Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/Vs52J8_I6-6Ar4H7IoxIsedczaU.roa
File: Vs52J8_I6-6Ar4H7IoxIsedczaU.roa (raw, json)
Hash identifier: YX47Rdu8iskILAUdKTjD7fvWJ5LUe8zcxY/3psdpsYM=
Subject key identifier: 56:CE:76:27:CF:C8:EB:EE:80:AF:81:FB:22:8C:48:B1:E7:5C:CD:A5
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019A347A52841C876B731A31B383585CFAA5
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/Vs52J8_I6-6Ar4H7IoxIsedczaU.roa
Signing time: Thu 30 Oct 2025 09:37:02 +0000
ROA not before: Thu 30 Oct 2025 09:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60042
IP address blocks: 176.118.208.0/22 maxlen: 24
176.118.209.0/24 maxlen: 24
176.118.213.0/24 maxlen: 24
176.118.214.0/23 maxlen: 23
176.118.216.0/22 maxlen: 22
176.118.220.0/22 maxlen: 22
176.118.222.0/24 maxlen: 24
185.42.228.0/22 maxlen: 22
185.42.228.0/23 maxlen: 23
185.42.229.0/24 maxlen: 24
185.42.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:7a:52:84:1c:87:6b:73:1a:31:b3:83:58:5c:fa:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Oct 30 09:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56ce7627cfc8ebee80af81fb228c48b1e75ccda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:84:66:03:9a:b7:23:ce:1d:3c:40:48:b7:
9f:05:dc:3f:e7:bf:89:68:aa:e1:ef:b3:52:c1:21:
25:25:9c:6b:7a:d1:13:b0:b0:e2:90:6a:b2:fb:95:
7b:f7:c7:2f:e3:42:be:1a:55:9b:5b:d6:27:d8:2e:
5b:34:99:2c:c2:6f:ec:74:72:3d:4d:a8:66:2d:cd:
07:ac:16:cb:63:c4:24:06:12:5e:9e:7b:b6:5a:3f:
a0:31:87:de:9e:aa:bc:9b:b5:f0:d1:e0:7d:70:ff:
ae:8d:fc:9b:e7:32:02:bd:cc:4e:d1:c4:34:4f:98:
4e:56:59:ff:da:41:0a:79:58:9b:46:5b:d5:76:19:
ef:e2:ca:25:90:76:4e:b9:8d:bd:5b:db:ad:59:6d:
96:29:d8:1a:3f:60:30:0e:c5:9c:52:a4:98:32:84:
18:fc:a6:5c:db:67:60:85:15:e0:14:70:94:a1:a6:
ce:8f:14:1d:78:61:2a:81:3d:69:73:21:d7:4c:76:
93:a9:15:a2:c9:80:c9:00:86:fb:28:b3:50:0a:5d:
23:b4:29:fb:8c:0b:9b:95:50:f6:3c:a5:13:a5:0b:
1e:71:8e:6d:6f:e6:49:d4:ab:24:5f:84:17:59:3a:
52:c5:93:86:54:78:c6:d7:79:cc:a4:bb:34:10:aa:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CE:76:27:CF:C8:EB:EE:80:AF:81:FB:22:8C:48:B1:E7:5C:CD:A5
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/Vs52J8_I6-6Ar4H7IoxIsedczaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.208.0/22
176.118.213.0-176.118.223.255
185.42.228.0/22
Signature Algorithm: sha256WithRSAEncryption
85:ec:05:a3:80:f4:75:59:45:eb:41:c3:62:b8:d3:2d:f9:72:
f9:5a:0e:01:54:76:86:c0:f7:eb:62:0b:4a:2f:34:4f:a7:46:
b9:05:07:7f:84:19:e5:d4:cd:87:6f:94:8b:53:7c:51:f7:5f:
80:a0:82:27:32:4e:d8:8b:5e:2e:a5:13:32:db:b5:97:41:f9:
b3:ee:73:65:13:1c:90:8f:00:d8:ba:33:89:57:8f:d0:10:43:
c8:c7:f8:a1:f3:86:50:cd:f8:ba:9e:2b:70:cd:2f:31:de:8d:
25:f2:d8:fd:cb:3a:af:da:3b:86:fe:56:00:2a:ed:bb:04:78:
9b:8b:02:06:01:e4:60:03:46:35:bf:91:d9:7c:e6:c0:39:f3:
6f:81:80:eb:38:9f:56:c9:a5:25:17:6d:84:ff:9a:97:42:76:
81:92:c6:3c:b9:3f:fd:f2:6d:38:6b:1b:46:9d:ce:bd:c9:a0:
f3:17:6f:7f:38:4b:65:ee:58:86:fc:7c:93:a8:d0:45:d4:58:
cf:52:97:eb:66:77:17:b8:69:05:55:e3:bb:2c:c8:8e:12:e4:
73:25:26:ce:d1:3e:d9:b1:dc:d4:dd:d6:1a:52:fa:1f:16:e6:
a1:54:51:7e:2c:f5:d0:6a:69:ab:b9:56:a5:bd:4e:8d:91:80:
12:a7:15:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:10 2025 by rpki-client