Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Ex20uzHz9WPZtpUKFgVSg-1o3Ec.roa
File: Ex20uzHz9WPZtpUKFgVSg-1o3Ec.roa (raw, json)
Hash identifier: 7iWCmcnFvT4+5sP0JfdgVyw5+zR67znI9LkPlc7vFoo=
Subject key identifier: 13:1D:B4:BB:31:F3:F5:63:D9:B6:95:0A:16:05:52:83:ED:68:DC:47
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019A373E06DEB975EEAF5201133B72DBA52C
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Ex20uzHz9WPZtpUKFgVSg-1o3Ec.roa
Signing time: Thu 30 Oct 2025 22:30:03 +0000
ROA not before: Thu 30 Oct 2025 22:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 193.168.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:37:3e:06:de:b9:75:ee:af:52:01:13:3b:72:db:a5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Oct 30 22:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=131db4bb31f3f563d9b6950a16055283ed68dc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:b7:39:60:f3:cf:d9:3c:3c:b2:ad:c0:b6:
ab:af:bc:89:00:5c:65:57:a1:eb:1c:0b:a4:d1:eb:
f1:b4:b7:54:47:1b:87:b4:25:89:ed:c1:89:e7:39:
92:99:c8:f4:ac:38:aa:4e:1b:86:9a:94:7a:01:eb:
5c:65:06:ac:41:fa:bf:8a:2a:f4:77:43:f1:0c:4e:
20:c4:be:23:69:f5:fa:e0:02:f5:a0:60:7a:69:e8:
db:99:73:72:5b:8b:8f:40:73:bc:fa:74:20:41:36:
b1:16:6f:bf:21:e5:1c:a7:af:13:3a:a7:df:68:25:
25:a1:48:19:d4:d0:cb:ff:5e:19:f5:1b:e3:8c:ba:
69:87:41:ca:f8:f5:03:25:e8:0e:37:93:37:dc:23:
d6:84:61:3f:1b:6a:56:00:0f:d4:ed:3e:ec:9e:f0:
f7:26:ae:cb:d5:8c:43:4c:66:e2:ea:97:99:d0:fb:
60:aa:e8:57:63:45:45:23:99:6f:05:ea:ee:07:b3:
ed:fe:73:3a:09:10:80:d1:36:e0:f5:f4:1d:e9:97:
d2:c9:72:ab:2e:cf:25:77:cc:33:03:eb:e3:b6:10:
22:ad:6d:4e:5f:ce:da:d7:48:49:83:47:b1:70:3c:
2b:ce:94:9f:72:3e:18:65:d8:69:80:bf:a9:ea:ae:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:B4:BB:31:F3:F5:63:D9:B6:95:0A:16:05:52:83:ED:68:DC:47
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Ex20uzHz9WPZtpUKFgVSg-1o3Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:18:e6:8c:f3:11:7e:ea:79:95:15:2a:44:8e:dc:c4:3b:5d:
84:e4:6b:f4:92:e9:9c:ca:82:d2:b0:3a:d9:48:f1:66:16:a9:
5c:c7:4e:ee:59:20:52:49:35:8d:e6:a8:a4:90:a0:a5:83:46:
53:d7:b5:ee:04:82:69:bf:ae:aa:02:25:ee:06:6d:5f:53:69:
6e:8b:06:c7:b9:2a:6f:09:f6:b8:d1:ce:74:df:7c:76:2d:23:
75:20:d3:6f:2b:97:54:03:78:a0:0e:ce:ce:d6:2d:20:8b:a7:
16:e0:a7:a8:b6:7f:3b:54:92:32:4b:51:22:ca:41:30:2a:65:
c2:a1:df:d8:27:fa:fb:11:08:be:34:f2:42:fe:4e:92:d2:72:
c4:70:cc:64:d3:ac:80:db:c9:12:95:ae:80:6e:a5:60:10:e3:
c8:91:55:85:4c:ed:05:fe:4b:9a:f9:27:59:63:65:25:d3:bf:
94:3c:78:ca:4e:7b:24:c8:3d:67:0c:e3:5f:bd:04:e7:97:2c:
78:68:93:52:2d:19:ff:74:8f:9c:20:64:de:1f:50:9f:de:3e:
8b:ac:cc:4f:88:7b:00:f3:b4:22:ff:e0:65:24:48:c8:cb:26:
20:59:94:3b:f4:51:d9:08:25:af:b9:67:ac:7c:1f:25:76:fb:
12:1b:b3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:06 2025 by rpki-client