Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SSlixdMz_-GFJdM1NrmZTl6U9Oo.roa
File: SSlixdMz_-GFJdM1NrmZTl6U9Oo.roa (raw, json)
Hash identifier: foJVkbrgi7eA8FKC5jf9GdBSbr/wMZc9cMtQABzPDmo=
Subject key identifier: 49:29:62:C5:D3:33:FF:E1:85:25:D3:35:36:B9:99:4E:5E:94:F4:EA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019A15AEB872BDA06C8C3149FD5F54B11EB5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SSlixdMz_-GFJdM1NrmZTl6U9Oo.roa
Signing time: Fri 24 Oct 2025 10:06:03 +0000
ROA not before: Fri 24 Oct 2025 10:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204416
IP address blocks: 92.38.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:ae:b8:72:bd:a0:6c:8c:31:49:fd:5f:54:b1:1e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 24 10:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=492962c5d333ffe18525d33536b9994e5e94f4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:34:a3:83:d7:e6:8b:49:50:73:9d:94:31:
43:db:3f:22:ab:94:5b:5c:7a:25:70:d6:67:34:93:
9d:af:bf:e3:b4:d5:75:d6:66:6c:6d:30:2e:33:4c:
4b:05:11:04:0e:29:a0:26:fa:c6:ea:64:4b:ee:37:
9a:7b:67:cb:19:12:bf:2a:ba:09:d8:b1:17:59:e7:
95:da:2e:7f:44:88:78:4a:2b:20:5f:79:5b:ee:7b:
4d:da:27:1f:a4:01:01:d6:98:b1:a0:4e:84:c0:f4:
c0:53:10:38:f4:c2:6a:8e:87:63:2f:fc:bc:db:30:
2c:d4:24:ac:1f:e9:3c:eb:7c:31:4d:4b:ce:8e:eb:
33:2f:a0:5e:54:48:e1:3c:71:ba:3f:81:87:d3:ca:
b3:86:43:6d:35:60:8b:7a:9b:4e:6f:a8:7c:59:6e:
7b:b9:13:a6:02:0a:26:5f:a5:34:61:72:b9:e3:7b:
77:09:0b:a1:51:04:53:ae:4d:1a:cb:db:0a:89:23:
d9:b7:b2:23:e2:11:05:b6:30:70:a5:45:2d:73:16:
06:60:4e:98:a6:0f:95:f3:49:e6:11:03:cd:8e:b6:
90:ea:0e:7d:e2:9b:0a:84:2b:65:6c:ca:7f:17:5f:
41:c8:fe:36:a8:1a:58:f7:77:2c:e9:4b:49:70:d3:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:62:C5:D3:33:FF:E1:85:25:D3:35:36:B9:99:4E:5E:94:F4:EA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SSlixdMz_-GFJdM1NrmZTl6U9Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f9:19:56:e3:68:77:ad:d9:bd:7b:72:a5:23:5c:23:1a:4f:
30:9d:c9:5f:6e:de:bd:87:d1:d3:13:4a:33:f9:6f:89:d2:c7:
3e:ff:0e:b0:bd:30:fd:8c:52:35:e4:87:67:ef:fd:06:5d:76:
0d:46:be:8e:90:4f:2b:01:c0:42:81:76:0b:df:59:a7:f3:f7:
3c:ec:55:d7:82:4e:c6:2c:a9:34:49:1a:dd:1e:a8:0b:a8:96:
32:3d:51:98:d7:5a:77:96:c2:aa:77:1f:f3:ea:4e:a8:c2:ec:
b0:8b:72:1d:b5:b3:83:70:14:22:86:94:2c:6f:70:94:9a:3f:
df:1d:b0:58:2a:fc:42:7a:bb:81:65:79:29:73:1c:a1:37:69:
67:d5:a3:cc:7e:d6:14:2f:c8:98:92:c0:b0:ab:cc:f3:22:8a:
64:2c:82:ce:e8:3f:b6:2d:a3:16:d3:72:49:89:b6:ef:bc:cb:
bf:ae:e8:d3:3f:56:08:b2:9c:bb:2b:d9:d1:5d:2d:81:a5:3c:
a4:9a:ee:e6:4c:79:14:5c:06:64:2b:95:3a:f4:93:d1:43:ba:
ce:9e:09:44:17:c4:79:ae:95:e6:e5:dc:80:83:fc:42:bf:b3:
62:7b:40:97:3a:d1:3d:5c:45:55:a3:95:37:21:93:9f:59:83:
80:d7:01:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:18:30 2025 by rpki-client