Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/SFEu-x9BStWef7xbgnMJ14kfmtE.roa
File: SFEu-x9BStWef7xbgnMJ14kfmtE.roa (raw, json)
Hash identifier: PqneIDEjiYPrh2i2T52RFsPVM7i/nozgeeqppA7gRYk=
Subject key identifier: 48:51:2E:FB:1F:41:4A:D5:9E:7F:BC:5B:82:73:09:D7:89:1F:9A:D1
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 019764C629371172645684AF0356699B0129
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/SFEu-x9BStWef7xbgnMJ14kfmtE.roa
Signing time: Thu 12 Jun 2025 15:33:17 +0000
ROA not before: Thu 12 Jun 2025 15:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 94.143.105.0/24 maxlen: 24
94.143.106.0/24 maxlen: 24
94.143.107.0/24 maxlen: 24
94.143.108.0/24 maxlen: 24
94.143.109.0/24 maxlen: 24
185.236.124.0/24 maxlen: 24
185.236.125.0/24 maxlen: 24
185.236.126.0/24 maxlen: 24
185.236.127.0/24 maxlen: 24
212.1.218.0/24 maxlen: 24
212.1.219.0/24 maxlen: 24
212.1.222.0/24 maxlen: 24
212.1.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:c6:29:37:11:72:64:56:84:af:03:56:69:9b:01:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Jun 12 15:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48512efb1f414ad59e7fbc5b827309d7891f9ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:23:2f:cc:0b:01:95:d8:8a:b9:ac:76:75:
e9:b0:30:f4:9f:bc:6b:61:54:1e:78:d0:4f:3c:8e:
a1:3c:14:f8:59:fd:81:69:62:6c:74:6f:44:5f:03:
6d:ef:79:94:45:f2:e0:97:73:a7:72:03:17:f6:41:
30:96:06:c8:a2:10:fd:93:fd:b2:77:49:ca:3d:88:
1d:1a:29:91:19:0b:0f:7e:3d:f0:8b:3e:24:e2:9d:
2d:a6:85:54:50:95:31:a5:03:dd:66:cd:09:dd:8e:
17:a5:6e:7e:8c:24:67:73:f8:91:52:6c:a7:28:64:
ad:d7:e7:90:f3:b0:4b:24:50:73:f2:90:e8:7f:e4:
1a:f2:1f:08:2e:c0:80:bc:0a:a7:3c:0f:3c:53:f3:
f2:15:97:b7:ca:fe:c1:8a:13:a6:f9:eb:af:3f:ce:
90:bd:5f:3a:9c:11:44:50:65:2a:6b:4b:c7:cd:06:
02:7b:3a:93:04:b3:10:8b:1e:21:2b:95:78:65:e1:
10:22:83:77:51:a6:6b:a9:50:fd:2f:3b:c3:74:b9:
d0:2a:47:4d:2b:a9:fc:3f:6f:1d:e3:75:89:d9:0d:
60:2a:37:7e:7f:0f:f6:b5:d5:5d:dc:d1:62:4c:c1:
a8:d9:af:1a:0c:10:43:5a:db:d6:29:cd:7a:ed:be:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:51:2E:FB:1F:41:4A:D5:9E:7F:BC:5B:82:73:09:D7:89:1F:9A:D1
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/SFEu-x9BStWef7xbgnMJ14kfmtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.105.0-94.143.109.255
185.236.124.0/22
212.1.218.0/23
212.1.222.0/23
Signature Algorithm: sha256WithRSAEncryption
46:85:38:01:bb:49:7b:3c:9d:a9:e5:59:92:f2:91:73:9e:38:
98:90:21:08:09:c6:ac:83:44:6d:6f:5c:58:31:57:5c:02:e9:
07:2d:d4:f0:76:a1:ad:e7:13:17:67:bb:88:4a:e1:b7:37:5e:
c3:f6:79:b1:6f:72:dd:dc:4a:43:ed:4f:a8:ca:4f:0f:94:4d:
61:c6:cc:aa:40:c2:8f:f6:0b:43:c5:94:51:95:0a:e8:22:09:
3d:96:64:9c:84:fe:cc:6e:d7:1a:48:6d:60:c1:8f:57:c3:58:
27:ec:40:39:2b:92:61:b9:27:3b:42:18:c3:58:f3:9b:ec:b7:
e9:55:bf:91:53:5d:86:ba:2a:fb:ac:87:65:0e:7d:ef:aa:56:
48:cd:74:6d:43:89:f3:41:2d:b2:20:bf:74:0b:7e:d3:8b:91:
68:6d:e4:ba:13:25:b6:46:44:91:95:a0:9f:82:cc:25:b7:3f:
a2:92:48:61:82:83:15:53:e0:ed:b8:4a:37:0a:cb:c2:9c:81:
3e:ad:96:fa:2e:2d:25:d6:7c:a7:57:31:1d:6e:1c:8f:36:c4:
04:66:3f:34:3b:aa:b1:62:97:6a:31:4f:05:b5:70:28:5b:3b:
d3:e6:5b:a8:26:09:ed:ef:cd:4d:f8:a6:f2:0a:dd:d3:8a:10:
62:10:24:73
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZdkxik3EXJkVoSvA1ZpmwEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDc4YzVhYTIyNmEyNzhlOGIxOTA2ZjM3MWM2MGNmYzdk
ODdlOGUwHhcNMjUwNjEyMTUzMzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODUxMmVmYjFmNDE0YWQ1OWU3ZmJjNWI4MjczMDlkNzg5MWY5YWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2AjL8wLAZXYirmsdnXpsDD0n7xr
YVQeeNBPPI6hPBT4Wf2BaWJsdG9EXwNt73mURfLgl3OncgMX9kEwlgbIohD9k/2y
d0nKPYgdGimRGQsPfj3wiz4k4p0tpoVUUJUxpQPdZs0J3Y4XpW5+jCRnc/iRUmyn
KGSt1+eQ87BLJFBz8pDof+Qa8h8ILsCAvAqnPA88U/PyFZe3yv7BihOm+euvP86Q
vV86nBFEUGUqa0vHzQYCezqTBLMQix4hK5V4ZeEQIoN3UaZrqVD9LzvDdLnQKkdN
K6n8P28d43WJ2Q1gKjd+fw/2tdVd3NFiTMGo2a8aDBBDWtvWKc167b6XHQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFEhRLvsfQUrVnn+8W4JzCdeJH5rRMB8GA1UdIwQY
MBaAFHpHjFqiJqJ46LGQbzccYM/H2H6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAt
ZDc2ZWM5Y2MwZDI4LzEvU0ZFdS14OUJTdFdlZjd4YmduTUoxNGtmbXRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAtZDc2ZWM5Y2MwZDI4
LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBABej2kD
BAFej2wDBAK57HwDBAHUAdoDBAHUAd4wDQYJKoZIhvcNAQELBQADggEBAEaFOAG7
SXs8nanlWZLykXOeOJiQIQgJxqyDRG1vXFgxV1wC6Qct1PB2oa3nExdnu4hK4bc3
XsP2ebFvct3cSkPtT6jKTw+UTWHGzKpAwo/2C0PFlFGVCugiCT2WZJyE/sxu1xpI
bWDBj1fDWCfsQDkrkmG5JztCGMNY85vst+lVv5FTXYa6Kvush2UOfe+qVkjNdG1D
ifNBLbIgv3QLftOLkWht5LoTJbZGRJGVoJ+CzCW3P6KSSGGCgxVT4O24SjcKy8Kc
gT6tlvouLSXWfKdXMR1uHI82xARmPzQ7qrFil2oxTwW1cChbO9PmW6gmCe3vzU34
pvIK3dOKEGIQJHM=
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:41:58 2025 by rpki-client