Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/m3X4Vuw2fYjJoFJ1Pc_YO_n-uao.roa
File: m3X4Vuw2fYjJoFJ1Pc_YO_n-uao.roa (raw, json)
Hash identifier: XXK+yHYIa3OpTR3NzZBMPUEt7KJmjINlEg1GD46jdGk=
Subject key identifier: 9B:75:F8:56:EC:36:7D:88:C9:A0:52:75:3D:CF:D8:3B:F9:FE:B9:AA
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 019A41101090FCF002729981DE563DAEFE74
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/m3X4Vuw2fYjJoFJ1Pc_YO_n-uao.roa
Signing time: Sat 01 Nov 2025 20:16:03 +0000
ROA not before: Sat 01 Nov 2025 20:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398256
IP address blocks: 185.233.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:10:10:90:fc:f0:02:72:99:81:de:56:3d:ae:fe:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Nov 1 20:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b75f856ec367d88c9a052753dcfd83bf9feb9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:2d:34:be:c2:1b:76:ef:c7:53:84:0e:4f:
66:ce:13:2b:fa:f8:2b:be:cb:01:fb:5e:40:eb:11:
40:bb:7a:f3:ac:71:cb:f6:69:03:9f:8e:63:7b:46:
18:1b:ba:b5:d2:cf:50:ca:2c:46:88:8e:6a:3c:36:
ac:28:78:bd:0f:bf:f5:dc:20:1d:bd:8d:bd:0a:56:
01:d4:d0:58:28:93:c5:9c:9e:e3:75:95:49:0c:e5:
07:13:fd:bb:8b:74:c2:84:8c:3e:ae:1f:90:49:7f:
d6:9f:27:e4:5b:e7:fe:1e:ec:be:de:4a:92:ec:56:
c7:62:7b:7c:e9:c1:5a:95:46:c5:76:d3:31:0b:05:
61:0a:01:61:c3:69:47:b2:01:53:77:75:92:ce:7d:
d0:f9:f8:3c:17:4c:59:43:f9:20:cb:27:5c:d6:44:
04:11:3b:e8:45:2a:86:14:2b:07:62:bb:e4:de:a2:
84:98:c6:e8:de:cb:8a:59:8a:d5:f2:6c:15:88:5d:
2a:e7:06:59:ca:b9:09:75:b5:32:b3:29:dd:8c:4a:
90:93:07:6e:f4:9f:5a:5c:45:66:9f:4f:58:48:4b:
74:3e:7f:34:b6:9a:3e:53:a2:8f:04:dc:70:a1:86:
b8:a5:5d:18:1f:12:9f:fb:4d:a3:9a:cb:13:34:61:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:75:F8:56:EC:36:7D:88:C9:A0:52:75:3D:CF:D8:3B:F9:FE:B9:AA
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/m3X4Vuw2fYjJoFJ1Pc_YO_n-uao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.166.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5a:da:fa:13:58:46:f7:2d:75:4e:43:b5:75:c7:9b:1a:32:
45:49:ae:db:77:b9:24:24:b7:bc:68:e7:9a:ce:fe:f2:79:c4:
32:ab:f1:7e:a6:4e:68:19:93:8d:f7:a2:49:2b:ea:87:80:f5:
a3:b1:8b:dd:d5:a6:dc:f1:1c:49:35:cd:7e:99:53:2c:18:ab:
f6:17:13:3a:26:3b:9f:7b:84:ad:64:9d:41:72:a7:a2:08:4f:
c3:32:03:c0:2e:c2:af:39:b3:4c:7c:ea:db:4f:95:58:71:b8:
77:6b:a2:11:2c:f4:21:ea:ef:53:31:17:69:e0:be:9e:4d:e1:
2c:d1:77:6f:40:3d:97:bb:e9:f6:21:cb:7b:ad:59:82:23:91:
a3:a7:ae:8f:e1:c9:51:6c:4c:76:72:98:cc:64:b0:5a:91:79:
c7:96:21:e4:a0:db:89:bf:03:35:c6:fe:f2:05:d1:67:45:91:
67:59:ae:bf:0f:c6:62:93:8a:63:d4:8a:94:d0:a7:e0:f4:17:
1e:0a:c8:b1:f9:09:ca:b8:29:76:86:28:c6:10:64:53:c9:9e:
c8:73:c4:65:4c:91:4d:c0:96:b6:f1:4d:01:68:8f:25:59:f8:
92:42:45:06:ed:86:3d:10:4b:96:e5:55:d2:92:1b:11:55:2b:
df:46:43:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:22 2025 by rpki-client