Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/S3zKLAZ2RH7Onn-AGRqNJbz-Mhs.roa
File: S3zKLAZ2RH7Onn-AGRqNJbz-Mhs.roa (raw, json)
Hash identifier: UWhZiGN/j0Syco5ANxdhovDZsYbQdT5AfcQpaMqND1I=
Subject key identifier: 4B:7C:CA:2C:06:76:44:7E:CE:9E:7F:80:19:1A:8D:25:BC:FE:32:1B
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 0199FC1CA2CC7BCC2162AAF6E48AD0D4D6CF
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/S3zKLAZ2RH7Onn-AGRqNJbz-Mhs.roa
Signing time: Sun 19 Oct 2025 10:55:59 +0000
ROA not before: Sun 19 Oct 2025 10:55:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28997
IP address blocks: 83.136.16.0/21 maxlen: 24
83.136.16.0/24 maxlen: 24
193.29.248.0/23 maxlen: 24
2a03:7000::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:1c:a2:cc:7b:cc:21:62:aa:f6:e4:8a:d0:d4:d6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Oct 19 10:55:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b7cca2c0676447ece9e7f80191a8d25bcfe321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:07:f5:e2:17:04:cc:ff:c5:68:6a:70:98:
7b:bc:5c:e0:31:e1:de:2b:7e:5d:fe:ca:64:6c:c9:
b4:a4:9d:a7:c3:29:95:68:4a:e8:18:71:d3:17:5d:
1e:4e:f6:9a:35:7b:35:7f:43:7f:c0:92:49:09:c6:
ad:ab:ad:93:e5:22:72:11:f0:de:81:02:9d:d6:c9:
c0:fb:6d:d5:83:2a:e8:4c:41:87:a8:7d:76:6d:65:
45:40:89:aa:92:67:ec:cb:ed:a0:bd:b7:d6:bb:9b:
ea:7b:b7:36:b0:76:5e:23:25:e5:8b:7d:5b:29:5d:
84:8a:b7:01:ac:16:42:91:70:b3:d4:6a:84:30:91:
d2:2d:b2:7e:31:99:de:a1:63:f6:98:ff:bc:2f:d7:
ff:57:9a:e0:73:24:cc:22:a4:16:2b:49:db:3e:d8:
e5:10:fd:15:03:02:c7:ae:90:ac:b1:47:b7:93:cb:
f6:81:ca:e7:d6:3c:d1:f2:b5:0e:0e:83:de:8c:3b:
f4:ce:11:6d:70:f1:b6:59:17:e3:b3:71:8f:27:54:
7f:38:e2:d1:f3:24:03:de:eb:63:97:b1:63:43:25:
ef:ad:93:45:c4:ee:fa:aa:89:2e:9c:18:b1:13:4e:
fe:f8:1a:d3:e2:47:80:b2:a3:01:e3:f9:71:ea:2e:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7C:CA:2C:06:76:44:7E:CE:9E:7F:80:19:1A:8D:25:BC:FE:32:1B
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/S3zKLAZ2RH7Onn-AGRqNJbz-Mhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.16.0/21
193.29.248.0/23
IPv6:
2a03:7000::/32
Signature Algorithm: sha256WithRSAEncryption
95:be:71:86:41:99:7c:1a:45:db:08:33:87:5a:04:f8:2b:ea:
bf:53:26:63:e9:60:44:87:6e:a7:20:2d:f0:72:e1:b8:95:31:
a6:f9:1b:27:2d:26:40:e9:82:6b:1a:76:95:ed:f0:d7:5d:27:
ad:de:f3:18:64:3a:46:96:80:0d:b1:7f:83:74:0d:42:73:ba:
45:5b:5a:ab:e9:50:05:76:75:42:4d:b8:75:2b:3b:9a:2e:61:
8e:16:1d:18:11:e0:8c:b2:c6:75:e4:c1:7f:bb:57:45:66:9c:
07:56:4f:73:05:55:cf:26:d8:4c:b7:4d:ba:f2:da:46:66:9a:
f2:6a:84:ee:e9:c4:16:06:5a:28:08:5f:64:57:a7:85:64:4d:
e9:9f:01:3c:70:fb:c0:0d:55:41:61:18:e7:61:af:36:0f:d7:
5d:2a:1b:ba:be:70:20:51:7e:e5:21:12:37:0d:c2:bc:55:2e:
92:c6:da:be:dc:0a:72:44:78:29:aa:39:c8:50:a5:9e:0d:6f:
c4:ca:be:b3:fc:17:04:87:cd:c2:a4:71:d3:16:dc:97:bc:11:
b3:13:26:e4:a4:3b:ba:73:88:63:ed:a5:32:40:38:83:aa:10:
0d:20:9c:5c:bf:5a:83:2f:2f:40:55:4b:3f:86:af:3c:d3:ab:
a6:e8:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:28:46 2025 by rpki-client