70:ef:ff:cd:a1:94:c8:5a:8a:86:a9:8b:9f:5b:94:18:67:31:
09:95:a9:2b:5b:6f:51:a3:7d:e6:2a:fa:66:84:12:7e:7e:d0:
17:c8:40:9d:60:ae:70:1b:a6:c8:b7:21:24:0c:b8:e7:1a:ef:
99:89:4d:42:36:45:1d:d0:97:b7:c0:f4:7f:fc:1c:d8:87:77:
b8:35:e9:f7:0c:f9:13:28:e6:37:1d:c6:6b:0c:94:81:8b:9f:
7b:d2:6b:04:6a:82:73:07:3d:dd:35:89:76:51:95:63:17:33:
b1:d4:c9:68:f1:d7:33:69:5b:1d:c3:5d:09:0a:ac:f0:e6:eb:
bc:8f:cb:2e:77:d2:59:00:f8:23:6c:de:f3:46:5b:3b:2b:18:
fc:cf:d9:62:60:01:6a:6a:32:22:a5:b8:e4:c7:f1:7f:f4:8e:
39:52:ca:00:9e:71:ab:81:28:52:92:e9:ba:8c:5b:90:d1:31:
ed:9e:d8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:03:35 2025 by rpki-client