Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/SkLbl8YMptduMoSvRhFLVbTWkfg.roa
File: SkLbl8YMptduMoSvRhFLVbTWkfg.roa (raw, json)
Hash identifier: rZ8+bmgPCyg6PTvkE0HDGH20U6oeO7+aQZ45eviGwsI=
Subject key identifier: 4A:42:DB:97:C6:0C:A6:D7:6E:32:84:AF:46:11:4B:55:B4:D6:91:F8
Certificate issuer: /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Certificate serial: 01999B0E3302D7199F3858E32E706BB1F52E
Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/SkLbl8YMptduMoSvRhFLVbTWkfg.roa
Signing time: Tue 30 Sep 2025 14:37:03 +0000
ROA not before: Tue 30 Sep 2025 14:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 138.21.37.0/24 maxlen: 24
138.21.47.0/24 maxlen: 24
193.194.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:0e:33:02:d7:19:9f:38:58:e3:2e:70:6b:b1:f5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Validity
Not Before: Sep 30 14:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a42db97c60ca6d76e3284af46114b55b4d691f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:31:77:f5:cc:e5:bc:70:43:d0:f6:29:cc:
86:98:99:f3:7a:02:11:57:ba:06:32:9c:df:97:4f:
21:47:5f:d1:10:e7:5c:e8:43:1b:81:4d:c8:1d:20:
9a:62:f8:66:9c:b8:d3:55:20:96:aa:8d:99:58:78:
dc:0e:f2:fc:f4:c1:77:60:45:a6:64:b1:35:ff:42:
76:d5:98:99:da:6a:28:ce:10:a3:cf:2d:31:66:54:
84:67:ed:f8:13:1b:36:f6:98:fe:ae:e0:2b:32:3c:
ca:22:bc:4a:07:ed:12:66:37:72:48:c0:63:7d:91:
c1:0b:d2:cd:69:88:75:a6:a9:59:d8:bd:d2:83:56:
84:b0:ad:37:3b:89:21:45:62:d9:92:50:10:79:fc:
f7:5a:ed:44:a1:70:2a:01:d9:c1:36:1c:05:6c:63:
ed:83:7b:af:77:54:63:db:a3:cc:a0:83:8d:56:8c:
fb:77:6e:33:f2:57:a3:00:b8:26:7c:8b:6c:e2:ff:
38:44:3d:0d:71:61:34:39:0f:73:01:51:04:1e:e8:
59:22:81:5f:04:28:55:62:78:15:ec:3f:06:06:e5:
df:4f:f9:c9:98:8b:26:58:32:c5:86:7d:d0:3e:06:
43:e0:55:52:39:b4:1a:c9:93:d0:db:75:b5:10:fd:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:DB:97:C6:0C:A6:D7:6E:32:84:AF:46:11:4B:55:B4:D6:91:F8
X509v3 Authority Key Identifier:
keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/SkLbl8YMptduMoSvRhFLVbTWkfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.21.37.0/24
138.21.47.0/24
193.194.134.0/24
Signature Algorithm: sha256WithRSAEncryption
63:65:d8:9d:d5:c9:40:eb:82:61:2a:5f:11:36:79:03:66:98:
42:45:29:9f:58:32:74:ee:00:62:f9:a7:3e:08:6b:80:60:53:
a0:4b:77:cc:00:34:d7:09:de:df:3f:a0:0a:03:1e:b5:43:5e:
ae:b2:50:b7:a7:fe:be:91:69:97:f9:8c:50:af:87:45:23:ef:
f9:77:38:19:ae:da:34:f4:68:ad:7f:ee:24:bf:01:20:3b:31:
e4:dd:ec:b1:10:66:df:0a:15:78:5e:06:22:a5:e5:4f:a5:55:
55:11:b7:ce:47:8e:a0:b7:fa:2a:7d:05:29:72:57:e9:97:20:
d3:a7:bc:25:eb:7d:43:ac:16:af:34:af:33:73:18:9b:62:cd:
c2:fe:d1:5e:07:7e:60:c7:9d:fe:3b:00:fe:03:48:4b:4c:ae:
e1:ab:a8:cb:d2:cf:8b:2e:0e:0a:7d:f8:03:d4:c6:db:22:55:
7e:13:fd:fd:80:81:26:19:06:e5:45:b5:0d:d4:7d:68:53:e9:
c1:a8:3a:6d:02:8a:bb:69:2b:74:d8:03:a4:ba:89:bf:eb:03:
54:78:d4:7b:1c:dd:41:f8:23:e4:47:67:65:e8:07:d0:80:d0:
e7:13:1f:f1:ee:32:f0:60:1b:b7:9d:35:6c:e1:75:76:8d:e7:
d7:7c:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:12 2025 by rpki-client