Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SCc6BXwbUpgEnsLbYUY2G76ZTxE.roa
File: SCc6BXwbUpgEnsLbYUY2G76ZTxE.roa (raw, json)
Hash identifier: 50p7vP284rWsebn/PrDglAEttwb+zII8zS7vjRbfdDY=
Subject key identifier: 48:27:3A:05:7C:1B:52:98:04:9E:C2:DB:61:46:36:1B:BE:99:4F:11
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01999C16C82489B88A8BF97A4ABBD2E12054
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SCc6BXwbUpgEnsLbYUY2G76ZTxE.roa
Signing time: Tue 30 Sep 2025 19:26:02 +0000
ROA not before: Tue 30 Sep 2025 19:26:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 150.241.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9c:16:c8:24:89:b8:8a:8b:f9:7a:4a:bb:d2:e1:20:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 30 19:26:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48273a057c1b5298049ec2db6146361bbe994f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:9d:59:1a:0d:7d:2a:44:69:fa:fa:89:9c:
75:b8:ab:cf:9f:a6:fe:b8:2d:b0:8c:b7:ae:5a:51:
f2:75:57:3e:b5:53:05:8d:83:17:fa:1f:be:16:6a:
d1:95:38:3d:a3:1a:1e:39:44:9e:65:80:71:40:b5:
db:59:aa:68:ff:2d:cd:b3:d8:17:3c:20:82:1c:cd:
ad:21:e1:b7:58:a3:9d:97:5f:ed:0e:47:50:73:17:
ad:0f:82:a4:e4:a3:8f:f8:53:f0:5b:c9:55:bf:a9:
9c:bd:09:7d:35:59:28:97:d6:0f:46:f4:72:80:fb:
98:5d:c6:d3:9f:38:32:96:3e:13:84:43:3d:14:4f:
fb:a9:e4:92:78:6a:50:70:e6:b6:3c:4f:76:8f:63:
4a:7d:53:df:eb:e3:1a:09:a0:fb:d9:89:b7:11:a1:
28:02:35:80:7c:71:69:8b:c0:a3:f1:b6:bd:38:c7:
31:21:99:ef:76:de:59:ea:f3:9e:6c:b5:2d:7d:57:
65:12:62:3f:45:83:c4:b0:56:b2:27:f7:02:f6:f0:
12:4e:74:f8:09:13:e3:90:8b:b4:e3:8c:67:18:cf:
a0:d5:e4:66:d4:3a:b0:e3:65:0b:1d:5f:66:5c:2c:
1e:0b:74:ef:a9:e9:ce:0b:b7:b2:4d:5c:e6:2b:10:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:27:3A:05:7C:1B:52:98:04:9E:C2:DB:61:46:36:1B:BE:99:4F:11
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SCc6BXwbUpgEnsLbYUY2G76ZTxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.96.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:3f:36:f6:0d:57:f7:38:9d:27:94:6e:7c:26:40:db:ff:88:
89:33:af:b7:56:d5:cf:1a:fe:43:3b:45:de:86:84:5e:3c:c8:
4f:78:8e:5d:24:0b:07:91:5c:21:38:cf:d6:f2:a8:1f:53:82:
d7:1b:d5:6f:e8:22:68:25:eb:11:aa:a7:c3:09:53:75:39:7c:
11:e5:af:73:86:aa:98:fc:66:70:0f:14:45:18:5a:7c:46:e2:
35:64:63:d3:9b:3a:44:13:8a:d4:23:8e:93:88:a4:4a:6c:82:
7c:90:71:dc:58:6e:7c:12:c8:d5:52:fd:d3:15:99:13:8b:2f:
88:dc:01:a4:4f:34:59:42:e5:bf:42:d3:60:6e:61:d1:ef:8b:
e2:8b:20:b4:67:d7:fd:a7:81:69:37:87:0e:44:da:5f:a1:06:
2e:ec:90:c7:e8:34:09:ed:15:f1:e5:71:b6:7d:e1:7e:bb:d8:
e8:ee:41:23:a6:88:79:ab:99:87:f1:ca:63:9c:fc:4d:5d:be:
ab:62:38:01:c9:85:5a:5b:d1:2d:b7:df:55:2a:05:e7:a9:3b:
f2:37:27:11:0a:75:4a:3c:b7:d0:e0:36:c5:ae:06:9e:77:06:
eb:95:a7:bf:6d:4a:e1:de:6e:66:9e:f9:10:86:36:bc:c7:27:
b7:a8:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:02 2025 by rpki-client