Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/Sz60tJGpfPEIPRKoNyD58l9TIHk.roa
File: Sz60tJGpfPEIPRKoNyD58l9TIHk.roa (raw, json)
Hash identifier: N59T40jObwP6xQKwd5i1QLcMPk2PBgJ5eVUrj8bdLR4=
Subject key identifier: 4B:3E:B4:B4:91:A9:7C:F1:08:3D:12:A8:37:20:F9:F2:5F:53:20:79
Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Certificate serial: 0199933845FA60D0EB995027333F3E63D2F7
Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/Sz60tJGpfPEIPRKoNyD58l9TIHk.roa
Signing time: Mon 29 Sep 2025 02:06:02 +0000
ROA not before: Mon 29 Sep 2025 02:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43274
IP address blocks: 91.194.190.0/23 maxlen: 23
91.226.120.0/22 maxlen: 22
176.114.128.0/18 maxlen: 18
176.114.189.0/24 maxlen: 24
194.125.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:93:38:45:fa:60:d0:eb:99:50:27:33:3f:3e:63:d2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Validity
Not Before: Sep 29 02:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3eb4b491a97cf1083d12a83720f9f25f532079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:a8:5d:99:4a:c6:bc:2d:8e:77:a4:af:13:
d8:a5:e1:cc:4e:e9:31:07:64:04:b1:3a:59:e8:e0:
29:f0:14:b7:4d:0b:0d:d8:c1:c9:99:09:41:eb:91:
1d:9f:e4:b9:73:2a:32:1a:d6:11:3e:22:ed:27:ce:
75:82:46:54:5c:55:81:94:ff:bf:e3:9d:db:e3:dc:
cf:81:75:24:be:71:57:e0:d8:a2:9c:4e:17:bf:d2:
c3:0f:af:ad:0c:3b:cc:ff:3b:f0:20:27:da:ce:51:
83:b7:3e:a9:26:b9:dc:7c:06:d4:de:f9:73:96:1f:
a4:24:12:f3:f6:1f:8a:48:fc:72:e5:3a:f1:b6:66:
38:49:c4:db:51:a5:ee:82:c1:a9:0e:9a:e0:b1:23:
42:03:22:ab:dd:58:5a:f2:5c:b0:e3:a8:6f:95:80:
a8:8f:c8:2c:87:ed:a8:f9:e7:22:8a:a4:19:60:27:
31:16:cf:ee:4d:b5:97:d2:ad:1d:5f:b7:cb:d0:2d:
bc:c8:a3:6b:96:ae:13:1f:a1:81:e8:42:47:ba:b8:
e0:43:34:d6:50:f5:cc:a4:32:8c:3f:43:3a:33:06:
0b:95:ce:1f:9c:f7:3c:17:a6:e8:dd:4a:e0:ee:4e:
b5:54:88:34:b9:d4:53:ea:5b:d9:01:5b:67:09:2c:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:B4:B4:91:A9:7C:F1:08:3D:12:A8:37:20:F9:F2:5F:53:20:79
X509v3 Authority Key Identifier:
keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/Sz60tJGpfPEIPRKoNyD58l9TIHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.190.0/23
91.226.120.0/22
176.114.128.0/18
194.125.254.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:28:75:1b:2d:3b:9d:3d:4a:5b:35:12:be:99:10:b6:4f:6a:
87:a1:d4:d5:96:48:83:f6:f6:a8:40:c3:81:f7:e0:cc:4c:e9:
59:74:dd:ff:d9:3a:25:f2:83:5e:87:97:64:14:34:ef:b4:01:
72:0d:0d:27:78:d9:92:b9:39:df:19:db:99:30:7a:b9:2a:30:
ce:93:34:cc:3c:2e:8b:2f:5e:65:09:7a:e1:48:cb:4a:af:08:
9b:59:75:b2:a0:4f:34:38:d7:f7:d6:8f:52:9a:9e:4b:34:d1:
62:89:c1:f3:ba:79:78:ae:76:f5:4a:83:cd:af:f4:89:1f:2f:
d8:5d:37:28:4a:20:fe:af:3a:2d:fe:5e:22:45:c8:e6:6d:34:
ad:43:10:eb:61:97:fb:b7:b9:7c:10:b5:fd:59:e7:61:dc:d8:
07:41:5b:aa:fa:31:7e:fa:f1:ff:bf:5c:11:62:83:6a:d2:91:
81:ea:78:78:64:dd:87:f5:2d:68:a8:d7:4b:1f:fc:5d:70:dd:
13:4d:aa:4c:b0:79:64:5b:c2:ec:ed:f9:56:38:18:2a:77:ab:
ac:9f:40:f5:0a:73:b0:64:10:78:b1:a3:8a:05:2f:57:a7:80:
45:a6:09:ba:bf:0a:9f:3c:6c:c9:a9:f7:91:3e:89:cb:17:66:
4a:45:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:10 2025 by rpki-client