Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JtVbJy-n_2OQZJuEy5VQCIWtby4.roa
File: JtVbJy-n_2OQZJuEy5VQCIWtby4.roa (raw, json)
Hash identifier: rVpXZc9/KRQbm2XlrpF3kGM6DdDlKLkvf9o/VDjT0Kg=
Subject key identifier: 26:D5:5B:27:2F:A7:FF:63:90:64:9B:84:CB:95:50:08:85:AD:6F:2E
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019A3FEB19420BA5E6DF031B8928E86AC1C4
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JtVbJy-n_2OQZJuEy5VQCIWtby4.roa
Signing time: Sat 01 Nov 2025 14:56:03 +0000
ROA not before: Sat 01 Nov 2025 14:56:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 93.88.158.0/24 maxlen: 24
95.155.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:eb:19:42:0b:a5:e6:df:03:1b:89:28:e8:6a:c1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Nov 1 14:56:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26d55b272fa7ff6390649b84cb95500885ad6f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:06:68:2f:6a:cf:69:78:49:a9:0b:bc:bc:
0b:d9:3e:10:c7:07:49:b9:b7:c7:a3:fa:ac:c0:9b:
6c:dc:17:07:de:e8:3d:f4:d1:e1:45:4b:87:6d:e7:
63:63:2d:f5:ce:ac:81:87:3f:e6:83:1f:75:64:51:
60:fc:ea:53:38:bf:a1:13:28:f0:50:a5:81:0a:bd:
dd:64:fe:19:2b:95:9d:d5:3e:0f:f8:56:e0:b7:ca:
14:fc:e1:30:bd:ff:fc:d1:5a:64:ab:bc:86:4d:cd:
7e:9b:d4:34:29:77:33:95:2e:e2:be:e8:7a:f1:32:
11:50:16:1e:56:c1:31:73:78:1e:cb:3f:01:60:19:
3e:57:26:91:9b:08:d3:04:f0:23:56:c1:71:a5:cf:
0d:f2:a2:2a:e6:e0:5d:db:de:8b:90:e0:76:1d:62:
1e:9c:5e:bd:73:a7:d2:68:f6:90:83:97:be:ad:89:
63:78:52:13:f6:88:41:bf:76:ee:da:ac:93:f7:7f:
1a:62:b8:aa:b2:d6:bf:3e:8d:c9:eb:24:0b:6b:47:
93:a6:29:d9:19:95:53:9d:e4:e9:69:31:9a:8b:fa:
e2:41:7e:92:be:3a:4f:f0:68:98:5c:fa:a4:c1:a4:
e6:21:87:ae:d8:f4:1c:37:2d:0b:14:05:a2:6b:60:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D5:5B:27:2F:A7:FF:63:90:64:9B:84:CB:95:50:08:85:AD:6F:2E
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/JtVbJy-n_2OQZJuEy5VQCIWtby4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.158.0/24
95.155.148.0/24
Signature Algorithm: sha256WithRSAEncryption
12:26:79:83:d7:54:82:a1:3b:48:9b:27:7e:f3:88:3f:33:49:
cd:c3:8c:44:b7:85:0e:eb:1d:9b:a6:de:2a:47:48:21:ef:a7:
40:d2:0f:04:f4:82:0d:e9:c4:66:e4:d4:fc:61:03:2f:a4:74:
de:89:9c:49:3a:eb:7a:a4:17:d3:6f:d3:54:b1:b6:d5:49:99:
94:37:be:15:cd:ac:b5:a0:dc:aa:ef:c0:a2:d0:17:da:4f:43:
52:69:c3:9f:19:e7:66:2d:4f:c3:27:aa:f7:bd:17:ee:bf:98:
1e:34:0e:9e:6c:4f:cd:24:b9:9e:43:a6:e9:37:fd:9b:b1:11:
a1:2e:23:e3:6e:2b:13:ac:39:aa:5a:34:9d:dc:2d:1e:a2:f0:
23:8c:92:85:a3:00:b1:a0:87:e4:50:71:3c:2b:92:88:4f:a9:
f5:28:83:53:7c:95:01:b0:a7:22:09:19:b8:7e:ff:40:e1:4c:
c9:62:25:05:e3:ca:dc:3c:b0:79:30:3e:82:cd:2e:72:67:d0:
70:66:b2:53:53:9f:3a:5b:2c:ad:7d:34:10:6e:6e:96:00:34:
41:e0:98:38:ea:af:4e:10:90:cd:93:14:96:86:e7:ab:73:fa:
a6:31:e1:7e:fa:06:e7:6d:5d:c6:57:d4:fa:ae:3a:cf:d4:cc:
a2:c7:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:12 2025 by rpki-client