Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/sq3j0A4FF53FDnj1cQeAQwKHwYY.roa
File: sq3j0A4FF53FDnj1cQeAQwKHwYY.roa (raw, json)
Hash identifier: nIuc2CbfmY1z7G8hRZW0vMUbc2VvwrAvS4OcpulV6G8=
Subject key identifier: B2:AD:E3:D0:0E:05:17:9D:C5:0E:78:F5:71:07:80:43:02:87:C1:86
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 01998174D982251B23537838FC1311B8742D
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/sq3j0A4FF53FDnj1cQeAQwKHwYY.roa
Signing time: Thu 25 Sep 2025 15:19:02 +0000
ROA not before: Thu 25 Sep 2025 15:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202055
IP address blocks: 185.54.156.0/24 maxlen: 24
185.54.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:81:74:d9:82:25:1b:23:53:78:38:fc:13:11:b8:74:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: Sep 25 15:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2ade3d00e05179dc50e78f5710780430287c186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:09:4f:f0:8f:15:7a:5f:23:2b:9c:b8:20:
37:ca:ee:f3:98:a7:75:39:39:bb:ce:54:76:bf:2d:
84:a5:04:42:0e:46:a3:72:af:c4:c9:43:ae:e9:8f:
b6:55:48:8e:09:f0:14:03:e8:6a:9f:cd:32:c8:88:
3f:11:9c:9a:49:2f:c6:72:94:8d:c2:91:46:35:92:
8a:cf:d3:58:1b:8b:43:90:53:97:b7:e4:c8:1e:09:
b5:ac:26:2d:de:62:d4:cd:78:36:24:75:6d:ab:40:
b2:2d:ea:92:b5:17:3e:f2:3c:0f:4b:7f:f3:69:c4:
7f:0d:6b:3e:e2:2b:e2:7d:19:d6:6a:d8:4c:0e:cc:
f0:f1:f2:14:e1:7b:f4:29:48:f7:48:08:ae:13:1c:
2e:ad:60:8f:0f:5c:a0:1a:5f:e7:f2:6b:19:9a:61:
3c:bd:6b:e6:43:49:ed:7a:d0:a0:48:bc:a9:14:06:
a7:7d:d3:99:46:36:16:fe:02:6f:79:32:c5:b3:90:
2d:f3:68:51:e3:00:b8:4e:da:f3:7a:a0:f7:73:2a:
21:a2:1b:8c:6a:f2:1b:ca:b6:25:6e:40:43:39:75:
36:14:33:9c:c8:0c:63:78:0f:8a:ff:ce:e6:7f:10:
83:c6:8c:96:76:5e:8a:73:4c:ce:ff:4c:16:4a:51:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AD:E3:D0:0E:05:17:9D:C5:0E:78:F5:71:07:80:43:02:87:C1:86
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/sq3j0A4FF53FDnj1cQeAQwKHwYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.156.0/24
185.54.159.0/24
Signature Algorithm: sha256WithRSAEncryption
55:49:10:39:04:e7:63:cf:8c:30:3e:b8:ba:ef:74:36:8c:ca:
9f:7a:61:36:40:0a:6e:dc:84:21:32:f7:f6:4c:a4:fb:4d:7d:
de:5b:f0:98:06:b9:34:32:41:75:2c:18:d9:25:e8:df:f9:3a:
9f:88:f2:df:58:5e:03:6d:0c:41:17:62:27:ed:e3:a9:52:2d:
b6:1c:89:ec:f6:f7:04:c2:3a:ac:6f:8c:5b:5f:18:30:be:b5:
65:54:2e:1a:07:38:b9:68:ba:d6:66:1a:4f:14:30:73:b2:f7:
39:6e:ea:3f:f8:b8:2a:c7:9a:13:9e:23:a6:d7:38:d6:1f:a4:
0f:bf:1c:ed:5f:2c:ac:87:3d:fc:8d:de:36:cd:46:11:6b:b6:
dd:0c:3a:73:18:8d:41:e4:ce:c3:0d:10:d0:11:c1:bb:fa:91:
04:7a:0a:a7:cc:35:86:9c:6a:93:32:67:7a:22:69:93:4d:99:
b1:11:04:33:b6:ef:46:d2:37:b5:aa:a5:7f:8f:b9:ce:fd:c4:
01:77:44:62:40:65:77:0f:c7:f2:1c:ab:a5:e9:77:35:4e:f6:
17:8b:7a:e8:1d:51:a3:7d:e0:37:68:4b:d0:84:b9:c5:5e:6a:
d6:3d:ad:23:98:cb:1d:2d:ed:a8:67:e7:7c:fe:7a:85:bb:02:
66:08:8d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:33 2025 by rpki-client