Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/g_lThlnsJq9LpMngQCd0Ev-AJxQ.roa
File: g_lThlnsJq9LpMngQCd0Ev-AJxQ.roa (raw, json)
Hash identifier: J/8qgOiiWUFaiNrcnTWTtH2kw8HeWHNYJWQaiboNZV0=
Subject key identifier: 83:F9:53:86:59:EC:26:AF:4B:A4:C9:E0:40:27:74:12:FF:80:27:14
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 01998645261FADB3485CBFCCF92BB9C758B6
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/g_lThlnsJq9LpMngQCd0Ev-AJxQ.roa
Signing time: Fri 26 Sep 2025 13:45:02 +0000
ROA not before: Fri 26 Sep 2025 13:45:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201201
IP address blocks: 185.140.230.0/24 maxlen: 24
185.140.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:45:26:1f:ad:b3:48:5c:bf:cc:f9:2b:b9:c7:58:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Sep 26 13:45:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83f9538659ec26af4ba4c9e040277412ff802714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:94:0a:61:19:be:00:26:6b:a8:6d:81:11:
1b:89:14:7f:61:bb:a0:20:84:cb:c7:0f:55:dc:31:
bb:a3:64:a6:8d:2a:76:04:47:ea:14:22:45:02:7a:
10:c0:bb:26:c4:b2:ab:1b:1d:b7:b6:85:db:e6:00:
ac:a9:4b:cc:94:ac:b6:ee:40:7f:5d:29:e3:6a:2d:
a5:fb:cc:f7:90:91:57:20:40:93:d4:41:d6:8a:a1:
45:45:f3:6b:15:ba:64:b9:c5:0e:63:9c:84:db:a4:
28:03:e7:72:45:2c:3f:7b:73:2e:73:4c:1a:fe:4f:
74:7f:86:aa:a2:81:58:2f:83:86:28:cd:e4:9a:1a:
dd:b4:3c:9a:4e:ee:69:0f:8c:0a:3c:45:b1:30:cc:
ee:ad:b0:0d:cc:12:5e:5a:8c:c1:00:c2:fd:6e:df:
7e:49:ee:ec:15:13:61:b1:13:44:a7:f5:a0:fc:24:
00:d1:41:d2:7e:30:70:84:13:a7:b4:f0:e5:da:88:
eb:d8:95:e1:87:5f:00:a8:92:8f:87:0b:b1:7d:d1:
2e:eb:f5:c2:e4:2c:60:8f:18:af:b6:7c:5a:c7:c6:
68:47:1b:98:79:69:4a:57:12:67:32:10:f9:67:67:
1f:c0:19:2c:3d:02:08:fe:f6:55:c7:8e:d6:20:f4:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F9:53:86:59:EC:26:AF:4B:A4:C9:E0:40:27:74:12:FF:80:27:14
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/g_lThlnsJq9LpMngQCd0Ev-AJxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.230.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:9f:2e:eb:8b:9f:a8:c7:d7:1a:44:30:3d:20:d2:25:a2:42:
be:d3:94:40:82:f5:91:c5:18:44:4d:40:0d:99:43:7f:66:bf:
8d:f6:4d:90:63:3b:81:bb:0a:24:75:ea:dd:96:3f:5d:49:8a:
75:ae:db:b8:ec:6c:79:48:8d:f1:99:43:a2:59:ee:03:32:6b:
d3:18:0b:15:9c:e3:34:84:ac:31:09:f7:f2:53:28:e7:4d:0c:
d1:87:95:82:7d:f3:38:f2:1f:e6:12:de:46:24:dc:ff:0b:26:
91:ce:46:04:80:01:a6:79:5f:3c:18:41:2d:04:08:60:ad:2f:
2a:4b:b0:76:1c:d5:cd:b0:cf:3d:7a:f8:7f:8c:1e:1f:5f:18:
ce:c6:6b:6c:11:78:0f:a0:e7:e3:73:43:4d:86:ec:bf:6d:e2:
2d:61:0c:ef:b0:9d:b5:0e:a1:0e:d6:9f:8d:47:62:fd:3c:a7:
f7:58:ed:d6:fc:ca:55:46:8d:5b:96:9c:90:4c:3c:86:a9:ce:
16:ef:d7:7c:2c:f5:6d:03:3f:4a:06:d4:dd:5a:c7:bb:a9:8f:
d8:54:46:05:1a:89:11:1b:62:f7:0a:55:26:37:b6:ac:f4:c0:
df:f2:5a:69:54:a3:d6:60:23:88:e7:29:75:fc:a3:f9:ef:3e:
41:b3:83:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:11 2025 by rpki-client