Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/spjfSWizAXlXu4hIZqUTmSLlnzA.roa
File: spjfSWizAXlXu4hIZqUTmSLlnzA.roa (raw, json)
Hash identifier: Cl6/qh6f5mCImBhenDKlpCZimPTwSLb+qLymWjMP/C0=
Subject key identifier: B2:98:DF:49:68:B3:01:79:57:BB:88:48:66:A5:13:99:22:E5:9F:30
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019962CA85CA18D4DE57D15E23BDA23F60E4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/spjfSWizAXlXu4hIZqUTmSLlnzA.roa
Signing time: Fri 19 Sep 2025 16:24:23 +0000
ROA not before: Fri 19 Sep 2025 16:24:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 5.181.180.0/24 maxlen: 24
185.176.93.0/24 maxlen: 24
185.176.95.0/24 maxlen: 24
185.229.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:ca:85:ca:18:d4:de:57:d1:5e:23:bd:a2:3f:60:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 19 16:24:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b298df4968b3017957bb884866a5139922e59f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:6d:47:9c:f8:44:c0:56:93:9f:1d:34:f7:
09:96:eb:26:ff:08:b5:60:7d:39:b8:cd:a6:68:bb:
23:38:2b:7d:47:a1:e0:e9:94:40:7e:fc:65:89:fe:
ff:6c:e4:e3:00:9b:e7:d7:94:ac:55:e8:5f:0e:ff:
5b:0d:72:4d:76:6e:b3:e0:5a:e0:4d:75:38:67:e9:
fa:e8:b3:fe:9b:7d:b6:18:83:26:6d:3e:a5:29:ef:
8e:ed:a9:e0:c5:94:88:45:07:bd:02:35:7f:98:21:
c2:df:ea:10:69:42:7b:a7:c9:e9:38:4f:2e:64:e3:
56:02:51:53:3f:53:f0:d9:a6:1a:06:db:59:b9:bf:
c2:1e:d2:d0:5d:eb:ac:f4:72:2c:47:4c:c9:1a:8d:
ff:00:3d:f2:38:29:fb:f5:79:b8:95:09:81:8a:91:
13:92:d0:65:05:e2:91:14:e4:18:61:3f:26:37:bb:
ed:52:e8:e9:6f:93:66:10:a9:4f:fa:bb:82:15:0b:
0c:91:10:49:63:ff:5d:17:c3:ef:dc:aa:4c:21:f4:
ba:c5:a7:54:b0:0a:ef:e7:01:ac:e2:c0:55:15:f4:
2c:e7:58:f0:00:0c:d0:a9:80:f0:96:f0:5d:b4:3f:
53:6f:67:38:db:ec:c1:4d:5f:36:bb:a7:5d:b3:64:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:98:DF:49:68:B3:01:79:57:BB:88:48:66:A5:13:99:22:E5:9F:30
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/spjfSWizAXlXu4hIZqUTmSLlnzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.180.0/24
185.176.93.0/24
185.176.95.0/24
185.229.222.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f1:a6:51:be:7c:50:1b:f1:94:f8:71:99:f8:34:7e:12:9e:
9a:13:66:35:9d:be:94:48:3a:e1:2d:70:26:06:70:9e:ad:b7:
da:b1:5e:20:8e:4a:a2:4c:e8:fd:cf:40:96:f7:06:16:28:ba:
01:49:c6:4d:02:55:db:02:41:c4:80:d5:e9:44:47:1d:e8:36:
ef:1b:15:bf:97:e6:1f:c2:7d:24:b8:03:bd:ea:5a:75:d4:f6:
bc:2e:43:a9:63:33:75:14:cd:66:d2:b2:7f:b7:09:ff:02:13:
c2:40:73:94:b7:93:35:4e:96:24:8a:79:49:35:a4:78:84:d0:
01:b9:f1:c7:f6:71:9c:04:0d:09:37:41:b4:a9:d1:09:41:61:
b1:0d:44:2a:46:da:f0:ce:88:d1:f0:1a:7e:a8:d8:1b:e8:7d:
8d:66:39:6f:c8:96:80:b9:16:cc:7f:66:79:6b:3f:5a:0c:2b:
f4:22:4c:c5:ff:3c:bf:e6:4f:54:af:a9:cd:50:03:05:f6:0e:
01:25:7d:98:5c:99:7d:4a:07:e1:9f:63:1b:22:75:48:3c:81:
91:47:39:cc:71:0b:89:6a:4c:a0:4c:00:5a:c4:41:94:4a:99:
81:30:e8:a4:fe:46:97:90:94:d9:9a:39:db:37:39:c9:99:e7:
6d:bc:3d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:53 2025 by rpki-client