Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/b9174z4yWqv2qp29EN7UCJ94u8o.roa
File: b9174z4yWqv2qp29EN7UCJ94u8o.roa (raw, json)
Hash identifier: EWHL6WNb4QtN4LcwWvfPZ7Xgq52KabiWxn9weP+c9oQ=
Subject key identifier: 6F:DD:7B:E3:3E:32:5A:AB:F6:AA:9D:BD:10:DE:D4:08:9F:78:BB:CA
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 019A3AE4C7D0F376064956EE9F842831528D
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/b9174z4yWqv2qp29EN7UCJ94u8o.roa
Signing time: Fri 31 Oct 2025 15:31:03 +0000
ROA not before: Fri 31 Oct 2025 15:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205015
IP address blocks: 185.189.88.0/24 maxlen: 24
185.189.89.0/24 maxlen: 24
185.189.90.0/24 maxlen: 24
185.189.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:e4:c7:d0:f3:76:06:49:56:ee:9f:84:28:31:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Oct 31 15:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fdd7be33e325aabf6aa9dbd10ded4089f78bbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:05:ab:a7:d7:61:12:3e:f4:c0:80:de:96:
74:f8:71:88:77:b2:f0:7b:8b:11:1d:18:94:37:33:
88:22:d8:ee:15:59:28:e6:b6:06:2d:4e:41:3d:0c:
82:78:09:e5:01:c8:64:ba:31:f9:de:16:c5:87:c0:
d4:f2:8f:4b:51:be:76:b8:05:ce:28:b9:52:3b:5a:
82:57:61:e6:a4:5a:88:ed:e7:27:9d:41:53:86:5a:
ef:de:36:6d:de:ee:6d:a5:9f:b4:d2:8d:2a:05:fc:
12:99:c3:4b:f0:b8:b5:b6:2d:bd:fe:9e:03:8a:72:
38:cc:1e:66:f0:2e:06:26:a6:58:6e:09:22:01:04:
e3:0d:36:84:bb:1e:f9:6b:57:9b:de:66:a0:6d:82:
e8:1a:8c:18:82:0c:07:f5:a9:33:1f:1a:6e:21:dd:
22:92:7c:f2:1b:11:70:da:f8:2d:73:ab:83:af:0f:
76:e1:4d:ac:d3:53:62:58:1d:7d:08:31:32:a0:1a:
39:ed:a8:4a:ba:c6:02:16:2a:77:72:02:4b:4a:d7:
ac:4c:87:5c:ca:21:b3:59:4c:35:79:bb:be:f9:7a:
54:03:23:2a:4c:f2:6f:f9:ed:73:e8:16:c5:27:35:
2f:ca:ff:f3:7e:d7:ab:5e:eb:fb:c9:a6:6f:fd:aa:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DD:7B:E3:3E:32:5A:AB:F6:AA:9D:BD:10:DE:D4:08:9F:78:BB:CA
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/b9174z4yWqv2qp29EN7UCJ94u8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.88.0/22
Signature Algorithm: sha256WithRSAEncryption
30:9f:0d:2a:d9:3b:25:85:76:e9:23:c0:e7:6c:8a:87:02:d0:
5f:2e:be:71:3a:75:92:00:9a:55:b2:51:aa:11:50:85:25:87:
82:4a:dc:f6:66:c5:06:49:ff:bb:6e:88:16:38:41:e5:9e:b3:
b2:1a:31:ee:b6:88:41:05:cc:2f:cc:f4:de:f9:84:b5:ae:eb:
39:9a:19:c6:b2:b0:b0:cb:90:e5:56:a3:d8:06:5a:39:11:9d:
d7:b5:90:40:f9:27:8f:bf:68:3b:80:00:0d:7a:cf:50:15:a1:
7b:a6:69:67:fc:fc:47:fe:76:5e:a2:98:fc:42:e9:51:eb:4b:
62:6d:98:b3:3c:3a:a2:c4:fc:4b:1a:29:9c:68:73:47:56:db:
63:7d:7b:23:4d:a8:29:df:61:a6:e1:41:97:dc:28:e9:61:99:
64:73:de:69:64:24:ca:3b:2e:92:1a:08:07:12:b6:77:5e:6e:
9c:3e:e2:71:09:d1:cb:f2:be:6c:09:21:f0:9e:3b:ba:fc:3c:
f5:45:44:85:b7:19:36:fc:83:1c:fd:c4:85:42:3f:a6:c6:03:
11:de:ff:c4:89:80:57:c3:c4:49:d3:cc:c2:07:af:ba:10:cf:
f7:12:28:5c:91:79:76:97:8e:6e:6e:d1:b9:0a:fc:c2:38:c0:
c7:86:39:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:06:13 2025 by rpki-client