Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/SfXRo_AdAxU6c3VEDSOxJiuQl7A.roa
File: SfXRo_AdAxU6c3VEDSOxJiuQl7A.roa (raw, json)
Hash identifier: Cg1D4OXkvVJI8TzkNB2l+sYGfYEnxAL46i2SYt/QWuU=
Subject key identifier: 49:F5:D1:A3:F0:1D:03:15:3A:73:75:44:0D:23:B1:26:2B:90:97:B0
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01987A354CC24D4BF2B364453B4411FC5E6F
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/SfXRo_AdAxU6c3VEDSOxJiuQl7A.roa
Signing time: Tue 05 Aug 2025 12:29:29 +0000
ROA not before: Tue 05 Aug 2025 12:29:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202309
IP address blocks: 62.68.70.0/24 maxlen: 24
78.128.120.0/23 maxlen: 24
78.128.123.0/24 maxlen: 24
79.124.42.0/23 maxlen: 24
80.72.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:35:4c:c2:4d:4b:f2:b3:64:45:3b:44:11:fc:5e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Aug 5 12:29:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49f5d1a3f01d03153a7375440d23b1262b9097b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:f3:95:01:09:2f:65:3c:0f:97:6b:e7:39:
74:76:33:3d:10:54:a6:69:40:02:dd:70:e0:4f:50:
9c:30:f0:ee:92:14:7d:d7:56:47:15:f3:d8:a6:65:
83:13:8f:55:95:67:b8:ea:3f:ef:89:d0:0a:a7:97:
9b:b0:b7:3b:f9:66:17:bc:ab:ec:52:79:c3:15:79:
97:12:6b:2c:8a:c9:d1:6d:61:74:a6:b7:2e:fd:35:
7f:d5:de:16:9e:90:fc:60:2a:91:75:e5:76:0c:88:
a9:46:1d:70:97:5f:1f:cb:60:80:50:b5:22:ee:e3:
80:51:cb:c8:03:62:9f:ca:9b:2a:a0:f5:79:2f:11:
32:6d:18:c2:69:3b:19:18:1c:01:10:ae:86:c8:df:
71:95:7d:2b:d4:e6:d8:be:d3:18:70:de:9f:df:5a:
1e:af:54:f4:2d:86:58:81:e3:ac:c2:3d:39:11:6e:
02:d9:1e:da:8e:f8:28:69:4f:20:94:36:51:36:0e:
1c:a7:e1:b3:51:2b:83:ec:6e:6e:28:5f:e9:8f:56:
a1:a4:2f:e0:bd:f8:dc:c0:93:12:de:07:3b:ac:9b:
86:51:56:98:22:04:a9:a4:d7:75:96:a0:79:dc:55:
35:4b:19:cd:84:8b:4f:e1:10:52:71:7d:b2:ea:c0:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F5:D1:A3:F0:1D:03:15:3A:73:75:44:0D:23:B1:26:2B:90:97:B0
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/SfXRo_AdAxU6c3VEDSOxJiuQl7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.70.0/24
78.128.120.0/23
78.128.123.0/24
79.124.42.0/23
80.72.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:87:99:28:46:7f:0f:1f:88:d3:65:c7:69:c1:50:72:71:9c:
87:21:11:32:6b:02:75:32:ea:f1:3f:d7:37:b0:ad:d5:6a:f7:
5d:98:86:a2:ca:72:4e:18:46:78:d8:e9:0a:27:aa:37:66:69:
dd:c2:24:61:cc:62:85:35:f8:06:7a:fe:53:3d:af:9a:7b:24:
36:57:a2:e4:05:a8:bd:00:25:ac:07:76:12:c3:4d:fd:99:99:
35:70:94:f2:4e:16:b9:9c:7f:87:45:92:24:f1:e4:e3:85:0e:
50:40:58:7f:a0:53:47:95:b6:5f:7f:8c:8e:df:b5:08:11:36:
90:9c:a1:a7:1d:6b:f5:5f:4e:b5:9e:95:90:55:00:6c:a2:be:
6e:63:94:3b:69:51:ee:c6:a9:8a:e2:7e:64:e2:b3:4b:22:25:
80:14:0b:73:c1:13:16:7a:dc:19:b2:18:c5:fe:0c:3b:06:70:
09:1f:ac:c3:28:bf:fd:f0:3f:fe:bd:2a:c6:c9:56:cb:0d:7c:
f3:26:82:07:df:da:69:65:5c:89:1d:bd:30:85:0c:04:b0:64:
e6:53:a1:bc:77:51:88:12:9e:0f:98:5a:98:d7:29:d2:4a:6e:
0e:4f:a3:e2:88:56:09:b3:dd:95:02:29:c0:ec:b9:d4:da:2c:
87:98:f8:1e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZh6NUzCTUvys2RFO0QR/F5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwODA1MTIyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWY1ZDFhM2YwMWQwMzE1M2E3Mzc1NDQwZDIzYjEyNjJiOTA5N2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnDzlQEJL2U8D5dr5zl0djM9EFSm
aUAC3XDgT1CcMPDukhR911ZHFfPYpmWDE49VlWe46j/vidAKp5ebsLc7+WYXvKvs
UnnDFXmXEmssisnRbWF0prcu/TV/1d4WnpD8YCqRdeV2DIipRh1wl18fy2CAULUi
7uOAUcvIA2KfypsqoPV5LxEybRjCaTsZGBwBEK6GyN9xlX0r1ObYvtMYcN6f31oe
r1T0LYZYgeOswj05EW4C2R7ajvgoaU8glDZRNg4cp+GzUSuD7G5uKF/pj1ahpC/g
vfjcwJMS3gc7rJuGUVaYIgSppNd1lqB53FU1SxnNhItP4RBScX2y6sAdvwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEn10aPwHQMVOnN1RA0jsSYrkJewMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvU2ZYUm9fQWRBeFU2YzNWRURTT3hKaXVRbDdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPkRGAwQB
ToB4AwQAToB7AwQBT3wqAwQAUEhOMA0GCSqGSIb3DQEBCwUAA4IBAQAuh5koRn8P
H4jTZcdpwVBycZyHIREyawJ1MurxP9c3sK3VavddmIaiynJOGEZ42OkKJ6o3Zmnd
wiRhzGKFNfgGev5TPa+aeyQ2V6LkBai9ACWsB3YSw039mZk1cJTyTha5nH+HRZIk
8eTjhQ5QQFh/oFNHlbZff4yO37UIETaQnKGnHWv1X061npWQVQBsor5uY5Q7aVHu
xqmK4n5k4rNLIiWAFAtzwRMWetwZshjF/gw7BnAJH6zDKL/98D/+vSrGyVbLDXzz
JoIH39ppZVyJHb0whQwEsGTmU6G8d1GIEp4PmFqY1ynSSm4OT6PiiFYJs92VAinA
7LnU2iyHmPge
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:28:57 2025 by rpki-client