Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/svoR0cRb1Ihebi7quN7_XQpdL7U.roa
File: svoR0cRb1Ihebi7quN7_XQpdL7U.roa (raw, json)
Hash identifier: FPcptyRdxs/x9VdKGmFyX9w4ws1CV2SbTs2IXTvhgNs=
Subject key identifier: B2:FA:11:D1:C4:5B:D4:88:5E:6E:2E:EA:B8:DE:FF:5D:0A:5D:2F:B5
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 019A49520433C9C2803B2FFB1566060CAFF7
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/svoR0cRb1Ihebi7quN7_XQpdL7U.roa
Signing time: Mon 03 Nov 2025 10:45:03 +0000
ROA not before: Mon 03 Nov 2025 10:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31519
IP address blocks: 2.58.16.0/22 maxlen: 22
195.26.20.0/23 maxlen: 23
2a09:e0c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:52:04:33:c9:c2:80:3b:2f:fb:15:66:06:0c:af:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Nov 3 10:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2fa11d1c45bd4885e6e2eeab8deff5d0a5d2fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:0f:52:03:f9:4a:57:1d:be:44:8a:1e:2d:
9a:25:ec:46:ed:2d:28:f7:93:5a:64:e9:5a:e0:3f:
ec:a5:b1:aa:b7:1b:00:c0:64:b3:7e:04:5e:df:10:
26:aa:e5:88:b8:10:c5:63:26:77:f3:31:7c:a3:b4:
d0:6f:a6:ab:f6:83:34:52:61:a1:fa:9e:88:44:6d:
d4:e0:52:1a:15:c9:c5:e7:ec:00:53:10:ca:d6:19:
32:8e:44:60:90:1e:50:d9:e1:19:53:c7:64:06:be:
ff:c2:5c:55:21:71:04:4a:7b:75:d4:1e:e4:d0:25:
8e:fe:10:f9:cb:77:a0:3a:9f:4d:7a:0a:50:e1:37:
57:e8:3c:73:24:bb:e9:ea:cb:a0:b0:50:45:43:21:
24:ea:62:74:75:d2:5c:0a:e1:25:a8:fb:ab:40:c6:
d7:4d:79:65:bf:e2:39:b7:f3:b9:3f:f0:06:fb:a7:
1c:1c:21:8e:04:18:c5:a7:64:9f:11:8b:0a:c8:d8:
82:cd:26:c1:76:bb:0e:86:7a:94:63:96:3c:17:79:
bd:f1:57:18:5f:6e:61:4b:cc:06:d5:ab:be:7e:37:
a7:81:9c:3f:1d:9d:15:9a:45:61:98:4f:4e:5c:f4:
0a:70:e3:2c:af:53:fa:37:fd:1c:85:6e:cb:c1:a9:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FA:11:D1:C4:5B:D4:88:5E:6E:2E:EA:B8:DE:FF:5D:0A:5D:2F:B5
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/svoR0cRb1Ihebi7quN7_XQpdL7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.16.0/22
195.26.20.0/23
IPv6:
2a09:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:35:42:d6:80:1a:78:4b:76:20:86:6c:9a:0e:be:ec:b5:e0:
dc:ed:ed:39:29:c2:a0:2f:d2:37:68:da:15:ae:51:69:7c:e7:
a4:d6:5a:4d:5e:f7:ab:16:c6:74:03:8d:ef:da:5d:e4:2b:96:
01:ed:49:6c:0c:f8:8b:97:53:ad:ef:9f:53:83:eb:4b:67:22:
cf:f8:b6:3a:b9:b9:44:43:bf:d2:c7:91:9d:f5:cf:e8:68:48:
39:4e:c3:af:4d:29:23:65:50:d8:c3:24:a8:5a:d7:26:37:67:
2f:a9:5b:76:7b:41:4f:eb:7b:d6:92:53:f6:74:e6:d8:9a:72:
f5:8b:35:79:7e:3a:d8:51:9d:1f:76:f0:65:9d:aa:ca:8b:ae:
9c:e6:72:98:ef:17:86:c6:55:66:07:92:70:e8:f6:a1:d5:66:
49:bf:c7:5b:cb:26:b1:b3:97:6a:ba:07:a7:77:3f:13:a8:3c:
09:9e:a7:59:d5:b4:dc:dd:bc:7a:67:a7:9d:a4:49:62:61:43:
af:64:38:e4:ad:b6:18:60:de:49:7e:c5:a3:3d:e3:4c:83:1e:
2b:6b:6b:f2:57:82:0a:b0:88:77:5b:9c:2d:98:2e:db:ff:f1:
00:a5:a7:ed:b1:eb:3f:e7:68:63:8a:d9:f9:8e:44:b8:bb:e1:
91:b1:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:05 2025 by rpki-client