Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/0riwbK-R5SQDQbiXbxNMvOKwj1Q.roa
File: 0riwbK-R5SQDQbiXbxNMvOKwj1Q.roa (raw, json)
Hash identifier: d2SRgakZUBxW5TlLkPzlI9efZpJljVH6FfcMkO1myyQ=
Subject key identifier: D2:B8:B0:6C:AF:91:E5:24:03:41:B8:97:6F:13:4C:BC:E2:B0:8F:54
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 019A10A02972676EA1595ED180AABA1FA389
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/0riwbK-R5SQDQbiXbxNMvOKwj1Q.roa
Signing time: Thu 23 Oct 2025 10:32:03 +0000
ROA not before: Thu 23 Oct 2025 10:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216306
IP address blocks: 50.21.28.0/22 maxlen: 22
50.21.28.0/24 maxlen: 24
50.21.29.0/24 maxlen: 24
50.21.30.0/24 maxlen: 24
50.21.31.0/24 maxlen: 24
91.208.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:a0:29:72:67:6e:a1:59:5e:d1:80:aa:ba:1f:a3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Oct 23 10:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2b8b06caf91e5240341b8976f134cbce2b08f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:42:f2:91:4e:52:20:61:f5:fc:c9:68:5b:
55:34:01:8c:91:66:ac:3d:e4:b3:51:9e:00:2e:75:
fe:a3:7f:57:31:45:a6:8f:30:72:89:0e:16:ad:32:
dc:30:03:2f:83:6e:f1:e5:da:b0:9d:ea:c1:58:7a:
58:34:67:25:d9:62:0b:71:3f:6d:90:b8:e5:31:9a:
3c:2f:62:c2:7c:f7:2f:b0:95:f0:d3:da:e5:1b:01:
19:36:20:52:8c:f3:92:bc:b0:57:d5:f9:9c:11:76:
c7:98:86:2b:84:90:5c:64:29:7e:e8:1f:1c:2e:15:
9d:19:3a:2d:61:79:5f:5d:fd:d6:59:00:ed:ca:42:
e4:64:12:a9:2f:5f:45:2b:70:07:42:c2:16:7c:18:
c7:48:29:04:1b:d1:b2:83:6e:c5:ea:58:7e:79:82:
d0:9f:b5:5c:e5:7f:f5:b6:91:24:96:c4:c8:06:5d:
3a:5e:ea:31:dc:c5:17:e6:70:8a:4a:16:ba:6c:cc:
08:00:ba:96:8f:69:70:ae:f1:5d:d7:a6:bc:cf:46:
33:dc:2d:58:a3:74:32:97:ac:fa:1e:60:07:4d:93:
a4:1b:97:55:ff:de:9b:73:bc:97:4f:7c:e3:74:3c:
58:b1:aa:74:89:d3:86:9d:a8:30:f5:0b:f5:31:fc:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:B0:6C:AF:91:E5:24:03:41:B8:97:6F:13:4C:BC:E2:B0:8F:54
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/0riwbK-R5SQDQbiXbxNMvOKwj1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.21.28.0/22
91.208.118.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f7:75:49:bb:b6:ef:99:d5:0e:4a:8d:fb:cd:3f:c3:ce:54:
2a:4b:7b:0d:4d:e9:f8:77:fe:35:bb:72:75:6d:cf:b6:1a:46:
72:7b:24:d8:e7:9f:cb:cb:0d:93:0f:3a:65:1a:dc:99:50:58:
87:0d:b7:60:be:9f:61:4b:35:2e:65:d2:e7:7d:c7:f9:e4:5b:
0a:61:4d:c3:5f:4b:1e:56:e9:a1:12:79:b5:09:10:28:bd:da:
3c:7a:bb:65:19:50:a9:de:d5:da:bf:d3:9f:5c:1b:b4:00:5c:
5d:a8:f1:53:78:8e:cc:53:b2:82:51:29:2f:b6:d5:74:98:f5:
04:cd:2a:ed:69:c8:ed:96:9c:d3:c0:b2:dc:ef:49:91:ea:33:
69:43:a9:ad:cf:82:f6:d7:58:e9:bf:24:5c:af:ae:2a:a1:85:
b1:55:9f:17:b8:06:65:70:12:51:cd:c8:d9:74:b0:01:69:22:
64:89:80:e9:2b:18:42:2c:9f:5f:b8:61:31:42:ff:96:42:82:
e5:3c:a0:38:a3:00:fb:3f:98:3e:80:b0:34:6b:31:76:1f:23:
d3:09:8e:66:5d:1d:16:61:2f:11:c9:74:26:f5:12:8f:8e:b3:
bf:88:11:12:db:91:f5:f2:60:05:4e:7a:6e:9e:61:df:4e:66:
e1:12:d9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:42 2025 by rpki-client