Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/1v3S77a-sfxglHqIQg0r0HWDfqs.roa
File: 1v3S77a-sfxglHqIQg0r0HWDfqs.roa (raw, json)
Hash identifier: +wgpPcHdBUUrExFbQEUVDXMSPqFb4tZj4ER2ADg0of8=
Subject key identifier: D6:FD:D2:EF:B6:BE:B1:FC:60:94:7A:88:42:0D:2B:D0:75:83:7E:AB
Certificate issuer: /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Certificate serial: 0197E46C76CF02BB672008802ADFF193FA39
Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/1v3S77a-sfxglHqIQg0r0HWDfqs.roa
Signing time: Mon 07 Jul 2025 10:26:42 +0000
ROA not before: Mon 07 Jul 2025 10:26:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 185.232.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:6c:76:cf:02:bb:67:20:08:80:2a:df:f1:93:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Validity
Not Before: Jul 7 10:26:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6fdd2efb6beb1fc60947a88420d2bd075837eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:53:f9:fb:76:d0:1a:c7:41:b8:21:cb:06:
54:08:82:c7:bd:62:3f:dd:80:56:0b:c2:6f:c3:cd:
b8:41:27:d0:d4:ce:af:e7:a6:34:1f:1d:ad:0a:3f:
33:e6:53:71:2b:84:b5:e8:1c:93:e9:6d:00:d5:64:
12:a4:a6:64:a5:74:45:71:f7:9e:bb:05:f8:aa:93:
8f:88:4f:de:2a:fe:5f:21:33:38:a0:9f:0e:5f:cc:
00:85:2e:0d:c8:a8:64:d8:3c:94:5f:2b:b4:6b:82:
8f:ce:3c:46:70:3b:a3:60:4d:6b:7c:d8:04:97:43:
d8:88:2c:8e:1f:b2:f5:8c:af:36:35:2a:a9:8c:a4:
97:be:67:bd:f4:1b:13:3b:38:51:e9:e7:1a:f0:29:
e8:d5:64:57:dc:95:c7:a7:f2:ee:56:4b:5a:57:83:
79:1e:3f:30:c8:cd:69:8a:3a:6a:8f:f0:86:89:62:
bb:de:7f:21:ac:6b:cb:0d:d1:79:b5:40:31:4d:b0:
b4:07:a1:db:50:f4:c8:14:cc:d4:fe:ec:84:26:23:
48:0b:a3:dd:c0:bf:fe:ef:b5:56:1f:e9:a1:6e:6e:
10:ab:e7:78:7a:9d:2e:0e:21:cf:34:da:ae:8b:b6:
44:8c:d4:ec:4f:a5:e8:c9:2c:a5:47:7f:8c:f4:53:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FD:D2:EF:B6:BE:B1:FC:60:94:7A:88:42:0D:2B:D0:75:83:7E:AB
X509v3 Authority Key Identifier:
keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/1v3S77a-sfxglHqIQg0r0HWDfqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.108.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:fa:3d:43:1d:9d:3e:eb:e7:46:56:bf:3a:c6:6b:5b:ad:57:
80:22:13:80:27:ec:c0:55:cb:89:06:09:53:ea:a8:3a:b9:57:
40:98:04:da:3b:28:8a:b1:9a:73:d8:02:16:a4:f7:f0:5c:37:
1a:83:35:0a:a7:ec:41:58:bc:64:23:9c:11:f4:e1:00:44:c4:
3e:a0:51:41:46:6a:6c:73:df:fa:6f:84:bb:99:17:df:17:ff:
69:73:c9:4a:b6:56:36:35:76:07:49:4b:47:f1:f0:7b:d8:8f:
4f:80:3d:42:64:0b:dc:8b:db:46:1f:57:87:22:0b:6c:ca:c3:
2a:e4:cd:87:3a:b9:59:b9:89:91:31:43:20:53:17:f7:40:0e:
ee:2d:bd:68:b9:eb:2a:e9:1a:26:4b:2c:5a:3b:80:4d:66:68:
a0:cf:e7:b2:8d:ad:39:0a:94:27:fd:41:5c:a4:a7:49:52:82:
f0:a0:1d:30:99:69:c1:df:26:68:ba:f4:aa:2a:1d:26:26:b4:
64:93:b9:60:57:93:0c:14:da:5c:3d:7b:9a:d0:c6:04:6f:fd:
79:c1:2d:59:f2:c1:80:b6:69:29:ed:97:aa:c0:45:60:84:ac:
a3:ca:9a:f9:bb:1a:9c:c4:7a:f5:c3:31:1f:a1:46:41:cb:f2:
99:45:8f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:12:52 2025 by rpki-client