Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/n6xqmighFn7Vnqg53_v_ZExOLTk.roa
File: n6xqmighFn7Vnqg53_v_ZExOLTk.roa (raw, json)
Hash identifier: Vp9Yf4e/IJuX8klPo+kJIwSDYNXo9hKqOgWcowfTXuo=
Subject key identifier: 9F:AC:6A:9A:28:21:16:7E:D5:9E:A8:39:DF:FB:FF:64:4C:4E:2D:39
Certificate issuer: /CN=5259796c5f60c55501e458008611623b5049d479
Certificate serial: 01983BE2F1C5C4E656530C0E8DB7044BEF26
Authority key identifier: 52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/n6xqmighFn7Vnqg53_v_ZExOLTk.roa
Signing time: Thu 24 Jul 2025 10:03:05 +0000
ROA not before: Thu 24 Jul 2025 10:03:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199711
IP address blocks: 185.48.20.0/22 maxlen: 24
2a01:95a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:e2:f1:c5:c4:e6:56:53:0c:0e:8d:b7:04:4b:ef:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259796c5f60c55501e458008611623b5049d479
Validity
Not Before: Jul 24 10:03:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fac6a9a2821167ed59ea839dffbff644c4e2d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:e5:92:22:8a:98:a3:2d:c7:e8:37:27:82:
4d:32:4d:17:33:ab:7a:b1:91:22:b0:3a:54:ce:e2:
ea:b4:1c:80:75:2c:7c:e9:8c:e4:3e:f3:83:ac:12:
8d:ff:59:1b:f4:a3:e8:a4:89:f2:10:eb:f8:58:4a:
03:30:c6:43:a2:22:58:5e:83:b3:24:66:0b:c8:e1:
d0:5d:71:db:10:c4:6c:f3:76:36:7f:d7:31:22:25:
cf:c4:a0:c3:94:45:48:69:70:2e:1a:10:6f:df:c9:
88:40:57:f2:93:0e:f8:8d:c7:78:c3:fd:b9:3d:72:
63:f7:1a:fa:8a:c4:74:05:88:7b:2a:f6:ef:f1:36:
22:cd:f0:81:55:cf:34:b9:c6:17:c7:f5:82:73:59:
9a:e8:e5:fc:45:37:c9:74:d0:f2:f9:b3:19:72:f6:
ff:8e:c9:ae:4d:73:b2:36:8e:8e:02:90:1a:db:3c:
f1:15:62:f4:0d:4e:fe:7e:2d:d7:4f:aa:bb:81:5b:
9f:36:a6:54:f9:98:5c:ae:4f:20:56:f2:85:a1:43:
a3:3e:2e:c4:a5:f5:a4:04:b4:de:8d:39:db:3e:dd:
3e:7f:b8:4c:9c:16:d7:85:26:9f:dc:49:04:b6:7a:
c1:71:84:d3:31:36:17:2f:09:1e:9d:30:39:06:0b:
72:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AC:6A:9A:28:21:16:7E:D5:9E:A8:39:DF:FB:FF:64:4C:4E:2D:39
X509v3 Authority Key Identifier:
keyid:52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/n6xqmighFn7Vnqg53_v_ZExOLTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.20.0/22
IPv6:
2a01:95a0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:99:42:a2:c5:25:10:56:c8:f1:d7:76:9e:87:74:31:01:50:
47:0b:4e:3c:fa:f0:94:cf:46:1b:36:bf:f7:33:86:d0:73:dd:
40:ca:24:d5:f8:f0:58:e6:68:a1:22:ef:47:a6:2b:29:da:bd:
93:dc:3a:07:ce:90:c6:40:f8:32:4f:3d:8b:6b:63:09:18:92:
bd:07:8e:04:c6:0c:26:82:47:03:53:c2:ad:4f:c2:65:d9:8a:
55:32:2b:0a:d7:02:fa:3d:03:15:7d:b0:18:39:14:10:f8:08:
54:6f:b9:d3:9d:ec:ad:5d:52:e8:1d:a0:61:90:66:35:bf:07:
7b:42:c1:d3:d0:c6:c2:af:20:bc:00:bf:62:41:15:b3:66:ed:
8f:2e:fa:62:27:f1:b6:4a:84:d9:2f:05:53:53:88:16:7d:de:
24:0c:c0:40:9b:c3:b2:11:9b:18:5e:19:5b:9f:cc:cd:a0:72:
32:a0:7d:ab:c2:2f:fa:75:12:4f:47:3b:76:86:ab:3b:4b:83:
f8:8a:c6:8e:8e:0e:da:5c:d2:b1:ed:37:b1:18:68:ff:b6:55:
24:5c:bd:d2:50:cb:bd:c5:04:42:9c:e3:ec:0b:1d:ca:f3:fb:
42:48:5c:b8:f8:77:7b:43:60:a5:d7:9c:27:28:fa:f0:ce:39:
ad:d6:68:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:46 2025 by rpki-client