Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/P_s-zHSXglw_281jGOhyczBmJzI.roa
File: P_s-zHSXglw_281jGOhyczBmJzI.roa (raw, json)
Hash identifier: wyG34RwDivUB0Qbi0DQatHzUoY8seUZaKV4g8a0quJw=
Subject key identifier: 3F:FB:3E:CC:74:97:82:5C:3F:DB:CD:63:18:E8:72:73:30:66:27:32
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 0198C655B456724876E7D38A58998104388D
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/P_s-zHSXglw_281jGOhyczBmJzI.roa
Signing time: Wed 20 Aug 2025 07:16:02 +0000
ROA not before: Wed 20 Aug 2025 07:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 185.145.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:55:b4:56:72:48:76:e7:d3:8a:58:99:81:04:38:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Aug 20 07:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ffb3ecc7497825c3fdbcd6318e8727330662732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:d8:19:a0:cb:47:1b:d0:78:89:4f:06:29:
bf:e6:d4:ad:bf:35:07:82:e9:5a:5e:a9:14:27:57:
46:da:4f:62:66:f7:79:be:e1:2f:dc:d9:90:69:96:
50:e0:4a:e4:14:d7:62:17:3b:3b:21:9e:1c:b3:3e:
cc:b7:54:66:80:9a:6c:d4:a3:e7:1d:82:f4:a6:c2:
7b:a7:cc:ff:59:35:04:47:5a:2c:28:6f:bf:21:7a:
13:50:5d:bc:ce:41:a9:8a:2d:29:d1:cc:2a:fe:49:
03:70:87:e9:cb:5d:4b:e9:0c:10:ff:cf:27:62:e6:
e3:f4:f0:8e:0d:12:3c:9d:bf:12:85:c5:68:1e:40:
65:6d:36:f1:11:c9:db:c3:ad:db:18:cb:a8:18:12:
1a:a7:ed:b4:b0:c5:1b:37:47:9e:47:40:ce:d1:18:
11:95:70:83:31:d0:7d:27:75:7b:fe:ed:76:82:3b:
d2:eb:69:83:ac:e2:f8:8e:4c:93:d4:81:c7:08:cb:
26:f8:04:02:6f:29:bb:75:11:3d:af:91:ff:44:f8:
bf:06:1a:7e:b2:d5:fb:8c:03:aa:2f:2c:e4:7e:68:
a5:48:08:fe:97:2d:83:d4:1f:b7:65:ce:a3:bd:d1:
f3:b1:4f:d5:e6:89:d2:c6:85:56:05:9c:bb:89:6f:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FB:3E:CC:74:97:82:5C:3F:DB:CD:63:18:E8:72:73:30:66:27:32
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/P_s-zHSXglw_281jGOhyczBmJzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.52.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:ad:71:de:a3:ca:78:ca:a1:c0:11:68:8f:c2:64:02:d0:8d:
b6:4a:7e:89:e0:cf:e5:fc:02:41:b9:98:39:9d:00:b2:33:29:
86:86:64:20:f5:51:51:94:c7:d4:c9:ae:1e:7b:05:aa:7a:c7:
ed:bb:b2:cb:c6:b2:cf:29:2d:29:2b:6b:b0:f6:b6:62:cb:67:
ba:99:c2:82:c9:3a:51:99:24:d0:b0:90:b4:4c:c6:0f:f9:3d:
61:cc:54:cf:0e:20:11:cd:37:58:6c:54:40:a3:e1:7c:aa:57:
77:7f:30:7e:e9:76:ac:d2:b8:5c:7a:a1:2c:d5:a6:f1:1e:5f:
dc:80:6b:07:57:dc:c6:36:d3:69:5b:2e:14:fb:49:ce:13:dc:
a0:b1:ab:91:ba:61:e8:62:bd:a1:bc:c5:ee:9a:3c:c2:c7:8d:
d2:c6:b3:04:b3:0e:c8:f2:6e:f6:dc:18:c3:7d:40:d9:ca:18:
1d:a3:44:eb:95:a3:2e:10:f9:17:6a:6b:69:27:c8:b0:64:35:
55:a0:09:89:e1:f6:ae:29:c6:f0:10:bc:3b:a9:e1:62:90:f6:
7a:ff:06:81:0c:34:ca:e9:b1:fe:e7:0d:2a:04:0d:00:3e:61:
d8:72:a2:b3:71:18:ab:3e:d0:23:dc:dd:93:f7:17:a5:e3:00:
bf:7b:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:43 2025 by rpki-client