Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/CrllrlBAhQGk4cIQtQiE9Nj3su4.roa
File: CrllrlBAhQGk4cIQtQiE9Nj3su4.roa (raw, json)
Hash identifier: M4tCpo9w//zscnUK9NiZQ/ql2b+0qXyoCf0zVfrzlg4=
Subject key identifier: 0A:B9:65:AE:50:40:85:01:A4:E1:C2:10:B5:08:84:F4:D8:F7:B2:EE
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019A2A7F16A2C86D24E7EB54A2DCB80BCF1D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/CrllrlBAhQGk4cIQtQiE9Nj3su4.roa
Signing time: Tue 28 Oct 2025 11:06:03 +0000
ROA not before: Tue 28 Oct 2025 11:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 194.116.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7f:16:a2:c8:6d:24:e7:eb:54:a2:dc:b8:0b:cf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 28 11:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ab965ae50408501a4e1c210b50884f4d8f7b2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:1d:f7:08:6d:ad:86:42:2c:d6:f3:25:0c:
37:cb:d1:97:4a:cd:39:71:5f:54:1f:c8:68:39:76:
ef:a4:f9:59:51:69:6f:a2:5f:a7:a6:4b:64:4f:b6:
0d:c1:17:e1:16:2a:2a:4a:19:74:fb:a3:b4:c5:5a:
8c:99:98:19:a0:be:f2:fc:93:8c:d4:0d:77:60:35:
83:52:8b:21:f2:e2:1e:1b:9c:89:c0:13:09:3a:fc:
ac:ed:96:04:16:76:b0:33:33:17:f4:4b:0a:34:e4:
21:28:25:2e:e7:74:96:98:a1:7a:7b:03:04:51:4c:
4b:f6:2a:07:42:b1:7c:fb:c3:a8:50:9b:64:ce:de:
9b:89:be:a6:7e:0c:b3:e0:d7:53:2e:c4:d1:be:39:
0d:9f:cc:16:86:86:0c:1e:ef:8c:5b:57:57:8d:b1:
68:3c:5b:37:a8:8c:05:b7:f6:06:ca:7c:36:84:62:
4a:2c:4c:cd:bf:5e:bd:9e:ed:92:58:b3:e7:ea:af:
da:b7:e9:bd:06:2b:60:fb:45:bd:2b:db:e9:ab:6c:
fe:5c:84:57:32:16:15:79:d9:c7:30:54:83:ef:e9:
20:87:f1:c2:18:cf:20:87:6a:b6:78:f9:d3:3d:ab:
72:54:11:68:cf:12:b4:42:67:88:bc:4b:6a:8f:fd:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B9:65:AE:50:40:85:01:A4:E1:C2:10:B5:08:84:F4:D8:F7:B2:EE
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/CrllrlBAhQGk4cIQtQiE9Nj3su4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:86:7a:87:7a:9c:ad:9d:b1:cb:1b:aa:b6:19:4c:40:c9:e8:
b0:2e:bc:6a:fc:2e:9b:4f:be:f0:6a:b3:35:09:ce:af:45:55:
8d:27:36:7b:78:69:ff:4e:00:6d:49:41:44:65:ac:b3:93:75:
2f:84:4b:a8:f0:0d:d5:9a:04:e2:48:1d:88:d1:de:1a:58:30:
eb:45:db:98:27:f6:53:22:26:d7:64:24:50:f4:d2:01:8f:40:
db:28:8b:0d:96:0f:85:22:3d:9b:f3:06:e1:ec:a5:c2:e6:8d:
46:06:57:69:bf:d7:14:cb:70:fd:c9:57:7a:6e:d6:ce:71:4f:
87:b8:bc:bc:49:9c:0d:66:f5:00:e2:98:32:1f:df:29:5e:68:
b1:5c:2f:09:91:73:6b:dc:55:be:14:c6:f5:bd:32:a8:05:00:
6a:8a:a3:01:29:d6:81:4f:73:d5:36:31:30:cf:6b:a8:27:21:
f2:65:d4:fa:e7:23:8f:ae:d3:c7:ed:eb:f3:0b:b9:45:90:7a:
9f:e0:e0:ef:07:cd:1c:05:57:95:2b:81:42:fe:e8:35:e4:bc:
6c:e4:d1:75:7d:3e:19:e0:75:f4:93:1a:24:d3:8b:04:81:b0:
46:75:55:ee:ca:ad:de:43:ff:bf:f6:3c:1e:56:27:73:c0:82:
24:bc:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:26 2025 by rpki-client