Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/AmSXBHT3ckJxS__llRle1pOg_Gk.roa
File: AmSXBHT3ckJxS__llRle1pOg_Gk.roa (raw, json)
Hash identifier: NGUzsrMFkYpqygz3V48C568ROl1XZloZCRkdB8fnGRs=
Subject key identifier: 02:64:97:04:74:F7:72:42:71:4B:FF:E5:95:19:5E:D6:93:A0:FC:69
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 0198E51570EAC3367814104DA5F5537F4A9E
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/AmSXBHT3ckJxS__llRle1pOg_Gk.roa
Signing time: Tue 26 Aug 2025 06:34:04 +0000
ROA not before: Tue 26 Aug 2025 06:34:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206658
IP address blocks: 185.197.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:15:70:ea:c3:36:78:14:10:4d:a5:f5:53:7f:4a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Aug 26 06:34:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0264970474f77242714bffe595195ed693a0fc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:98:11:7f:be:bd:b7:64:c0:f9:96:30:ac:
ed:ef:52:ba:37:d4:f1:f7:6b:93:c0:ab:6d:df:79:
dc:58:97:74:9b:2d:7f:52:2b:99:6b:88:32:65:cd:
f2:23:3b:f2:8e:aa:7b:67:8d:3a:cf:46:34:a2:29:
ec:9d:ea:69:b8:5a:b8:f1:3f:60:98:06:77:f1:36:
26:d1:4a:ed:69:00:4c:e2:05:99:36:58:fa:33:e9:
ff:8b:8e:08:81:0d:3e:2d:e3:4b:69:5b:c8:cb:cf:
e5:c7:8e:bd:08:7a:5f:32:f1:0a:c3:ce:46:4a:fa:
e6:a4:68:77:6e:21:f7:c7:ee:3c:9c:15:87:c8:52:
a0:94:39:b6:d1:ed:ac:12:07:3b:b5:3a:3a:e1:49:
56:8f:7a:b7:98:38:21:67:f9:1d:ea:7a:cb:2d:e7:
53:28:39:73:1e:cf:da:ee:5f:52:cc:5b:bc:17:6e:
18:61:53:cb:95:29:06:ba:82:47:35:40:7a:b7:ef:
c0:e1:03:99:b8:dd:ad:3b:9d:de:99:36:36:1a:e7:
ea:18:9f:60:4d:5d:28:9b:90:c7:04:75:cc:d8:59:
32:03:d5:4d:8d:5b:00:58:36:f9:9c:d0:b5:ff:80:
b6:64:42:9e:a6:5c:b6:84:16:42:81:67:46:3c:34:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:64:97:04:74:F7:72:42:71:4B:FF:E5:95:19:5E:D6:93:A0:FC:69
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/AmSXBHT3ckJxS__llRle1pOg_Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.10.0/24
Signature Algorithm: sha256WithRSAEncryption
25:10:33:bd:58:99:e6:92:8c:1f:bd:66:72:8b:58:99:2f:17:
48:32:4a:2f:2f:ab:c7:ae:e6:83:47:df:b2:57:fc:00:fa:a5:
82:51:d5:0d:cb:c3:de:05:83:71:79:4e:52:ff:20:d7:83:64:
3b:4c:a5:83:04:72:51:23:85:1d:a4:9f:67:8f:76:cc:07:e0:
fd:ad:b7:21:d4:a4:5b:e7:8b:9d:8e:82:2e:4a:6d:86:3a:ba:
35:80:c8:a0:86:fc:c2:ed:2a:e6:ae:6a:ee:1b:72:48:f8:a4:
0a:07:92:ad:ea:66:14:bf:47:32:db:6a:33:e5:30:16:df:27:
8e:79:89:b5:62:8d:20:11:11:18:c2:23:66:be:c3:1a:08:6e:
dd:7f:f2:b4:06:35:04:1d:c1:df:22:73:b0:c4:d4:b8:2c:01:
65:79:41:c1:45:05:98:a5:2a:2d:55:64:4a:d3:c1:c7:06:28:
4a:4d:37:1d:62:a2:ec:69:87:81:16:01:1a:8c:1f:b4:50:f3:
7e:7c:93:90:f4:84:b1:45:06:6f:40:69:94:e5:2d:d2:d4:07:
3f:89:ed:61:19:f9:91:6e:44:09:77:03:b9:32:4c:8d:e8:3e:
88:d9:61:93:3c:e1:64:58:61:a6:df:d4:49:ab:e7:a5:db:1a:
bd:c4:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:15 2025 by rpki-client