Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/aBxSYhVn_anxC7-03zZfXGAPrRA.roa
File: aBxSYhVn_anxC7-03zZfXGAPrRA.roa (raw, json)
Hash identifier: 4z8vPSTGN/KrBGvUG7yKZHmMHGsa+QLaisXrVqvvKq8=
Subject key identifier: 68:1C:52:62:15:67:FD:A9:F1:0B:BF:B4:DF:36:5F:5C:60:0F:AD:10
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 01997B4CA1646B0DD69CD006E8AF7FF85194
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/aBxSYhVn_anxC7-03zZfXGAPrRA.roa
Signing time: Wed 24 Sep 2025 10:37:23 +0000
ROA not before: Wed 24 Sep 2025 10:37:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57811
IP address blocks: 185.73.210.0/24 maxlen: 24
185.73.211.0/24 maxlen: 24
188.64.80.0/23 maxlen: 23
188.64.82.0/24 maxlen: 24
188.64.83.0/24 maxlen: 24
188.64.84.0/24 maxlen: 24
188.64.85.0/24 maxlen: 24
188.64.86.0/24 maxlen: 24
188.64.87.0/24 maxlen: 24
2a00:8dc0::/32 maxlen: 48
2a00:8dc0::/40 maxlen: 40
2a00:8dc0:1000::/40 maxlen: 40
2a00:8dc0:1100::/40 maxlen: 40
2a00:8dc0:1200::/40 maxlen: 40
2a00:8dc0:1300::/40 maxlen: 40
2a00:8dc0:1400::/40 maxlen: 40
2a00:8dc0:1600::/40 maxlen: 40
2a00:8dc0:1700::/40 maxlen: 40
2a00:8dc0:1a00::/40 maxlen: 40
2a00:8dc0:1b00::/40 maxlen: 40
2a00:8dc0:aa00::/48 maxlen: 48
2a00:8dc0:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:4c:a1:64:6b:0d:d6:9c:d0:06:e8:af:7f:f8:51:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Sep 24 10:37:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681c52621567fda9f10bbfb4df365f5c600fad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:8c:a9:aa:1d:4c:7a:e5:43:98:ba:14:6e:
61:ab:a1:66:b7:2e:de:63:7c:41:0a:22:de:ff:2a:
7b:f7:80:ac:d5:33:5e:d6:2f:3e:3a:d8:ae:79:77:
57:1b:ce:a8:05:42:a7:85:f5:52:3a:f8:ee:1c:db:
22:dd:47:a3:c4:2e:51:26:9f:71:89:78:47:30:94:
08:0b:71:21:4b:af:cb:db:b7:32:69:99:6e:4d:64:
08:50:af:5a:a3:29:d9:56:c7:86:76:f8:3c:33:ba:
a6:25:10:59:d5:83:4c:34:f7:40:62:18:c8:f9:68:
20:1f:b5:e2:c5:9f:88:2b:63:9d:2f:98:ec:68:de:
c4:59:c6:a1:f6:5e:62:b4:c4:7a:86:ee:ab:80:30:
fc:2c:f8:63:73:97:1c:33:86:22:6e:af:90:9e:7a:
c7:40:ff:dd:dd:93:9b:d9:ef:97:87:48:aa:e0:09:
82:08:56:81:f9:2a:79:7e:48:ce:62:c1:24:ce:ee:
30:5e:d5:41:76:4b:a6:47:40:63:27:17:fc:51:c2:
58:59:3f:74:c3:92:03:12:6f:b3:9f:85:23:b1:0c:
bc:41:b4:9a:60:6a:ad:86:7a:21:8f:c6:f3:f5:90:
f2:48:1b:e7:f2:59:5b:8a:d0:74:68:27:e6:4c:64:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1C:52:62:15:67:FD:A9:F1:0B:BF:B4:DF:36:5F:5C:60:0F:AD:10
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/aBxSYhVn_anxC7-03zZfXGAPrRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.210.0/23
188.64.80.0/21
IPv6:
2a00:8dc0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:50:f9:37:7e:37:c2:a4:5d:0e:61:fe:f6:f9:ca:4c:39:92:
df:bc:86:64:8d:2c:53:f7:91:82:7d:2d:7c:3b:37:3a:9c:27:
5f:45:34:b3:f9:c2:a6:15:80:58:2f:be:78:bf:21:1b:57:0a:
b4:fa:e1:24:e2:25:02:2a:32:ba:81:1f:17:e4:d9:ef:00:4c:
6a:4c:ab:fc:b2:93:e7:8b:11:9a:b2:a6:f9:93:f9:0d:e6:18:
3c:23:af:bf:fd:85:ff:19:a0:b8:12:e1:5d:ef:3c:76:6a:24:
9e:bb:07:22:14:04:ec:e1:b1:68:30:15:30:eb:83:fd:a4:a3:
8e:fe:f1:40:63:33:3d:1d:75:92:2e:93:d9:43:a3:df:3d:1b:
2e:02:20:df:b5:e7:02:ac:2c:8a:d4:93:9c:fe:48:c6:1f:4c:
a1:3f:1e:d0:93:be:14:28:69:ee:4a:35:0d:bc:73:c9:81:e8:
cd:02:05:13:c9:38:8c:e9:e4:02:bb:b1:4a:2d:68:2c:72:34:
61:22:3d:13:64:c0:be:a2:9e:f3:51:23:ce:cf:d0:9a:aa:da:
02:47:76:b9:00:43:91:1d:bf:e4:66:47:1e:28:87:9a:37:b4:
6e:c5:7d:15:77:3a:3c:d2:0a:54:87:b9:45:31:64:c8:7b:5a:
df:92:15:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:53 2025 by rpki-client