Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/V0hiBKAD_2Rx16fFCpXLWp2vS2o.roa
File: V0hiBKAD_2Rx16fFCpXLWp2vS2o.roa (raw, json)
Hash identifier: 257o80B1eNua34Ds30lc/JlpuCcz9SXDjJhL/EtWRiA=
Subject key identifier: 57:48:62:04:A0:03:FF:64:71:D7:A7:C5:0A:95:CB:5A:9D:AF:4B:6A
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 0199CE870131AFDD0124F4124DEF09EEF95B
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/V0hiBKAD_2Rx16fFCpXLWp2vS2o.roa
Signing time: Fri 10 Oct 2025 14:29:38 +0000
ROA not before: Fri 10 Oct 2025 14:29:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 37.153.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:87:01:31:af:dd:01:24:f4:12:4d:ef:09:ee:f9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Oct 10 14:29:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57486204a003ff6471d7a7c50a95cb5a9daf4b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:c2:a2:1c:fe:15:fd:4c:bf:17:2e:1f:e9:
65:7e:37:2b:8b:20:44:5c:a3:ae:d7:10:27:26:11:
b8:ba:da:ef:76:26:2f:9e:69:81:f0:30:78:19:5d:
b0:4b:1d:4b:69:6e:75:aa:8a:01:c8:0e:34:a0:c3:
cf:a8:10:dd:1a:f7:74:7d:21:3e:82:44:72:e3:49:
14:0f:13:ab:ad:5d:12:15:e9:be:f6:95:4a:d6:c9:
c3:83:9e:65:1b:08:c3:03:10:22:f3:89:13:81:ff:
65:a3:ed:83:31:d1:1c:d3:d9:cf:3f:5e:87:db:ae:
fe:4c:ad:12:31:43:50:12:03:cd:e6:4f:85:f3:0b:
41:f4:ec:35:dc:8b:c3:72:3e:59:56:26:12:fa:14:
b1:3e:e8:14:7d:75:b4:88:59:63:79:dd:59:25:46:
50:46:81:6d:5f:6b:1a:97:18:a4:5e:8c:62:47:80:
8c:3c:46:30:66:f8:33:1b:77:7f:71:83:fb:ed:74:
9d:ba:56:19:ea:7a:0d:93:52:a9:19:30:9c:52:14:
0c:ed:77:0c:94:5f:1a:35:08:3a:93:94:1a:1a:45:
a1:17:59:ea:dc:35:a2:c5:a2:7e:3e:cc:98:b8:10:
5d:79:7d:0a:d3:6f:25:7a:2a:88:00:d2:a4:f8:35:
41:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:48:62:04:A0:03:FF:64:71:D7:A7:C5:0A:95:CB:5A:9D:AF:4B:6A
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/V0hiBKAD_2Rx16fFCpXLWp2vS2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.155.0/24
Signature Algorithm: sha256WithRSAEncryption
16:90:0c:4c:8e:8a:f5:77:c5:fe:6b:94:cc:70:ae:a6:0d:e6:
e3:9d:98:d8:95:fc:43:4b:2c:a3:af:f9:26:5f:ec:b5:a1:85:
db:5a:0d:4c:bb:34:b8:65:1a:da:9e:24:88:2f:96:11:e2:90:
5e:ad:11:a1:c0:4e:3e:c7:c3:aa:27:ad:a0:04:d0:1b:0a:ca:
d3:9e:f9:bb:6f:58:9a:4b:51:53:78:a2:28:05:2c:99:ed:cc:
e5:5f:98:5c:dd:85:6b:b2:ae:d8:b0:0a:2a:a8:46:03:6a:74:
05:64:20:e6:4b:04:42:0b:90:d8:6d:4a:b7:dd:26:ee:24:07:
6e:19:a5:6f:b0:56:01:67:ad:a7:26:92:94:3e:06:81:38:25:
71:5b:cd:89:a0:95:d5:79:7b:3f:18:9e:23:e0:5d:7a:a4:c8:
49:f0:0b:af:2a:b1:17:9c:2e:17:a1:96:9e:aa:74:77:9c:d4:
ee:0c:2a:72:f0:2a:86:67:01:86:6f:4b:b4:54:b7:bc:90:ac:
ef:dc:bb:1a:f0:a1:b9:34:b1:2e:13:1b:f9:3d:1b:81:0b:55:
81:90:78:0b:1e:57:af:67:b5:7f:07:2f:8a:b8:ce:f4:00:28:
af:0c:db:18:b8:7b:6e:2c:b2:7c:7f:42:24:3f:c6:36:07:78:
e2:43:52:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:47 2025 by rpki-client