Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/9sRouDi1pmQ57PMMKkYqnFnkkY8.roa
File: 9sRouDi1pmQ57PMMKkYqnFnkkY8.roa (raw, json)
Hash identifier: YPUh+8K5YqUMXXdRX0i+ke0jJQFQno3qKv/WRqWLPvU=
Subject key identifier: F6:C4:68:B8:38:B5:A6:64:39:EC:F3:0C:2A:46:2A:9C:59:E4:91:8F
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 019A45317F145F0BB270EEB9446F96BD1FAC
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/9sRouDi1pmQ57PMMKkYqnFnkkY8.roa
Signing time: Sun 02 Nov 2025 15:31:03 +0000
ROA not before: Sun 02 Nov 2025 15:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394177
IP address blocks: 185.233.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:45:31:7f:14:5f:0b:b2:70:ee:b9:44:6f:96:bd:1f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Nov 2 15:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6c468b838b5a66439ecf30c2a462a9c59e4918f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:a6:5d:3c:3e:3b:64:05:43:42:3c:8e:91:
87:56:24:9c:b0:b1:69:f4:17:7b:d6:01:24:9a:a3:
bf:5c:74:93:ae:56:80:5a:ca:cc:db:c8:30:7e:3a:
0e:4c:63:62:a5:3a:b0:95:c8:16:00:39:b5:b2:59:
93:4b:c4:41:4b:41:2e:50:02:4e:a7:9b:38:2c:dd:
21:d5:0d:fe:3d:b5:82:05:f7:3f:8d:0b:0c:68:74:
83:8d:33:9b:b0:1e:0d:d9:6b:dc:62:2e:81:d1:68:
58:dd:ef:78:00:1b:5e:ca:81:f9:a3:ca:a4:c3:20:
c8:2d:f7:74:3f:93:7a:1d:85:11:e3:ce:3a:db:8d:
cb:35:08:d9:ca:eb:8b:73:43:06:3b:f5:62:2b:2d:
33:25:a9:4d:32:61:89:8c:26:68:a6:8c:f2:df:00:
77:85:a3:f3:1e:d3:2e:d9:fd:3b:be:28:f2:2f:3e:
fb:b8:53:68:76:8f:c1:c0:0f:f4:e9:e7:c7:7e:a2:
ea:9d:77:51:66:24:3d:e5:00:91:b4:d7:89:37:ab:
ed:24:ff:18:a0:30:f9:95:9f:5b:01:0e:93:68:0a:
44:a5:84:6c:f3:2d:ee:d6:ab:03:4a:29:ba:51:47:
c8:0c:31:ac:34:8a:75:c1:ab:53:b4:7d:9c:63:58:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C4:68:B8:38:B5:A6:64:39:EC:F3:0C:2A:46:2A:9C:59:E4:91:8F
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/9sRouDi1pmQ57PMMKkYqnFnkkY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.166.0/24
Signature Algorithm: sha256WithRSAEncryption
01:bd:16:4d:58:b7:bc:49:bb:23:25:5e:4d:49:cf:06:2d:fe:
ac:97:f1:ad:6d:35:50:a8:95:13:0d:db:91:ec:44:cb:7c:61:
83:7f:5c:6a:33:f4:9f:61:3e:0b:34:8e:7e:b0:7a:b7:4b:6c:
e2:f2:7d:9d:9d:ba:7f:29:0d:b4:b7:d3:96:14:a4:17:1b:69:
91:02:e6:67:d1:25:4c:2e:85:c7:71:27:72:57:05:3a:72:73:
d7:75:48:a0:7f:d9:0c:1a:c4:4a:12:a1:b9:65:24:59:2c:3d:
03:af:4a:64:20:56:51:b1:5d:e7:d8:98:90:f0:df:51:9f:61:
da:0f:4e:66:aa:9f:69:1b:a7:dc:45:69:85:4f:34:ad:6a:f5:
5e:d4:78:32:43:38:29:ba:c7:57:72:00:b0:a1:96:2a:ea:a9:
70:dc:e8:f4:41:e9:c6:e8:3e:13:9d:f1:47:2c:c5:dc:44:ac:
aa:fc:65:98:54:c8:9f:48:d0:f7:f0:af:05:32:17:be:8a:fc:
9c:69:d2:11:e2:82:7c:1f:28:5d:20:cf:40:4d:86:65:c2:71:
18:69:df:e2:ed:a5:f0:1a:71:74:5d:3a:29:0f:9e:b8:9e:5a:
74:4b:4e:6a:29:ce:69:a5:c8:2f:1c:61:c3:25:89:c2:51:b4:
5a:bb:ce:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:03:53 2025 by rpki-client