Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/SRX9IKEEjT5oSeB-7SJhSMjZVJU.roa
File: SRX9IKEEjT5oSeB-7SJhSMjZVJU.roa (raw, json)
Hash identifier: JogYdyXTs6jUeLci5HV5dPXTp8hackvCsA5/0iZx0fw=
Subject key identifier: 49:15:FD:20:A1:04:8D:3E:68:49:E0:7E:ED:22:61:48:C8:D9:54:95
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 0197888B0C0C6081131D4894E8A57BDEEE29
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/SRX9IKEEjT5oSeB-7SJhSMjZVJU.roa
Signing time: Thu 19 Jun 2025 14:15:03 +0000
ROA not before: Thu 19 Jun 2025 14:15:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.22.68.0/22 maxlen: 24
185.70.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:8b:0c:0c:60:81:13:1d:48:94:e8:a5:7b:de:ee:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Jun 19 14:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4915fd20a1048d3e6849e07eed226148c8d95495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:ae:08:68:cb:d5:ed:68:74:e9:a5:06:93:
fb:64:d3:06:ea:26:64:7a:01:0d:9c:90:72:c5:ae:
dd:53:bd:15:69:21:8f:5d:87:22:35:96:f9:c9:27:
b2:28:13:b8:7c:15:52:7a:6d:74:cc:a4:b4:12:17:
ca:ed:33:63:27:48:52:ba:6a:14:ad:16:2b:c3:be:
07:86:0a:1d:8c:2b:51:e4:49:27:9e:1a:78:b6:18:
05:2e:c4:7e:29:b5:55:14:48:d1:e7:9e:32:81:b6:
0f:3f:8d:96:32:4f:19:7a:90:fc:cb:1d:63:84:12:
14:87:92:a6:93:d3:9c:a6:f7:d1:5e:cd:c4:79:8b:
26:2f:9a:f0:a8:17:4b:32:d1:26:cf:7f:35:89:88:
b8:5b:d1:c5:a2:bf:4f:79:3e:87:52:ad:f7:0a:7d:
76:56:95:a0:c3:c1:c2:bf:0c:a8:a2:51:96:f1:ac:
04:72:c7:0b:91:39:36:fd:c0:13:81:0d:e5:1c:78:
98:7f:5c:b4:6c:d1:d4:9d:0a:14:f0:7e:7b:64:96:
34:1d:17:57:e3:83:54:dd:09:46:be:a9:f4:d9:c1:
a5:74:c9:ce:78:c8:ff:5e:8f:22:d8:98:a3:95:9d:
06:d5:83:dc:b2:e2:59:c1:a4:c1:4e:f6:ea:e0:9b:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:15:FD:20:A1:04:8D:3E:68:49:E0:7E:ED:22:61:48:C8:D9:54:95
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/SRX9IKEEjT5oSeB-7SJhSMjZVJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.68.0/22
185.70.120.0/22
Signature Algorithm: sha256WithRSAEncryption
70:0d:c5:b5:bb:1d:46:26:4f:ce:d1:ba:b0:7c:1d:3c:13:85:
89:c3:20:0f:d1:6a:02:8a:da:7d:3a:7d:a8:b5:93:5d:ff:e1:
47:ec:98:b5:98:72:e1:ff:ed:a0:69:82:ed:a4:f8:ae:96:76:
9f:34:4c:b3:7d:4a:5e:11:37:8f:1b:98:29:13:1b:66:24:60:
2e:98:17:e2:ed:83:de:31:4d:b7:70:15:e4:98:21:9d:15:f3:
73:e7:c1:c7:91:0a:99:a5:18:c1:4e:89:07:c8:ba:fd:a3:de:
87:ce:0e:25:1c:96:91:9d:97:15:d0:fe:1d:1d:e8:c6:e6:bf:
81:af:7b:50:4f:36:9a:43:b7:5a:b3:f7:0b:6f:18:2a:a9:1e:
5a:71:ab:7a:54:34:62:d9:61:fe:59:06:f9:b6:56:c4:94:cf:
75:a0:7a:05:6b:d0:36:48:32:3a:f3:02:0e:22:92:00:1d:1c:
14:23:9f:a7:c7:06:20:b4:a0:25:4f:94:3b:91:79:a6:33:e3:
63:97:7c:f2:c6:f3:fb:80:8b:14:ff:48:8b:cf:00:55:bf:11:
4f:7f:0b:5c:51:5f:35:81:2c:1e:bc:6a:78:2c:dd:61:1f:91:
d5:fb:ec:7a:ef:9f:93:79:ba:74:f7:41:02:cd:0e:5a:33:d1:
83:7b:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:11:26 2025 by rpki-client