Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/c_19Vx--kByJ3CPnE7fV-9YqsIY.roa
File: c_19Vx--kByJ3CPnE7fV-9YqsIY.roa (raw, json)
Hash identifier: rJLkbkwSaNNZ3V0/FlZ9GpdAVCm/X795+DoI8i7OpAM=
Subject key identifier: 73:FD:7D:57:1F:BE:90:1C:89:DC:23:E7:13:B7:D5:FB:D6:2A:B0:86
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019A391A1978783E3E44A039892455B3598C
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/c_19Vx--kByJ3CPnE7fV-9YqsIY.roa
Signing time: Fri 31 Oct 2025 07:10:03 +0000
ROA not before: Fri 31 Oct 2025 07:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 213.145.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:1a:19:78:78:3e:3e:44:a0:39:89:24:55:b3:59:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 31 07:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73fd7d571fbe901c89dc23e713b7d5fbd62ab086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:88:b3:ad:c4:53:42:a2:d9:d6:da:77:8b:
37:a4:c9:93:c8:ba:96:d8:e9:5a:55:93:5d:c8:59:
c0:10:e1:59:30:c0:2b:19:9b:a7:06:bf:8f:a7:85:
7c:4d:54:f7:9c:58:a3:30:a2:3c:2d:a1:d9:fe:76:
39:d0:fd:f6:ac:ab:f1:8d:55:d3:37:e2:a6:1f:8d:
d8:25:a4:5e:7c:d2:b4:43:3e:97:e1:03:51:03:61:
9f:1e:6f:60:5b:fb:d8:99:a8:1c:20:cb:df:ca:3c:
f6:59:92:c8:4b:86:71:00:63:e8:83:88:c1:0b:9f:
d4:27:b4:0f:46:34:7c:7f:ef:ae:76:7c:60:fa:eb:
65:ae:fa:39:15:1e:0f:df:7b:3b:b3:11:8e:c2:eb:
b3:13:83:8e:87:1a:84:82:d6:59:95:71:04:ce:58:
9d:33:cb:34:06:04:23:48:5f:45:28:49:30:a9:18:
af:6d:00:04:8e:04:f6:3d:c8:77:60:28:eb:7a:02:
80:d9:d3:ab:00:44:ff:5a:91:64:9e:7a:de:8c:7b:
6a:00:c1:ee:21:83:03:07:d6:6b:79:ca:b5:d5:99:
44:95:d8:61:16:f9:a3:32:ba:0a:8a:93:e0:26:b9:
d0:bf:48:b7:36:8d:10:98:cd:ec:cf:0c:2d:03:df:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FD:7D:57:1F:BE:90:1C:89:DC:23:E7:13:B7:D5:FB:D6:2A:B0:86
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/c_19Vx--kByJ3CPnE7fV-9YqsIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.89.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:ca:56:b2:08:d6:c6:58:57:f3:09:57:f7:74:38:2f:41:1a:
c0:73:a0:22:dd:de:fa:75:d4:52:aa:b4:d2:a7:56:92:79:c4:
9a:9a:e4:0a:5a:9e:80:1c:97:60:48:8e:3a:a6:ec:00:2b:b1:
c4:89:ae:99:fc:56:cf:3f:91:34:1a:51:86:f6:90:35:28:1a:
f0:97:45:70:53:f8:c8:4e:1d:81:e0:62:69:ad:33:84:85:42:
de:f2:97:fa:e5:f3:be:42:77:95:72:3c:b0:db:94:35:a8:f6:
08:82:08:11:77:47:14:64:51:5a:0a:1f:64:57:7d:60:ed:00:
f3:31:54:41:40:76:23:0c:c3:36:8c:84:77:b1:d8:79:81:d3:
37:9b:e3:7f:ed:4c:5e:17:63:21:6f:47:1f:e8:30:4e:89:62:
cd:3f:c7:11:45:6c:f3:22:dd:6d:6f:52:c4:18:4d:5d:5e:5c:
c0:e7:f8:c1:5e:9b:0b:35:30:88:e2:9f:ee:76:64:ea:27:a0:
39:68:0e:e6:95:c8:1f:ca:31:db:db:f3:29:c7:80:2e:e3:e4:
f9:b4:5b:50:17:ff:96:11:1b:a4:b0:40:03:0b:7f:e7:6b:2a:
5b:02:61:2b:4c:ca:17:9c:c5:3f:30:ae:93:44:5d:f6:89:b4:
2b:bd:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:21:05 2025 by rpki-client