
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/SEB5OEPvww_MDPNqy0IOytIoU5Y.roa
File: SEB5OEPvww_MDPNqy0IOytIoU5Y.roa (raw, json)
Hash identifier: Hk1UHlI4MNvzvFdVBIIEujtjKPWtAbdmnPIpzDItuaM=
Subject key identifier: 48:40:79:38:43:EF:C3:0F:CC:0C:F3:6A:CB:42:0E:CA:D2:28:53:96
Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial: 0199532C4A147F2F40CE6926E33F8010B2CD
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/SEB5OEPvww_MDPNqy0IOytIoU5Y.roa
Signing time: Tue 16 Sep 2025 15:37:15 +0000
ROA not before: Tue 16 Sep 2025 15:37:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134167
IP address blocks: 194.35.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:2c:4a:14:7f:2f:40:ce:69:26:e3:3f:80:10:b2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Validity
Not Before: Sep 16 15:37:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4840793843efc30fcc0cf36acb420ecad2285396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:a9:09:16:25:ad:92:e7:9d:24:33:b2:d3:
f8:36:47:72:70:6c:68:df:29:60:39:6c:08:8f:38:
a9:d0:7f:69:b0:80:47:f4:64:41:82:a1:f4:91:f7:
5a:0a:d3:17:00:d8:93:f4:ca:36:69:3f:ee:a2:9c:
a6:03:52:da:e0:fa:86:2e:79:1d:5a:4c:1f:9d:2a:
a3:7d:7c:ac:0a:ae:92:70:9a:cb:c8:5c:9f:f1:c7:
14:2c:e5:3e:17:b4:c0:d2:36:ab:a9:aa:63:e3:ae:
ad:71:83:00:90:f4:61:6a:41:9a:4b:79:cc:7d:e6:
09:74:08:f4:56:28:f3:07:32:21:e6:0f:8a:a4:80:
66:40:ac:8d:2f:5c:e9:fd:3e:0f:4a:ca:47:a7:a6:
d0:13:bb:be:24:37:c5:81:6d:3f:7c:3b:4c:11:ef:
c5:70:74:84:dd:fb:cd:84:fa:1d:05:97:de:50:2d:
cc:2f:77:38:9d:a4:ed:e1:a1:7e:f7:c6:43:cf:26:
c3:d8:67:c2:63:93:17:1f:d4:48:d2:61:2e:dc:bd:
2c:2a:80:0c:3b:3e:3f:6d:4d:8f:b2:94:0f:d3:eb:
a6:63:dd:e5:9b:0b:9c:03:2c:a1:bf:d6:f1:3c:bb:
5b:a6:95:de:34:13:0c:55:20:f7:6d:f5:b6:6a:46:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:40:79:38:43:EF:C3:0F:CC:0C:F3:6A:CB:42:0E:CA:D2:28:53:96
X509v3 Authority Key Identifier:
keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/SEB5OEPvww_MDPNqy0IOytIoU5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.10.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ec:38:f3:b3:b8:c5:e0:c1:31:70:ec:90:86:66:7c:c0:7e:
69:49:e9:f6:1a:01:10:c9:80:9e:8d:a0:69:45:b8:6b:ca:39:
04:50:b3:17:6d:f4:32:95:82:d1:39:a4:fb:01:91:fd:4a:1e:
53:35:d3:0e:54:1b:fa:ad:4e:0b:9d:70:76:92:8d:92:c6:df:
c9:48:60:b9:53:62:a2:3a:88:a7:f3:ab:f1:8a:df:6f:37:ab:
c0:9c:f3:44:53:be:c1:2c:ca:a7:a2:a4:84:39:31:a1:69:17:
c6:8e:cf:d7:61:96:37:46:1e:7c:ff:14:3f:77:d4:36:be:05:
50:c8:8c:24:78:21:c3:cd:37:c7:d9:46:6f:4e:21:36:ef:d3:
c4:76:80:5e:d6:20:66:2a:a8:f0:fa:9d:d7:a9:bf:52:88:24:
07:93:b4:30:ea:60:f6:35:03:69:c2:fb:26:8e:d3:b4:77:2f:
29:40:0c:7c:a4:17:68:ba:54:85:92:03:42:51:36:16:8f:66:
f3:50:00:b9:28:fe:4b:b3:12:f4:4a:76:ee:35:58:4b:87:e9:
6b:85:b3:6a:06:e4:4b:f4:fb:5e:65:c2:92:20:d7:40:c1:1e:
9a:ab:cc:cc:05:73:f6:b2:fe:30:ed:6e:c0:b4:73:1f:04:45:
8d:e3:16:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:26:21 2025 by rpki-client