Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/l1JKfjSmdoSD-atd4ZWE1JeTJuA.roa
File: l1JKfjSmdoSD-atd4ZWE1JeTJuA.roa (raw, json)
Hash identifier: BmB8JatQfp2mQ4vWr7Bgl6YeJ1OakzxtLlN1iSUDIbs=
Subject key identifier: 97:52:4A:7E:34:A6:76:84:83:F9:AB:5D:E1:95:84:D4:97:93:26:E0
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019A4E74B63403D72A2E071E1A3BF737FEF3
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/l1JKfjSmdoSD-atd4ZWE1JeTJuA.roa
Signing time: Tue 04 Nov 2025 10:41:02 +0000
ROA not before: Tue 04 Nov 2025 10:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 185.17.248.0/24 maxlen: 24
213.159.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:74:b6:34:03:d7:2a:2e:07:1e:1a:3b:f7:37:fe:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Nov 4 10:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97524a7e34a6768483f9ab5de19584d4979326e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:4f:a9:03:79:59:2b:11:11:0f:22:d8:47:
2f:56:28:cd:5c:33:7c:17:6a:b9:a3:f1:66:0e:58:
91:6b:04:de:54:c7:3b:dc:a3:a4:7d:c0:ab:71:01:
9d:c3:62:38:bf:32:1c:9c:0c:8c:d8:4d:f5:d8:1a:
ad:f2:20:fb:b1:29:ec:3a:68:a3:de:4e:2a:83:c2:
1e:45:48:ce:ba:31:65:48:e2:48:b3:e8:2d:40:63:
28:43:0b:37:03:c4:77:62:45:23:fa:34:b2:7b:02:
a3:a3:ae:cb:d1:36:2f:c8:b0:0c:27:b7:c5:fa:46:
dc:4d:4c:b0:31:54:34:9c:af:5c:8d:39:7f:8c:c4:
4a:14:32:45:89:0a:ad:15:4f:20:09:b1:b6:c5:03:
3f:a0:34:7a:5f:8b:e2:c9:eb:32:0e:e1:9c:a8:b9:
c8:0e:fe:4b:ff:5e:9e:90:c6:b4:ca:e3:d4:61:be:
56:5c:07:84:a1:8b:c5:11:dc:82:aa:d9:22:e9:6b:
6c:2c:cc:a5:f1:67:62:aa:40:fa:3c:de:32:6b:d7:
89:29:03:af:e4:2c:93:58:1c:87:12:3b:ea:a9:47:
04:d0:83:5a:51:85:aa:73:b5:2d:72:72:6a:03:22:
f9:a4:1b:64:a3:3d:94:45:0b:65:ee:b4:9f:79:ec:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:52:4A:7E:34:A6:76:84:83:F9:AB:5D:E1:95:84:D4:97:93:26:E0
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/l1JKfjSmdoSD-atd4ZWE1JeTJuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.248.0/24
213.159.140.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d1:00:f8:f2:58:ff:da:c0:dc:dc:23:96:c4:ea:b5:17:3c:
ec:d9:79:a1:84:70:5a:3b:d1:22:53:9f:0d:99:27:58:9f:e9:
ca:2e:aa:f5:23:b0:42:01:35:92:c4:cc:30:33:cc:ca:0d:5e:
34:9e:e5:12:e8:0a:9b:79:d3:6f:37:0b:88:31:2d:04:be:69:
3e:1c:9c:18:83:07:94:1b:27:44:9b:8b:c4:4a:bf:94:b3:13:
98:a8:8c:27:f6:71:1b:a6:ed:b0:01:19:40:66:8d:fd:60:8f:
b2:6f:b5:7e:ae:82:bd:ab:32:29:3e:23:2d:7b:dc:c1:5b:4a:
92:e8:1b:41:ab:28:fd:be:3d:87:62:d3:9f:d5:6b:a2:00:eb:
96:51:79:e0:a0:15:b4:b4:c8:7b:07:48:f2:2d:92:ba:c8:77:
57:f9:82:4a:91:a4:34:72:68:96:4b:6f:fc:27:4a:e6:d5:02:
e1:82:92:77:bc:90:78:71:96:e1:1e:99:aa:91:91:19:e7:53:
a9:68:ab:6e:ab:34:a1:b9:5a:7e:ca:da:47:ab:0d:9c:09:ec:
0f:76:12:86:dd:41:30:99:5c:43:65:cc:27:bf:b8:90:79:eb:
15:12:84:3f:17:34:8c:0c:6d:30:27:21:ee:f9:d0:2a:34:b6:
9d:c7:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:01:51 2025 by rpki-client