Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/s0FiRJS-ZbK8credkNv4KI0EMK0.roa
File: s0FiRJS-ZbK8credkNv4KI0EMK0.roa (raw, json)
Hash identifier: FTU7cZDyyJq2uWREFVvyDoOXKAvow66FnX66BOyThOo=
Subject key identifier: B3:41:62:44:94:BE:65:B2:BC:72:B7:9D:90:DB:F8:28:8D:04:30:AD
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0199E6D7AD5C8156B64425CD8296B2AA05B2
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/s0FiRJS-ZbK8credkNv4KI0EMK0.roa
Signing time: Wed 15 Oct 2025 07:48:38 +0000
ROA not before: Wed 15 Oct 2025 07:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60447
IP address blocks: 78.142.9.0/24 maxlen: 24
185.81.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:d7:ad:5c:81:56:b6:44:25:cd:82:96:b2:aa:05:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 15 07:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b341624494be65b2bc72b79d90dbf8288d0430ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:6d:0f:11:59:c8:02:a0:ea:1a:eb:4d:a4:
a2:9c:6d:0c:1d:ab:9c:5e:7b:24:98:62:da:c8:00:
02:b0:64:19:04:c5:67:8d:1b:c5:aa:57:1a:e5:0c:
69:45:a2:32:82:8b:0e:5b:09:cf:e3:46:08:61:b5:
c1:d3:63:87:0a:6a:5e:df:f0:a2:7c:d3:d1:bc:f8:
03:85:80:84:41:ff:2d:48:0f:e2:09:3f:1a:08:78:
cc:4b:0d:f0:68:18:77:6b:00:83:51:e5:b2:70:51:
7e:98:6c:70:53:b6:8b:52:40:40:01:be:20:4c:6b:
ed:61:46:bb:4b:3e:dc:30:d3:dd:16:7c:48:1c:cd:
76:af:ca:e6:d3:f7:9b:9f:bc:b8:8a:b5:9b:d5:4e:
85:fe:50:a0:4d:b1:bb:02:73:25:ed:0a:74:4c:f3:
36:56:fb:11:52:3f:61:ed:9a:91:01:2e:0f:5a:6b:
0c:f8:1a:c2:38:d4:fc:0d:62:cb:d2:03:95:85:83:
78:82:01:74:68:55:63:4d:e2:61:72:35:e3:64:d9:
d7:9e:61:0f:9a:26:19:63:d0:aa:be:89:42:c7:11:
cc:a4:2a:c5:f7:1d:43:e0:2f:5c:9d:f0:b6:5a:6a:
23:14:b2:da:44:75:08:ac:23:9a:51:b4:3d:1c:b2:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:62:44:94:BE:65:B2:BC:72:B7:9D:90:DB:F8:28:8D:04:30:AD
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/s0FiRJS-ZbK8credkNv4KI0EMK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.9.0/24
185.81.123.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f4:f7:22:07:af:70:a3:15:fa:db:00:31:13:95:2b:2c:d0:
14:86:a0:de:e5:ff:c4:1b:78:1c:f3:ab:fb:5d:58:f5:6c:b3:
db:3f:c2:c7:62:28:60:e8:89:55:93:9e:b0:2d:48:f2:4f:94:
6e:99:b2:07:5b:54:8b:a6:f4:a3:36:fd:1b:2b:2d:f2:3d:5b:
4d:6f:01:93:0a:c3:7e:b2:46:db:45:9b:b3:0a:25:90:1e:01:
21:42:1f:f9:4d:27:3c:25:13:1c:06:20:73:ea:1c:a7:ca:ba:
1e:76:e9:1f:36:1e:14:82:5c:0f:d9:9d:5a:1e:7f:5a:2b:82:
07:ac:cb:cd:f7:23:5f:ea:eb:f5:82:06:25:17:4b:3c:73:eb:
ce:ba:1f:ed:16:d9:18:2b:c5:23:96:5a:02:15:44:7e:f0:2e:
38:51:da:bf:93:99:d6:5b:02:46:62:6b:6c:ad:b3:0d:e4:74:
b2:a8:a9:1b:6d:4c:b2:de:cb:b8:d8:85:77:3a:bf:58:df:4f:
8f:d0:f3:2e:15:f5:a2:11:1b:ec:d8:07:88:53:da:b0:14:c7:
82:68:c2:ba:36:6e:97:4e:49:06:cc:e2:9a:d7:fe:83:43:91:
25:d1:ef:ab:65:62:c4:78:68:82:59:45:9f:cc:17:76:4c:f1:
2d:de:ea:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:43 2025 by rpki-client