Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/Avvx3aT3VRXUTrx6x69kC7208rk.roa
File: Avvx3aT3VRXUTrx6x69kC7208rk.roa (raw, json)
Hash identifier: mkB5F6JMzCQ+6uSffkBPqIwarvvgqz8B0gcG77lROr0=
Subject key identifier: 02:FB:F1:DD:A4:F7:55:15:D4:4E:BC:7A:C7:AF:64:0B:BD:B4:F2:B9
Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial: 019A35CDFB47A9D7A0A30A7A338640B9CE4F
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/Avvx3aT3VRXUTrx6x69kC7208rk.roa
Signing time: Thu 30 Oct 2025 15:48:02 +0000
ROA not before: Thu 30 Oct 2025 15:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206655
IP address blocks: 185.107.204.0/22 maxlen: 24
185.200.180.0/22 maxlen: 24
2a06:4440::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:cd:fb:47:a9:d7:a0:a3:0a:7a:33:86:40:b9:ce:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Validity
Not Before: Oct 30 15:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02fbf1dda4f75515d44ebc7ac7af640bbdb4f2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:fb:ba:5f:28:5b:18:42:6b:15:5c:fc:a1:
4b:93:ef:cc:5e:5c:e7:5e:93:1e:c0:96:8e:9a:cd:
08:e5:6c:45:1f:9f:89:2f:0c:46:49:40:a6:20:a6:
3d:51:6f:21:ab:3a:e9:87:48:e9:5e:94:9c:c2:0a:
77:fb:0a:87:6d:f7:47:de:af:42:62:9e:7b:7f:05:
dd:ad:ba:54:cc:20:3e:0e:d4:89:9b:12:8f:b4:6d:
e1:cd:a9:9e:bb:75:91:23:cb:c7:aa:59:b1:c9:e6:
df:c2:9c:fd:04:ab:1b:f2:03:a2:81:91:cc:71:b9:
46:58:b1:d9:4f:b5:57:ef:6d:e8:a4:f2:aa:ac:1c:
03:d0:4a:a3:76:7a:85:f0:03:28:10:4e:2f:70:35:
b8:f2:da:c5:49:88:c9:b6:2e:e2:46:3f:00:df:ea:
e8:b4:09:e7:7c:8e:f0:ef:4f:4b:c1:2e:b0:79:51:
fb:8c:90:35:4a:88:8e:89:c9:00:9d:9e:d5:ac:4c:
20:e6:9c:5c:91:4d:75:bd:97:b7:c8:1a:95:49:88:
7a:7b:7e:d6:1d:4f:f0:47:6e:fc:32:9b:88:0f:89:
21:25:5d:ff:26:66:e1:ff:78:bf:f9:4a:98:d9:0f:
05:c5:4f:db:98:f5:c7:df:e9:c8:82:40:c9:c0:a9:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FB:F1:DD:A4:F7:55:15:D4:4E:BC:7A:C7:AF:64:0B:BD:B4:F2:B9
X509v3 Authority Key Identifier:
keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/Avvx3aT3VRXUTrx6x69kC7208rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.204.0/22
185.200.180.0/22
IPv6:
2a06:4440::/29
Signature Algorithm: sha256WithRSAEncryption
49:cf:eb:9e:8e:e2:a3:aa:53:45:37:64:66:ec:ca:e4:11:6f:
be:2a:e6:57:6b:88:38:49:13:26:b5:d5:10:49:f6:3f:62:ad:
d4:81:fc:10:45:df:9d:82:a9:1f:ea:48:0e:80:49:6d:ef:a3:
9a:68:7b:d2:bc:de:38:ed:98:ba:dd:e8:91:3e:ca:8f:87:5d:
6b:f2:ef:a2:5c:4a:17:f1:de:68:f1:c1:ff:7b:3a:2a:b0:56:
d2:18:8a:08:16:a8:74:13:04:ce:0c:46:cc:70:a2:b1:99:32:
71:6c:3f:83:aa:87:ed:22:3c:a6:dc:ac:9b:f7:6c:e5:9e:c7:
6b:e7:72:ca:a4:8b:7a:b4:7e:d3:e8:ed:56:ec:a0:d9:34:bb:
0b:f8:b2:ed:6f:4a:a5:6f:9f:11:3f:0d:a3:d8:17:67:cd:99:
b7:c6:98:0b:9e:bf:ac:4c:43:2e:59:56:4b:4e:28:00:80:5f:
86:35:6a:0b:71:9e:0c:84:ef:e0:82:06:61:1f:6e:a8:5c:b1:
74:72:c5:c4:50:52:c9:0b:1e:53:cb:51:98:cb:53:74:a4:c2:
a3:c4:db:0b:25:71:13:82:04:88:67:5e:5f:25:70:4f:d3:85:
91:61:0e:88:0b:bb:46:80:b5:75:31:df:f7:04:35:1b:88:01:
87:1c:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:44:55 2025 by rpki-client