Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/1-iJXKulxk75axQt0SWXxhU53Dr8.roa
File: 1-iJXKulxk75axQt0SWXxhU53Dr8.roa (raw, json)
Hash identifier: AOdRR2tLhzCT6KWQkYdadkTVDMEnSkAvEIbZwbvnOv4=
Subject key identifier: FA:22:57:2A:E9:71:93:BE:5A:C5:0B:74:49:65:F1:85:4E:77:0E:BF
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 019963D5DBF2078C522509EEDF614E27878D
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/1-iJXKulxk75axQt0SWXxhU53Dr8.roa
Signing time: Fri 19 Sep 2025 21:16:23 +0000
ROA not before: Fri 19 Sep 2025 21:16:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50540
IP address blocks: 37.58.16.0/24 maxlen: 24
37.58.18.0/24 maxlen: 24
37.58.22.0/24 maxlen: 24
95.128.59.0/24 maxlen: 24
185.56.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:d5:db:f2:07:8c:52:25:09:ee:df:61:4e:27:87:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Sep 19 21:16:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa22572ae97193be5ac50b744965f1854e770ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:10:85:1d:36:bb:80:0a:62:57:39:c6:04:
08:53:d8:a7:19:25:f3:a8:26:ff:04:5f:fd:48:79:
b0:3a:a9:41:92:ce:bd:68:b1:55:a8:db:f1:8a:70:
a0:5b:dd:84:b5:a6:6f:e9:91:09:02:79:e7:0b:0a:
0c:84:8a:4c:4c:9b:af:1c:a7:9b:66:8e:de:14:5c:
b0:78:e9:11:15:ae:f1:1e:19:21:66:04:4d:05:0c:
37:b5:01:59:ee:29:f8:aa:5a:35:b1:51:a4:b2:5a:
70:9b:74:7e:be:18:90:24:f7:5c:e8:f3:71:99:a5:
58:32:7f:50:3d:ec:fa:b8:e2:af:2e:a1:a6:a2:68:
0c:90:1b:0c:5b:ab:8f:45:dd:fc:74:45:b0:88:7e:
7e:d7:3f:78:a6:79:a9:93:33:9f:62:a6:70:af:ec:
d2:78:7a:20:79:b6:09:4a:e7:ea:f6:53:49:12:74:
b8:75:43:e9:5f:88:47:28:61:58:75:27:4f:30:95:
36:f3:d5:60:1c:74:ef:ae:01:f6:a5:1b:d2:1d:0b:
9b:a6:de:fe:3b:05:62:67:25:65:8c:49:90:fa:12:
60:83:ac:3a:e3:63:f7:32:c2:c1:4d:c3:b5:49:c5:
e5:75:c2:2d:3a:02:ef:e9:e8:29:c4:69:96:42:b4:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:22:57:2A:E9:71:93:BE:5A:C5:0B:74:49:65:F1:85:4E:77:0E:BF
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/1-iJXKulxk75axQt0SWXxhU53Dr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.58.16.0/24
37.58.18.0/24
37.58.22.0/24
95.128.59.0/24
185.56.236.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:fb:a5:1c:85:d7:1d:25:11:f5:0e:75:78:42:b5:6e:db:d9:
2b:c5:17:67:cf:fc:9a:9f:59:0a:28:01:d8:c4:45:a5:66:2c:
48:28:88:80:54:3f:87:92:29:b0:a1:78:0f:4b:3a:f6:e5:66:
3c:d6:a9:59:c6:af:82:cb:14:df:f2:30:a9:1e:ad:6d:e5:6f:
6e:0b:4a:66:f5:74:4f:6e:12:6d:c3:25:1a:9a:c6:d4:22:d2:
82:8a:00:8f:d2:02:fd:65:43:20:b4:c9:69:90:a3:80:cf:96:
3b:3e:c3:40:c7:04:d6:68:56:83:03:c5:33:8e:e4:42:b0:fb:
4c:26:93:94:59:e5:d7:91:cd:73:97:b8:6f:ee:6d:47:f0:a7:
1d:e7:b6:00:65:64:c1:58:f8:48:f2:4d:d6:b4:e3:a8:f7:94:
80:75:41:39:c2:9c:f5:d4:d4:51:65:3f:ac:24:23:9e:bf:47:
59:69:93:14:06:aa:f6:fe:b9:48:eb:df:cf:b8:fa:e2:de:6b:
23:76:03:23:43:23:8c:76:9f:0d:01:be:7a:f0:ee:8c:91:d4:
c3:e8:d0:e7:34:6c:93:3d:99:fe:e4:bd:c5:10:15:fd:14:84:
bd:6f:f7:dc:47:d0:18:42:d1:6f:73:28:f0:fb:43:24:cd:d4:
d2:50:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:18:14 2025 by rpki-client