Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/XzJvjFoqsCYr4b1ZeC5jeufwL9c.roa
File: XzJvjFoqsCYr4b1ZeC5jeufwL9c.roa (raw, json)
Hash identifier: mr8n9mQuDWaS6S0lqra4SF3J7Yx2MMXoheEycmiAT1A=
Subject key identifier: 5F:32:6F:8C:5A:2A:B0:26:2B:E1:BD:59:78:2E:63:7A:E7:F0:2F:D7
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 019A302608C04791FD5FDC8E18D44130A457
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/XzJvjFoqsCYr4b1ZeC5jeufwL9c.roa
Signing time: Wed 29 Oct 2025 13:26:30 +0000
ROA not before: Wed 29 Oct 2025 13:26:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 65632
IP address blocks: 188.125.163.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:26:08:c0:47:91:fd:5f:dc:8e:18:d4:41:30:a4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Oct 29 13:26:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f326f8c5a2ab0262be1bd59782e637ae7f02fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:c5:b6:f5:af:15:f4:32:57:67:24:1f:ad:
78:33:67:91:ea:bd:55:87:80:47:af:94:68:e6:82:
b4:9a:40:58:4b:e5:bb:82:4f:ad:9c:e5:e3:2f:eb:
24:e5:31:e0:11:e7:51:3d:2b:25:5c:bc:a9:27:3f:
bc:c4:14:83:df:e2:81:e5:2e:7b:6e:b7:8a:16:73:
17:69:5c:9d:15:5d:ad:6b:2a:7c:0d:60:13:73:b0:
f2:50:26:17:c6:e8:35:83:2e:28:4b:5a:3d:ce:4d:
63:51:b5:96:ad:b6:75:5e:22:f6:8c:dd:96:b6:b7:
cc:8a:3e:b0:ca:73:0f:ef:c0:c9:45:52:51:af:b4:
1a:ee:c2:00:11:7d:a3:54:aa:6c:27:6a:de:84:c9:
6f:a5:e5:41:21:f9:48:f4:e6:dc:2d:80:63:c5:60:
67:09:90:d9:c4:0e:3a:d6:76:65:47:fa:66:07:d8:
f9:aa:f0:64:28:e2:f5:c8:0e:78:45:ec:e1:90:83:
a3:a9:64:87:bf:1f:52:f1:16:ec:55:96:6e:91:b7:
4d:7a:40:b9:5d:b0:7c:47:d4:49:d1:f7:57:6e:d0:
67:fe:d7:82:3d:47:c8:f6:15:47:3e:c4:43:74:72:
90:73:a7:10:9b:1d:7b:6f:05:12:16:f5:7d:5b:10:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:32:6F:8C:5A:2A:B0:26:2B:E1:BD:59:78:2E:63:7A:E7:F0:2F:D7
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/XzJvjFoqsCYr4b1ZeC5jeufwL9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.163.0/24
188.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:26:24:b6:2d:09:73:48:10:87:f4:90:c7:7e:49:99:9d:e4:
75:8d:28:3b:b6:51:5f:4d:31:78:4b:cb:9e:84:18:46:d4:cc:
03:8d:fd:1f:08:c1:19:d2:93:56:0b:78:79:65:a2:28:b1:53:
24:43:30:0a:b6:cf:80:91:3a:55:67:95:26:a4:e5:64:69:9a:
93:36:dd:d7:d9:36:6b:ae:3a:70:50:c4:d2:65:b5:f6:f2:f9:
64:be:91:7b:c4:01:41:6c:33:a7:b7:e1:42:c4:0b:31:00:b5:
ec:35:09:20:8e:d6:e6:d1:36:cb:00:79:a6:16:19:85:fa:9a:
21:00:f5:fb:0d:ee:ad:f1:7d:fa:3e:3b:2d:97:62:e9:df:13:
90:89:a4:5b:65:70:71:d9:21:6a:cc:4a:23:b1:71:e0:fe:94:
ba:33:fd:d2:cc:d3:a2:d3:0a:45:50:12:be:f4:90:96:1f:92:
c9:0f:ba:23:68:83:1e:3a:5c:a7:a7:f6:17:07:87:6e:66:de:
0a:a1:e4:50:12:4f:97:e9:51:5f:8f:d6:86:5c:67:8a:e9:8f:
76:7a:37:fb:32:13:e3:e3:09:21:43:1f:64:a7:48:78:05:82:
70:38:71:40:74:ae:b2:df:43:30:45:bc:c9:ff:dc:89:7f:45:
d0:aa:d9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:18 2025 by rpki-client