Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/2sQZrECcWQMz0yagYBj0rHZBNaA.roa
File: 2sQZrECcWQMz0yagYBj0rHZBNaA.roa (raw, json)
Hash identifier: ifVTyTkvryP5hww8yzaeOkfdrWnESnsheNSv99i7IM8=
Subject key identifier: DA:C4:19:AC:40:9C:59:03:33:D3:26:A0:60:18:F4:AC:76:41:35:A0
Certificate issuer: /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial: 01987EEBF28130D67922F9C7F1ED5B0A3298
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/2sQZrECcWQMz0yagYBj0rHZBNaA.roa
Signing time: Wed 06 Aug 2025 10:27:28 +0000
ROA not before: Wed 06 Aug 2025 10:27:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207092
IP address blocks: 185.193.12.0/23 maxlen: 23
185.193.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:eb:f2:81:30:d6:79:22:f9:c7:f1:ed:5b:0a:32:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Validity
Not Before: Aug 6 10:27:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dac419ac409c590333d326a06018f4ac764135a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:f2:85:69:f7:6f:64:57:ab:dc:f4:b1:db:
19:dc:83:05:fa:90:9e:a0:0c:68:3a:8f:18:cf:da:
5e:87:11:86:65:30:d7:48:01:3b:04:a5:ab:f2:6b:
d1:5d:01:cc:93:86:a6:bc:4e:1e:b9:14:f5:fa:f9:
96:d5:49:78:58:60:04:4b:ce:c4:51:ad:42:fe:12:
32:61:ae:af:91:78:04:01:8f:bc:d2:b1:20:3e:3c:
4a:05:db:8d:29:d8:d1:fd:ac:cf:4d:1e:a3:a2:60:
57:fb:25:88:31:7b:d0:41:c5:57:9e:d8:85:7b:72:
06:be:2c:31:7b:a4:ad:7d:c4:8d:b7:ed:aa:8f:a4:
5c:3b:6e:ea:30:46:f8:ec:a7:a5:b1:89:b0:de:4c:
1b:74:ba:fa:5c:d8:6f:cf:9a:2f:26:65:02:29:e2:
ce:33:a2:e6:ea:83:5d:ce:6f:89:ad:e4:de:ee:ed:
be:8a:05:2f:75:3e:ba:96:d6:0e:18:83:d1:23:c1:
be:4e:0e:05:01:b8:0e:7e:20:22:7c:c9:a2:48:f1:
33:06:93:31:1c:88:1a:78:99:c1:b2:52:76:c1:88:
d8:2a:4c:03:38:44:29:2f:1e:b6:00:97:88:ef:86:
83:26:8d:fd:c1:04:74:47:60:31:ac:e0:66:dc:f7:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C4:19:AC:40:9C:59:03:33:D3:26:A0:60:18:F4:AC:76:41:35:A0
X509v3 Authority Key Identifier:
keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/2sQZrECcWQMz0yagYBj0rHZBNaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.12.0/23
185.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
53:39:2d:e7:7f:fb:b8:58:f2:76:bc:53:5e:8a:1d:e6:cc:58:
49:68:a1:9c:d3:44:85:74:51:f0:1a:3c:59:d4:f4:10:84:b5:
66:d4:43:e7:8a:ed:8e:68:1c:9d:e1:04:63:92:62:31:0d:5a:
94:24:37:ea:20:00:64:00:57:5b:f1:1f:b3:55:4f:69:58:91:
a7:b1:2a:39:9a:d4:f4:22:de:8c:f0:3a:0d:ed:0a:4f:a8:63:
9c:23:84:53:0e:17:47:67:a7:29:1e:27:e3:08:80:6c:6e:55:
43:a9:71:24:3e:e8:e5:0d:9a:0c:ea:57:63:1c:bf:59:a1:31:
ee:d8:ae:54:03:49:ec:68:5a:b3:aa:fc:a9:43:37:62:ab:d1:
c5:4a:9a:7f:f1:d5:5c:35:2f:be:a1:80:71:52:93:5f:c9:f5:
bf:ba:f6:87:c2:cb:bb:98:a0:8d:a6:06:c6:1e:a6:dd:76:d0:
b0:19:cd:d9:94:db:31:47:85:a5:c9:f2:a9:54:da:89:35:1f:
64:c6:4a:3a:53:2b:05:66:59:e8:a1:f1:91:07:48:2b:06:24:
71:4b:a7:88:67:73:94:68:46:27:98:a3:57:88:31:2f:5c:4b:
9b:58:8d:53:65:a8:2a:5b:a3:6a:54:51:cc:91:32:18:7a:cc:
1c:fc:1e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:47:17 2025 by rpki-client