Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/SyLhnxhgc8vZc79X1cGjlk1Zi_M.roa
File: SyLhnxhgc8vZc79X1cGjlk1Zi_M.roa (raw, json)
Hash identifier: gX8l58xrXAT4li7r86mali9lBzeeH/ZmL4mOVXRHAGY=
Subject key identifier: 4B:22:E1:9F:18:60:73:CB:D9:73:BF:57:D5:C1:A3:96:4D:59:8B:F3
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 0198C909DF4551D1C7CBD37720A661CA54A6
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/SyLhnxhgc8vZc79X1cGjlk1Zi_M.roa
Signing time: Wed 20 Aug 2025 19:52:04 +0000
ROA not before: Wed 20 Aug 2025 19:52:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20115
IP address blocks: 157.5.48.0/21 maxlen: 21
157.5.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:09:df:45:51:d1:c7:cb:d3:77:20:a6:61:ca:54:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Aug 20 19:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b22e19f186073cbd973bf57d5c1a3964d598bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7f:5f:65:2c:d6:b5:ab:f6:48:a0:5e:f7:10:
06:e4:b6:26:1e:a0:f2:33:0e:f9:66:a5:0d:37:48:
39:b8:51:e9:e7:58:60:6c:a3:a4:43:8c:41:14:7c:
3d:5a:7e:b0:93:f3:4d:6d:54:d6:1e:4f:43:a3:79:
24:bc:b9:d7:ee:08:10:82:d0:b9:8b:cb:8d:66:50:
65:78:58:66:73:88:66:15:3a:90:f8:91:c4:53:65:
90:74:3f:2a:80:8d:0e:c3:f7:b3:97:d5:71:f2:cb:
d0:19:f8:ed:9e:14:2f:c8:22:a8:55:5b:ff:7e:78:
6c:2c:a8:93:f2:ef:11:d7:bc:07:06:80:08:9c:c0:
dc:6c:14:f2:ca:f3:e1:aa:d2:b4:ba:b3:fd:72:9e:
18:bb:47:2b:8a:d1:61:64:76:50:b8:3f:81:41:37:
26:60:6b:6f:57:77:8d:c9:36:2e:4e:48:25:1a:5d:
03:c9:d2:07:2e:b0:37:0e:18:eb:ca:44:d1:94:33:
e8:d7:1e:df:e8:c3:a2:d3:09:70:f6:ba:df:7f:25:
1a:ac:47:cf:22:ac:e9:58:79:b0:07:fe:82:c6:cd:
30:7c:6d:76:a4:a3:4e:cf:dd:8a:6c:92:ed:0a:19:
4b:1b:7f:a1:27:7b:f3:69:d8:85:98:4c:cc:53:92:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:22:E1:9F:18:60:73:CB:D9:73:BF:57:D5:C1:A3:96:4D:59:8B:F3
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/SyLhnxhgc8vZc79X1cGjlk1Zi_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.5.48.0/20
Signature Algorithm: sha256WithRSAEncryption
90:69:69:b2:9e:e0:ec:54:8b:87:38:dd:f2:f5:59:b0:4d:57:
e3:d0:b2:ad:e3:fb:65:a7:96:9f:08:ef:89:41:1c:57:e2:9c:
58:ac:62:f0:3f:51:af:ff:1e:2a:bb:49:91:c6:2d:a9:3b:86:
42:12:d2:4f:ba:7b:f7:0f:1a:56:a3:99:a5:a4:b7:1d:bf:10:
8e:84:f9:09:38:66:3f:e6:92:e0:b4:82:0b:c6:1a:69:bb:f8:
c1:db:cc:ef:a3:41:7a:86:03:29:9d:f7:76:23:52:1c:0b:14:
f7:68:61:26:07:81:dc:bb:24:b4:01:c7:ba:23:1c:99:e8:ef:
6d:6e:80:fe:11:eb:69:72:0d:15:54:50:fb:84:81:e5:47:70:
81:30:ff:e6:8f:8a:5c:af:4b:3a:d6:2f:1b:b4:f6:bd:5f:b4:
fc:74:2e:fc:3b:a3:6b:79:6b:1b:c0:02:89:54:3f:47:de:73:
6b:d5:0d:e1:cb:87:54:3d:3b:f3:20:8e:ed:32:2b:67:9c:39:
a0:e5:64:16:09:3c:c4:f4:73:22:2a:91:9e:3e:f2:41:39:d0:
bd:b6:49:e0:09:6c:64:4c:cc:63:99:fa:72:62:2c:25:21:5e:
cd:76:a4:58:1c:4c:6b:27:7e:36:80:6c:b0:bd:93:08:7b:ed:
a3:e9:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:12 2025 by rpki-client