Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sETF3AZp3kfbxNQwE1p8DZ3iOuk.roa
File: sETF3AZp3kfbxNQwE1p8DZ3iOuk.roa (raw, json)
Hash identifier: RVIZj3G2G7akB9uyG+E9IwlveclmEFHRX2mgvd+lE7s=
Subject key identifier: B0:44:C5:DC:06:69:DE:47:DB:C4:D4:30:13:5A:7C:0D:9D:E2:3A:E9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199856A57C120DD57B3FE9CF749010D9087
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sETF3AZp3kfbxNQwE1p8DZ3iOuk.roa
Signing time: Fri 26 Sep 2025 09:46:03 +0000
ROA not before: Fri 26 Sep 2025 09:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213622
IP address blocks: 185.13.156.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:6a:57:c1:20:dd:57:b3:fe:9c:f7:49:01:0d:90:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 26 09:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b044c5dc0669de47dbc4d430135a7c0d9de23ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:b3:cf:ab:27:bc:7f:d6:06:59:35:15:8f:
dc:26:de:3a:c1:5f:d3:52:b4:d3:af:48:13:dd:f8:
2b:c2:8d:6f:04:59:05:a3:02:8f:b2:8a:a8:fd:83:
ed:2a:82:ab:d1:96:74:c3:67:bb:da:4c:3a:9e:1b:
49:83:ac:b8:71:a2:1c:6b:8a:28:93:e9:92:a3:ec:
16:2c:53:a1:04:cc:0b:e1:4f:96:7f:ff:50:52:14:
c6:22:1a:d6:81:17:8d:ea:72:bc:7e:64:56:6a:1e:
91:f4:8f:0b:ba:66:27:39:9a:7a:19:82:f6:f1:e0:
9a:fe:71:b9:77:ac:ec:ce:17:c7:1f:60:c1:f8:90:
14:f8:fb:7f:c7:f6:91:94:66:ad:75:34:03:1a:5d:
35:4b:4f:97:72:ca:5d:7b:fe:5d:a6:fc:22:0b:d8:
a4:74:91:23:10:81:f5:29:5f:a5:fa:17:c0:60:0d:
f4:5d:39:3a:f4:7f:29:3c:f5:d3:4a:a7:b2:a6:4e:
92:c5:de:72:76:5e:80:96:2f:b9:df:a2:e2:0b:4e:
4d:37:62:9b:d9:e4:52:ed:34:ce:ad:a1:50:dd:81:
c1:83:49:8a:4e:d5:78:a8:32:49:c2:e3:7c:cb:d7:
64:04:02:d7:2f:73:fc:b1:b3:67:fe:bf:8c:84:13:
24:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:44:C5:DC:06:69:DE:47:DB:C4:D4:30:13:5A:7C:0D:9D:E2:3A:E9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sETF3AZp3kfbxNQwE1p8DZ3iOuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.156.0/24
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e1:a0:19:ec:6c:31:07:01:11:b8:31:8d:01:82:ad:86:67:
27:60:c3:40:b7:1f:0e:34:62:56:79:ee:4a:ce:96:40:64:04:
c6:a6:0b:d7:bf:24:15:63:46:46:a3:63:1f:5e:f6:5b:69:f0:
a0:73:7d:a6:da:99:ce:d2:88:ae:37:88:ae:6b:24:5c:1d:85:
6f:3d:bb:aa:04:7b:9d:19:61:04:0e:56:bd:20:75:3c:55:ba:
d3:a5:b8:6e:6b:78:bf:00:0e:7e:ba:87:c4:e8:20:79:a2:d1:
1e:e6:81:4d:05:c9:3f:f8:82:30:06:6a:4d:4c:14:d2:fd:9b:
54:5c:fe:67:cc:6f:1d:66:73:09:09:1e:9e:ee:49:6c:89:38:
4c:f5:38:5e:45:fa:54:69:6c:f2:34:27:6e:00:b0:45:93:ab:
27:e0:b6:a4:38:16:91:cc:53:f2:cf:6f:5c:3a:11:32:5d:b5:
21:04:7d:26:9e:b2:a2:0e:bc:a6:47:d0:65:65:06:10:b3:d7:
a9:8f:8f:13:8a:4d:29:2c:4f:21:15:dd:bb:2e:a8:ce:7e:49:
f1:c2:43:34:e7:a9:a2:58:9c:17:01:5f:af:61:62:79:c0:4e:
bb:ad:5d:e3:5e:f0:93:21:07:85:0c:f0:6c:7d:c0:65:b0:10:
7f:ef:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:57:07 2025 by rpki-client