Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/x-pItth6gav6Siar3U_0M-PVI5Y.roa
File: x-pItth6gav6Siar3U_0M-PVI5Y.roa (raw, json)
Hash identifier: R5lNwNwe9l1CpntwhyqXLT+HpGFjkNsVveuvwuLEcSM=
Subject key identifier: C7:EA:48:B6:D8:7A:81:AB:FA:4A:26:AB:DD:4F:F4:33:E3:D5:23:96
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0199A3E9F50BFF95321555CFBC6B071EB30D
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/x-pItth6gav6Siar3U_0M-PVI5Y.roa
Signing time: Thu 02 Oct 2025 07:54:02 +0000
ROA not before: Thu 02 Oct 2025 07:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206385
IP address blocks: 37.18.41.0/24 maxlen: 24
37.230.136.0/24 maxlen: 24
46.243.173.0/24 maxlen: 24
141.101.175.0/24 maxlen: 24
141.101.199.0/24 maxlen: 24
178.170.253.0/24 maxlen: 24
185.2.33.0/24 maxlen: 24
188.72.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:e9:f5:0b:ff:95:32:15:55:cf:bc:6b:07:1e:b3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Oct 2 07:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ea48b6d87a81abfa4a26abdd4ff433e3d52396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:83:93:cc:98:fb:71:d3:1b:ce:bb:59:8c:
26:0b:59:51:99:c0:19:a7:72:df:e3:15:cc:f0:95:
2b:c7:eb:27:36:6a:d3:0a:3b:67:b1:88:29:54:d4:
76:48:11:7c:3a:ae:cb:78:04:3e:e9:7d:35:86:ea:
1b:4b:5a:05:fc:bb:e1:1f:0b:a9:6a:bc:47:43:5e:
10:63:f1:03:dc:38:d3:b3:ef:23:b6:9a:7c:84:5e:
cf:6e:fb:62:7d:6b:f1:ba:c8:06:93:44:5e:ae:26:
a7:b1:0e:ed:0e:47:3e:f1:75:9c:2f:61:8c:5e:45:
3e:36:af:5f:33:5c:e1:73:75:44:a5:de:2a:ab:02:
4c:c4:8a:8d:0e:77:15:f1:48:8b:77:ce:5d:52:16:
2f:c3:1b:d2:2d:31:49:d4:ba:d2:ec:2a:11:49:4d:
24:b0:1f:da:b4:dd:62:64:bc:78:e4:84:29:01:11:
e0:ad:70:ca:42:c8:92:47:3c:6a:ec:a4:e1:63:87:
df:21:57:49:80:de:82:bc:48:24:8e:9a:2b:0e:3d:
25:07:9c:dc:d2:60:f8:83:6d:66:31:ca:29:3f:1a:
45:df:d5:38:29:fd:49:4f:38:d8:87:51:91:8e:b6:
77:06:96:6c:61:11:f5:d7:f4:7e:46:86:25:60:28:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:48:B6:D8:7A:81:AB:FA:4A:26:AB:DD:4F:F4:33:E3:D5:23:96
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/x-pItth6gav6Siar3U_0M-PVI5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.41.0/24
37.230.136.0/24
46.243.173.0/24
141.101.175.0/24
141.101.199.0/24
178.170.253.0/24
185.2.33.0/24
188.72.72.0/24
Signature Algorithm: sha256WithRSAEncryption
91:32:d9:dc:49:fb:50:20:4c:4b:ca:c7:ae:08:b7:61:88:ba:
43:00:e1:38:52:18:55:63:30:75:d3:8a:a1:d4:88:32:2e:ac:
04:cb:aa:06:c1:65:9a:80:b4:32:37:26:27:c4:17:37:ee:f8:
88:a0:0a:06:9c:37:7f:54:47:22:20:92:a3:6e:87:26:ec:9d:
b8:d4:72:3b:e2:30:06:6a:4b:05:d0:31:e7:df:99:2e:a5:24:
3b:10:0c:a3:11:bb:5e:06:34:93:de:8e:35:2c:3c:4e:a7:a4:
34:0c:4a:10:4d:1e:3b:69:ce:30:de:db:4c:22:4d:b5:e7:9e:
78:53:c1:fa:79:f4:84:9a:91:20:60:06:80:67:89:88:5e:39:
1e:de:06:e2:25:74:ca:fa:46:a3:b4:2b:20:e3:b1:53:e1:25:
4b:d0:f6:3e:62:38:f0:06:e2:8a:6a:3b:6c:2b:f2:2f:c8:51:
88:7a:d9:00:57:4c:ba:47:07:3b:4a:0c:e6:e2:5c:88:3d:d3:
ef:1c:d2:c9:c9:6c:a4:d7:3e:f7:08:47:86:b5:8c:6c:e5:2f:
68:03:82:9a:cd:7c:12:95:e2:a1:8c:38:b7:58:76:15:ad:f7:
86:e5:ef:6f:58:51:50:2b:48:bb:4c:41:49:3f:13:05:ea:4b:
10:49:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:00 2025 by rpki-client