Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xy60tp2sLL1PN2X77Iv1vGMMi0g.roa
File: Xy60tp2sLL1PN2X77Iv1vGMMi0g.roa (raw, json)
Hash identifier: Olgm6V35+yp0uAgj+NbQdYuhzf+0uYkbHbUYYqnwUIw=
Subject key identifier: 5F:2E:B4:B6:9D:AC:2C:BD:4F:37:65:FB:EC:8B:F5:BC:63:0C:8B:48
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199A4C0317CE635D1D3E70C025BCA105134
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xy60tp2sLL1PN2X77Iv1vGMMi0g.roa
Signing time: Thu 02 Oct 2025 11:48:02 +0000
ROA not before: Thu 02 Oct 2025 11:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 79.110.50.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:c0:31:7c:e6:35:d1:d3:e7:0c:02:5b:ca:10:51:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 2 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f2eb4b69dac2cbd4f3765fbec8bf5bc630c8b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3e:d7:48:33:4a:c9:65:bf:ea:51:2b:ab:cb:
47:ff:23:fd:a8:ad:31:da:a1:50:c3:5d:7e:5e:e5:
d5:28:ff:31:c2:28:69:9b:bd:e6:2f:4c:b9:dc:2c:
30:a7:97:c3:f6:97:e1:82:25:26:bb:80:65:2e:7b:
a8:3e:41:15:9d:ac:f3:0f:5e:4d:87:dd:9e:d4:68:
75:49:3b:82:d9:a7:2b:01:6b:b5:ae:a6:54:2d:d2:
ff:59:b7:60:e5:54:10:64:b3:ca:54:9d:a2:fb:fd:
fd:c0:7e:a9:04:17:29:5e:d2:e9:ca:34:2c:48:ec:
05:5d:9e:b4:45:2a:29:f4:cc:fc:c5:0b:3b:45:96:
a3:c6:fc:26:6b:36:e7:ad:f3:30:cb:0a:a0:79:d8:
dd:fa:f1:4a:f1:b0:b6:0c:3d:5b:89:46:84:ef:e5:
ed:1e:6b:18:c6:73:72:a7:20:36:c2:5f:9a:fe:de:
e3:bb:fc:84:6f:5e:79:4c:76:32:08:a6:be:d1:f9:
95:91:fd:14:09:81:9a:28:55:84:50:f3:75:9e:b5:
54:8e:8b:d4:9a:db:cb:df:c7:76:1a:26:0a:d0:49:
c7:12:ff:74:60:e3:c1:0a:0d:6d:b3:47:6c:d7:77:
13:90:1f:27:f8:ff:50:86:02:af:64:7a:59:16:d2:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2E:B4:B6:9D:AC:2C:BD:4F:37:65:FB:EC:8B:F5:BC:63:0C:8B:48
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xy60tp2sLL1PN2X77Iv1vGMMi0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.50.0/24
185.222.160.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:48:46:f0:d1:a3:76:f6:fc:ba:98:09:70:7b:d3:69:55:1b:
9f:04:b5:6e:81:95:18:48:4e:4f:f9:ad:46:13:be:3a:f0:c1:
8b:83:5e:b6:92:e7:cc:aa:e2:cb:3c:b5:6e:0a:45:36:be:d7:
0d:31:36:62:5d:fb:b6:6a:4c:95:a9:24:c8:81:06:d0:8f:3a:
e4:dc:b8:ae:08:be:13:91:d6:14:d5:71:7e:7d:36:4e:6e:e0:
26:57:57:b8:f3:20:49:65:3c:80:12:ef:3c:45:30:22:7f:21:
5d:fc:e0:ab:e4:58:c5:8e:19:50:e6:0d:82:1d:4a:1f:0d:11:
2a:08:59:ba:78:c1:7f:1e:81:be:24:ad:ca:ae:04:0c:8d:81:
af:7b:b1:a5:bb:0a:02:08:a6:52:7e:9f:d3:76:8e:fe:69:51:
21:d3:b9:04:a7:4e:f1:b6:1d:27:8b:c7:66:c6:e7:1e:d7:8b:
4a:35:8d:39:8f:c6:7a:ab:44:74:ab:05:87:01:8e:c8:08:61:
97:db:44:a2:13:e3:70:cc:13:e3:2b:61:18:16:5c:29:ac:3b:
ce:f2:c8:bf:aa:92:2d:e5:41:ac:05:d7:f5:e6:38:e0:d4:c5:
3a:74:3b:cb:3d:f8:d3:5b:44:d0:b1:9a:91:d3:eb:d0:bf:ea:
27:88:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:37 2025 by rpki-client