Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/SMgqJqJiWe5nMYNu5THuPlxAMNc.roa
File: SMgqJqJiWe5nMYNu5THuPlxAMNc.roa (raw, json)
Hash identifier: hSxVwtR62ZGO5yHtAQe/FF3nfDWb9MLBApYj+v7/x1k=
Subject key identifier: 48:C8:2A:26:A2:62:59:EE:67:31:83:6E:E5:31:EE:3E:5C:40:30:D7
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 0199B09B20FAE942DBB4949F31F6EF392B86
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/SMgqJqJiWe5nMYNu5THuPlxAMNc.roa
Signing time: Sat 04 Oct 2025 19:03:00 +0000
ROA not before: Sat 04 Oct 2025 19:03:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214640
IP address blocks: 82.197.73.0/24 maxlen: 24
95.141.241.0/24 maxlen: 24
185.113.11.0/24 maxlen: 24
193.53.40.0/24 maxlen: 24
2a13:7c80::/32 maxlen: 32
2a13:7c81::/32 maxlen: 48
2a13:7c82::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b0:9b:20:fa:e9:42:db:b4:94:9f:31:f6:ef:39:2b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Oct 4 19:03:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48c82a26a26259ee6731836ee531ee3e5c4030d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:6f:d3:1c:34:af:62:d4:9b:15:ab:28:be:
cc:36:6d:07:b2:cd:6f:5c:39:bc:31:78:2d:d9:d8:
b1:41:57:8b:a1:03:ee:1d:16:7b:ac:83:2b:1b:4d:
ba:e7:f1:95:fb:5c:3f:e3:b1:1b:9e:3f:05:6f:c8:
9f:4f:11:48:81:1f:1e:ee:cd:ad:0e:5a:4c:94:cc:
42:50:78:8d:e2:6f:cf:e3:53:dc:27:c9:9c:98:37:
c8:29:cf:dc:47:bf:86:b6:3c:f7:32:42:31:d6:51:
39:f9:6c:0b:f2:a5:72:ec:b0:89:0b:62:95:d2:62:
c3:18:bf:cf:0f:71:da:8c:6d:bb:cb:66:75:1e:2b:
29:27:ce:90:b5:fd:cc:ec:ee:42:ec:af:9b:9b:73:
8f:8f:46:e9:65:f2:63:5e:fd:05:f9:09:ec:a8:2f:
c4:4e:b4:cd:e8:b1:8c:07:f7:ed:01:1c:d2:0c:f4:
f5:e5:61:91:e1:73:a7:f3:ef:cc:8f:8b:e8:66:1a:
10:fc:bb:38:ee:b4:5d:7a:86:b6:52:f8:1a:49:a3:
ea:90:2b:f8:7c:8e:5a:81:90:30:65:6f:eb:5d:39:
6a:ac:71:91:23:91:21:c3:46:da:45:64:50:4e:c2:
e3:72:fc:7d:8e:cd:2e:23:62:14:26:b9:be:9f:6c:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C8:2A:26:A2:62:59:EE:67:31:83:6E:E5:31:EE:3E:5C:40:30:D7
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/SMgqJqJiWe5nMYNu5THuPlxAMNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.73.0/24
95.141.241.0/24
185.113.11.0/24
193.53.40.0/24
IPv6:
2a13:7c80::-2a13:7c82:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:e9:05:99:64:04:04:21:8b:f3:8d:2d:91:2d:06:e3:e6:3c:
51:22:ac:87:94:b7:e2:e9:69:0f:31:12:33:8f:85:ce:db:e2:
79:5c:61:04:d7:37:58:e4:bf:c6:c6:51:bf:af:0d:33:f5:cd:
1c:84:0d:b9:35:15:4c:24:ee:f6:26:02:29:b1:45:ad:68:af:
9a:50:bd:b2:37:b7:db:03:d5:01:fa:5a:9e:dd:f6:a7:d1:5e:
46:14:6e:d5:66:81:d5:75:8d:47:82:f3:2a:66:e2:c5:f8:f1:
d6:f5:23:07:54:71:90:39:6e:df:9d:d2:f7:01:27:33:c7:a9:
4f:5f:93:b7:e4:86:5e:bd:48:24:91:aa:97:4e:99:3f:ca:54:
83:5d:02:71:05:ca:61:ac:b1:b8:9a:73:d6:04:79:e1:ec:82:
af:c3:17:cd:9d:62:10:24:fa:51:d1:4b:b8:ad:88:c5:fb:98:
2f:61:c1:ff:28:48:ac:68:ec:c7:ff:39:c5:9c:fd:a3:af:8e:
30:a6:50:3a:f6:14:79:e4:46:87:a7:99:57:80:dc:ab:5e:7f:
80:e4:26:be:33:f3:bd:37:e2:21:7a:72:f0:6e:b4:74:9d:24:
78:80:ba:e8:13:b0:9c:a9:c8:46:db:8c:c9:32:48:e5:cf:b6:
9c:64:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:07 2025 by rpki-client