Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/S5nBS_Wv9TcvwJjisC52Dydzz1I.roa
File: S5nBS_Wv9TcvwJjisC52Dydzz1I.roa (raw, json)
Hash identifier: 7QqWqkhVmADmdh9/MVjrKD0YsIPlDm2w/Jsh9OhtMQU=
Subject key identifier: 4B:99:C1:4B:F5:AF:F5:37:2F:C0:98:E2:B0:2E:76:0F:27:73:CF:52
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 01995298E419D05634FD0874C398CBAF572E
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/S5nBS_Wv9TcvwJjisC52Dydzz1I.roa
Signing time: Tue 16 Sep 2025 12:56:15 +0000
ROA not before: Tue 16 Sep 2025 12:56:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49584
IP address blocks: 185.2.60.0/22 maxlen: 24
185.179.112.0/24 maxlen: 24
185.179.113.0/24 maxlen: 24
185.179.114.0/24 maxlen: 24
185.179.115.0/24 maxlen: 24
2a0e:1c40::/29 maxlen: 29
2a0e:1c40:1::/48 maxlen: 48
2a0e:1c40:2000::/48 maxlen: 48
2a0e:1c40:4000::/48 maxlen: 48
2a0e:1c47:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:98:e4:19:d0:56:34:fd:08:74:c3:98:cb:af:57:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Sep 16 12:56:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b99c14bf5aff5372fc098e2b02e760f2773cf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fa:41:d5:ec:20:63:da:74:c7:55:87:32:32:
17:88:79:a5:d4:f2:fd:0c:1c:b1:d9:bc:13:21:63:
ff:6c:9f:b2:d6:63:77:bd:6b:85:e8:99:75:bf:56:
e8:4d:13:61:f2:ae:00:5d:d7:c7:93:02:4b:fe:13:
76:0c:00:1d:fe:66:55:c0:ee:bc:5c:9f:60:f0:9e:
0a:13:cc:de:9f:84:e7:ca:9d:ca:0e:0e:c0:e7:fa:
b8:f4:31:93:31:5c:f0:26:f6:74:d0:60:76:68:54:
39:46:4f:aa:3a:27:8d:2c:de:fb:05:03:20:76:7a:
e6:a9:0e:f3:f6:33:71:6b:f7:e2:6d:e6:5c:79:d7:
61:f7:76:56:28:59:13:e2:40:65:96:ee:bc:b6:c8:
1c:72:df:48:25:bb:83:f1:90:0e:6d:09:21:9a:ba:
2c:2f:d7:7b:b7:97:d9:24:3c:80:3e:c9:2e:f2:13:
a1:5f:9b:d5:c4:18:ab:99:79:09:3f:da:41:a7:3d:
db:e3:21:06:c2:2a:ac:be:6a:29:81:64:92:d5:16:
e1:6a:26:a1:e6:c5:90:1e:26:15:39:9b:f6:f2:13:
c9:2a:e0:f0:78:b1:68:a8:72:cc:aa:01:7f:da:04:
31:e6:3d:a7:ed:60:cd:85:4d:86:2a:9b:e1:72:9c:
5f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:99:C1:4B:F5:AF:F5:37:2F:C0:98:E2:B0:2E:76:0F:27:73:CF:52
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/S5nBS_Wv9TcvwJjisC52Dydzz1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.60.0/22
185.179.112.0/22
IPv6:
2a0e:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
21:13:a2:66:d6:43:d1:c0:4d:38:13:43:1a:de:17:8e:a8:d6:
9d:f1:75:7c:f6:c5:a1:fb:1c:b9:f6:3b:9d:7a:21:71:c9:86:
88:5b:90:0b:4a:a4:89:b0:c1:d4:a1:b7:82:60:d2:d6:45:a4:
75:7a:ea:1f:0b:53:12:e3:b4:1f:8a:ea:ef:35:14:06:23:bf:
bb:da:7a:02:fa:32:08:ed:30:9b:f1:99:76:37:2f:49:da:29:
ed:13:6e:53:86:86:f0:ac:3b:ea:96:4b:7f:b1:93:fd:fc:1f:
17:8f:89:39:3d:31:30:bb:e9:66:54:63:4f:07:07:be:1d:30:
56:fd:30:d1:7c:9b:79:77:59:b6:d1:fe:33:5d:fa:b8:0e:81:
cb:6d:6d:e7:10:a6:d8:13:45:1a:d2:03:ac:e9:e4:65:ce:b2:
d5:00:68:ef:11:17:48:48:46:87:28:1b:56:1e:f3:2f:b2:fa:
2b:1a:cb:a3:43:61:af:bd:ad:11:51:7b:4b:c9:ad:1a:40:88:
c3:a7:15:3f:33:a9:c4:ab:30:e3:1e:ca:d4:3e:f6:fb:88:38:
cf:95:ed:3d:ee:a0:3e:7e:69:1f:b8:6f:7a:77:e9:a7:06:f2:
f6:bd:86:0a:a2:7e:72:33:86:6d:0e:62:44:70:7f:bb:f4:23:
bf:4c:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:39 2025 by rpki-client