Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vvoGT3TufO2bMt3Et6-SJ7_NeY4.roa
File: vvoGT3TufO2bMt3Et6-SJ7_NeY4.roa (raw, json)
Hash identifier: Il7N+fKpBKfJWwp5TVtRS/fr2zBZZkdqCKkBkYNxYTY=
Subject key identifier: BE:FA:06:4F:74:EE:7C:ED:9B:32:DD:C4:B7:AF:92:27:BF:CD:79:8E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019A2C14AA95EAFBC38850B37F0D59ECC914
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vvoGT3TufO2bMt3Et6-SJ7_NeY4.roa
Signing time: Tue 28 Oct 2025 18:29:03 +0000
ROA not before: Tue 28 Oct 2025 18:29:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 185.199.158.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:14:aa:95:ea:fb:c3:88:50:b3:7f:0d:59:ec:c9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 28 18:29:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=befa064f74ee7ced9b32ddc4b7af9227bfcd798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:6b:c7:e5:32:20:d2:1c:a6:7a:30:d9:12:
7b:2e:02:18:1c:2b:41:19:5b:a6:60:37:28:d0:e8:
fa:14:21:43:f3:95:1a:73:ea:1b:3f:29:ce:cc:88:
f4:65:e6:86:bf:dd:58:1a:c7:4d:f2:56:4a:07:1e:
84:56:56:f6:b5:f1:c3:cc:dd:df:30:9c:e3:ad:7b:
2d:87:86:02:78:78:df:43:15:30:d5:f6:9c:8f:8f:
10:c4:a9:2e:56:f2:c7:d2:00:83:ca:01:ff:f0:35:
54:1f:64:ad:f1:f0:6b:1e:d0:49:47:cb:7f:80:ec:
6e:3c:3f:ec:1d:76:d2:9a:88:1c:87:71:d3:cf:1e:
34:1b:ab:c1:24:00:8c:7c:13:4b:41:e7:39:33:78:
cc:23:56:f7:1b:32:6f:72:53:b6:4b:a5:25:21:10:
45:5d:7a:fa:9d:7f:4a:a9:45:cf:7a:cd:6f:9e:7a:
e3:18:71:25:c2:d3:4f:c6:3e:b5:0a:2a:3c:79:5e:
12:f5:70:12:82:bb:bb:47:6a:ad:54:d6:4c:6d:24:
52:9e:56:2a:27:b4:b7:d3:fd:63:0e:45:13:76:6d:
53:35:fa:75:61:68:89:87:b4:62:29:c5:5e:9d:35:
87:7f:2b:5c:48:0c:15:f2:13:32:b0:6e:57:84:aa:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FA:06:4F:74:EE:7C:ED:9B:32:DD:C4:B7:AF:92:27:BF:CD:79:8E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vvoGT3TufO2bMt3Et6-SJ7_NeY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.158.0/24
185.210.235.0/24
185.214.108.0/24
185.218.20.0/24
185.223.155.0/24
185.234.22.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b7:e1:04:0a:2d:4c:e0:8f:ec:e8:e1:3b:6a:cf:45:22:5e:
4a:7a:3e:52:1c:0b:05:35:5e:b7:64:50:5d:68:08:3c:8e:52:
89:77:eb:db:12:9c:a1:38:24:a5:1e:72:10:3e:9c:3c:96:2d:
85:be:38:58:0f:e1:b7:ce:b7:58:8a:32:27:b0:8a:d4:68:88:
ce:fa:f7:fe:72:a8:13:1f:66:5f:56:6c:51:b0:27:3a:16:b4:
da:80:af:17:07:b5:be:9f:07:88:bc:2b:c2:cf:6a:0b:c4:e8:
84:cd:38:28:45:32:4f:99:77:e7:bd:2c:2b:9e:c3:48:94:3a:
5d:e7:6e:c4:17:fa:ad:28:90:d8:82:fb:fb:09:9d:44:6d:0e:
97:1e:3c:ed:75:19:5d:a4:02:22:df:18:1c:94:43:d0:6b:2b:
7c:fd:53:bb:b9:bb:89:af:7f:73:0f:bb:8b:61:92:18:6c:2f:
90:d9:ba:08:70:67:42:67:fa:cd:15:84:11:1e:9e:82:9c:c3:
ee:d0:b9:48:f5:9d:86:58:59:d4:65:76:25:e1:4e:c9:23:f0:
3c:58:49:c0:f1:0a:07:f6:d1:44:d9:04:b6:23:57:63:d6:27:
a6:5f:43:15:56:ee:1c:f5:74:6d:47:dc:bc:5b:8a:3b:f4:2d:
e9:f9:bb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:05:07 2025 by rpki-client