Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SshQI-QLBMHc80Ri9_b7UCtF5bU.roa
File: SshQI-QLBMHc80Ri9_b7UCtF5bU.roa (raw, json)
Hash identifier: +g2yNtApcFbMmtMGmmJw3n7onXA+Q2lfDoQTQmtx4os=
Subject key identifier: 4A:C8:50:23:E4:0B:04:C1:DC:F3:44:62:F7:F6:FB:50:2B:45:E5:B5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0198CDF6900959C3A405E59AF2704B3F61E5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SshQI-QLBMHc80Ri9_b7UCtF5bU.roa
Signing time: Thu 21 Aug 2025 18:49:04 +0000
ROA not before: Thu 21 Aug 2025 18:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39347
IP address blocks: 85.121.48.0/21 maxlen: 24
85.121.120.0/21 maxlen: 24
85.121.208.0/21 maxlen: 24
85.121.240.0/21 maxlen: 24
85.122.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:f6:90:09:59:c3:a4:05:e5:9a:f2:70:4b:3f:61:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 21 18:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ac85023e40b04c1dcf34462f7f6fb502b45e5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:7a:c1:2c:2e:bc:8f:2d:63:71:35:a7:46:
82:f1:d9:79:9c:40:15:c7:6c:c1:02:f3:70:f9:9c:
8c:00:10:f3:3c:9b:3a:5b:da:32:26:99:27:a4:26:
e2:26:ce:8b:7c:80:6d:2f:36:25:76:e8:d7:9b:d7:
10:2c:a1:d7:a8:5e:c6:4f:e3:67:d7:5e:ba:76:0c:
0b:07:43:a9:66:2b:99:5c:e9:11:11:28:c1:6b:05:
ad:14:73:64:d5:c2:b7:f4:9e:13:de:b3:16:6c:e1:
60:25:39:da:ae:27:83:53:dc:70:2d:00:e1:72:91:
38:f1:2e:6a:91:d2:19:62:54:5f:2e:3f:f7:86:fc:
12:10:f8:28:4b:4f:62:69:a8:72:be:07:db:b3:0f:
15:10:1e:ab:0f:1b:0b:98:00:33:1c:3f:fe:d6:c7:
98:59:aa:c5:d2:53:ec:d6:60:2f:53:19:51:3e:d9:
ce:fc:48:91:3f:31:34:f1:b9:6c:a7:a1:4f:cc:d5:
7e:fb:1a:84:7c:96:ff:45:92:2b:89:43:66:40:54:
04:d2:84:39:dd:37:04:48:72:d7:69:7e:b6:ed:7d:
76:fe:b9:2b:b3:da:c0:4e:3f:b2:ad:48:05:0c:a1:
8a:81:30:08:09:18:27:80:5d:d3:b9:d1:65:95:85:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C8:50:23:E4:0B:04:C1:DC:F3:44:62:F7:F6:FB:50:2B:45:E5:B5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SshQI-QLBMHc80Ri9_b7UCtF5bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.48.0/21
85.121.120.0/21
85.121.208.0/21
85.121.240.0/21
85.122.120.0/22
Signature Algorithm: sha256WithRSAEncryption
40:53:e5:53:9c:3a:57:5b:24:a3:98:1e:7e:2e:5d:83:4a:dc:
29:49:0a:52:77:36:38:e0:fd:d4:d4:3a:8a:50:13:d5:36:8f:
1e:2a:64:95:76:4f:46:46:43:5f:5b:3b:ef:5a:a9:86:cf:26:
68:7d:cf:e1:0c:a0:ef:7e:3b:38:42:6b:22:d3:c7:b0:13:fa:
28:ae:3d:82:bd:ba:d7:ec:9a:5c:c7:24:9e:31:2b:76:63:65:
e7:a5:d7:08:96:62:9f:6c:15:e3:f7:48:d7:fa:c8:2d:82:76:
c9:a8:af:49:bb:f0:de:ad:b2:70:3a:d0:72:4b:33:b7:6e:cf:
cd:e4:bf:41:58:2b:6a:7d:a9:b9:cd:ec:03:66:d1:e3:41:50:
e2:fa:b1:3f:05:bc:55:03:33:ca:83:84:ab:e0:de:4c:85:b5:
be:66:57:14:75:ac:e8:d2:5a:62:f2:18:24:b6:a8:ba:7f:77:
57:8b:14:91:02:55:b4:2b:04:b2:19:ab:5d:b6:da:83:07:c6:
e0:56:af:af:4a:96:74:a1:75:9b:ba:86:99:c3:e8:c5:bd:c1:
50:e1:ae:11:43:90:32:61:0f:ac:62:55:6d:85:35:8c:a2:ae:
4f:aa:b6:08:22:7e:b4:e6:43:9f:c5:f4:22:77:fa:ff:ef:be:
c3:73:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:40:19 2025 by rpki-client