Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/DPb0eUvagL5PN3xJtBrhYPAa1oM.roa
File: DPb0eUvagL5PN3xJtBrhYPAa1oM.roa (raw, json)
Hash identifier: 78CCGO3BfamB/jJjL779FD3c7gVdk/c3m8G0P9v/MMg=
Subject key identifier: 0C:F6:F4:79:4B:DA:80:BE:4F:37:7C:49:B4:1A:E1:60:F0:1A:D6:83
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019A2AB60481742F6C0497C2B2A7130ED595
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/DPb0eUvagL5PN3xJtBrhYPAa1oM.roa
Signing time: Tue 28 Oct 2025 12:06:03 +0000
ROA not before: Tue 28 Oct 2025 12:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 31.130.133.0/24 maxlen: 24
31.130.134.0/24 maxlen: 24
31.130.135.0/24 maxlen: 24
31.130.144.0/21 maxlen: 24
31.130.152.0/22 maxlen: 24
77.233.220.0/22 maxlen: 24
81.17.154.0/24 maxlen: 24
94.141.162.0/24 maxlen: 24
185.185.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b6:04:81:74:2f:6c:04:97:c2:b2:a7:13:0e:d5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Oct 28 12:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cf6f4794bda80be4f377c49b41ae160f01ad683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:68:d9:c3:7d:a3:ec:85:55:e9:ef:7a:e4:
d5:5f:0f:dd:b6:52:d4:68:f2:32:19:03:26:98:b8:
97:09:84:5a:d0:6d:60:b6:bd:30:1e:bf:0b:98:06:
5c:ba:60:cc:1b:00:58:33:dc:4d:d4:c5:4c:6a:37:
34:dd:01:e1:d7:f1:bc:b4:43:7f:cc:01:a8:a8:4b:
48:ac:37:e8:a2:2d:e1:88:30:27:2a:5d:09:00:8a:
29:96:14:de:73:4a:27:40:44:5f:0f:23:88:cb:e1:
ba:5f:32:c2:f8:9f:64:3a:dc:95:c5:ab:18:ec:89:
c2:a3:eb:3b:da:f4:1f:c8:40:1f:70:27:87:65:28:
da:53:f9:67:6b:d0:b5:63:af:ca:a7:d6:a7:32:85:
cc:31:bd:4c:27:72:2a:35:ef:82:2b:5f:05:23:52:
4d:b0:5c:93:fb:be:0e:b0:09:2e:ea:0c:50:78:ef:
38:34:a8:34:7f:f6:55:c9:db:e4:e0:1c:49:87:0f:
fb:3f:81:f7:8f:4f:01:02:98:77:06:af:52:67:86:
08:10:de:d7:c1:59:e4:82:00:37:b3:d8:a8:ac:cd:
2b:40:61:09:16:4d:22:11:94:ad:21:51:98:2b:b2:
b3:41:92:e4:9e:cc:4a:92:56:7f:ba:d2:ee:cb:91:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F6:F4:79:4B:DA:80:BE:4F:37:7C:49:B4:1A:E1:60:F0:1A:D6:83
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/DPb0eUvagL5PN3xJtBrhYPAa1oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.133.0-31.130.135.255
31.130.144.0-31.130.155.255
77.233.220.0/22
81.17.154.0/24
94.141.162.0/24
185.185.142.0/23
Signature Algorithm: sha256WithRSAEncryption
31:09:8c:2a:a4:50:6b:85:0f:c9:72:42:f0:2c:dd:1f:e7:a4:
c5:1f:b6:ff:1a:df:a2:ab:72:21:5f:4b:55:1b:e7:f4:26:dc:
43:84:8c:93:67:42:07:ce:28:9d:7e:3b:0f:28:29:66:2a:eb:
ec:b5:3b:95:53:92:0a:db:a2:e1:c7:12:99:b2:10:d8:67:5b:
b2:85:45:fb:ee:30:ab:57:ba:17:fb:0f:ce:e2:53:dd:af:96:
7e:14:50:be:26:68:18:b2:33:bb:34:03:1c:c5:67:96:29:81:
81:e0:bb:ae:55:9e:2f:5c:eb:88:25:ce:dc:88:fd:70:3d:57:
81:62:35:c3:83:3c:0a:3d:12:b4:48:01:bf:77:25:8f:a8:0e:
47:10:9c:df:47:d9:fd:45:b4:eb:ca:e1:f5:f3:d3:97:58:7b:
51:4a:b4:42:30:21:58:53:ad:b3:1b:b9:c6:59:06:60:cc:34:
89:08:cd:17:d6:8a:39:d6:e5:58:92:f8:76:b8:9f:63:b8:be:
65:1b:0d:a5:12:08:09:47:62:ad:5e:07:b6:ca:3a:06:e6:3a:
2e:48:87:13:e1:92:af:55:63:7d:7f:93:59:f0:f6:30:a7:38:
ba:53:55:7d:95:ae:5a:b9:25:ab:4c:4b:15:68:f4:c0:9e:ef:
1e:b6:bb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:57 2025 by rpki-client