Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/S-uH2YCKKsWBJelfJrxohaQfZ4s.roa
File: S-uH2YCKKsWBJelfJrxohaQfZ4s.roa (raw, json)
Hash identifier: 7xEZvOLMz8mmv0R7hpmF8/cEimpEVrW14AuQipAjIzk=
Subject key identifier: 4B:EB:87:D9:80:8A:2A:C5:81:25:E9:5F:26:BC:68:85:A4:1F:67:8B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 01993EFD0E637305A661063EFD09D8D206E7
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/S-uH2YCKKsWBJelfJrxohaQfZ4s.roa
Signing time: Fri 12 Sep 2025 17:33:15 +0000
ROA not before: Fri 12 Sep 2025 17:33:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51319
IP address blocks: 178.251.144.0/21 maxlen: 21
185.164.8.0/22 maxlen: 22
2a02:2340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:fd:0e:63:73:05:a6:61:06:3e:fd:09:d8:d2:06:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Sep 12 17:33:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4beb87d9808a2ac58125e95f26bc6885a41f678b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:ba:42:4c:c6:ae:13:05:13:a2:a3:3c:7c:
9f:87:5d:12:da:b3:e2:e3:08:ed:d0:06:6e:ac:89:
d2:75:38:15:55:94:11:a7:f1:66:3d:9e:f1:3f:17:
f4:1b:dd:4f:a3:3f:7a:95:35:f1:f3:1b:e9:6f:b4:
c2:02:2c:d9:30:5e:47:a3:76:12:99:d7:3d:03:b5:
7a:e9:6d:15:85:c5:89:09:70:a4:3d:86:ba:cf:22:
ab:1e:d9:2e:e7:b7:e4:e0:d7:e0:b0:7a:55:5c:be:
32:29:7a:81:de:49:90:c7:d7:3f:df:07:4f:4c:cb:
ed:f6:40:74:58:e5:e7:3f:d7:0c:7e:70:bb:f6:33:
c9:4c:eb:d5:a6:7a:4b:07:ff:f6:aa:f7:20:12:de:
57:9b:a9:05:ff:4a:75:7a:1e:b9:b0:b5:7a:b4:5a:
fc:65:a1:37:a8:45:53:c3:d5:db:b7:65:50:68:f2:
ab:d4:ad:b2:d1:60:a4:8a:95:6c:61:9b:b5:8f:7d:
b7:3d:92:40:db:35:f8:c7:36:07:54:e3:80:23:38:
0b:e4:63:37:d6:54:97:d5:f5:58:14:5f:51:51:f4:
1e:ae:44:ed:24:0a:9c:5a:6d:3c:6c:de:00:b8:2f:
c3:da:89:4e:7e:cf:76:a3:c7:22:32:f4:65:af:fe:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EB:87:D9:80:8A:2A:C5:81:25:E9:5F:26:BC:68:85:A4:1F:67:8B
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/S-uH2YCKKsWBJelfJrxohaQfZ4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.144.0/21
185.164.8.0/22
IPv6:
2a02:2340::/29
Signature Algorithm: sha256WithRSAEncryption
bc:e3:1c:fe:b1:af:4f:55:c1:1a:f0:aa:5e:8c:e9:b2:f8:ec:
9d:61:2a:c4:f1:c7:8a:c3:59:e4:a1:4e:0c:5b:18:7a:04:e3:
a6:25:94:7a:87:86:95:03:bd:cd:aa:b0:f6:39:0e:27:cc:50:
bf:4f:cc:b6:9f:45:80:89:18:56:0d:86:b1:96:db:b0:d6:80:
83:31:ef:1f:fd:33:de:1d:23:50:67:54:c4:7c:9c:c3:35:42:
4d:66:f7:4b:1f:f0:a7:c8:71:de:83:77:58:f6:de:6a:d6:ad:
04:73:2c:e1:f9:b3:41:9d:8d:a6:cb:88:95:de:e4:0e:af:fd:
ab:06:49:0d:f7:d4:6e:e9:54:44:05:a7:72:f8:e5:ff:9e:22:
f5:20:67:47:1f:cf:11:d7:04:9b:0d:8b:42:a8:a3:3f:f3:33:
f8:8e:49:f6:4a:4a:5c:23:c9:55:4a:46:1b:f4:a2:ae:ca:d6:
5d:d5:86:83:ae:c1:5b:34:b6:f8:26:1f:20:db:67:85:97:b0:
de:44:49:96:47:61:ae:cc:03:17:64:29:0c:cf:70:73:eb:b4:
67:4b:e4:6f:3e:3d:47:1c:15:cf:0e:4b:22:31:88:ff:a0:de:
86:b7:2b:ae:ca:24:07:28:e1:3e:9e:e6:5b:57:bd:a7:4b:d0:
83:88:79:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:04 2025 by rpki-client