Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/s_shm9YkkFkzK1BPZaTzoEk1UFM.roa
File: s_shm9YkkFkzK1BPZaTzoEk1UFM.roa (raw, json)
Hash identifier: s6ACGYqES9X/3Ar888X3YakUPHplYVZabmf5m4V68uA=
Subject key identifier: B3:FB:21:9B:D6:24:90:59:33:2B:50:4F:65:A4:F3:A0:49:35:50:53
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 019A3BF85A531AF6CE5284BCB4576427CDE4
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/s_shm9YkkFkzK1BPZaTzoEk1UFM.roa
Signing time: Fri 31 Oct 2025 20:32:02 +0000
ROA not before: Fri 31 Oct 2025 20:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27176
IP address blocks: 81.92.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3b:f8:5a:53:1a:f6:ce:52:84:bc:b4:57:64:27:cd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Oct 31 20:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3fb219bd6249059332b504f65a4f3a049355053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:e0:4e:aa:84:90:80:c2:09:dd:17:81:a8:
18:b1:94:32:a7:02:b6:a7:0e:68:a0:e6:2d:a9:cf:
6e:6a:9c:40:2c:f8:d9:90:8a:b3:0f:2f:c9:ec:92:
d5:8e:a9:15:6a:67:ed:8d:f7:74:54:b1:20:10:2c:
ce:1d:e0:36:9e:0f:ed:31:52:c8:b7:f0:b7:d8:21:
02:49:29:ec:58:e8:46:96:24:00:2e:91:36:9f:f3:
47:69:2b:56:69:0d:05:52:17:96:51:fd:81:c1:b6:
87:fa:4e:7a:49:ca:c5:c1:5b:ba:d1:50:50:97:25:
2c:b2:8d:eb:1b:01:77:94:40:62:7f:b9:bf:4d:92:
b5:1e:8c:ee:95:49:ee:2f:fc:e4:96:30:bf:75:86:
44:1f:15:3b:13:67:03:00:01:14:91:d2:ee:80:b9:
aa:3c:d2:c4:b4:ec:cd:f3:b8:9c:76:5d:7b:bc:61:
f5:fc:06:67:00:68:8a:42:a1:05:80:71:21:06:0b:
69:56:3a:eb:15:11:b5:31:f8:95:98:d8:7c:aa:41:
ef:8f:90:b8:ab:1f:85:c5:ab:65:00:44:66:60:e4:
47:6d:a3:2e:c6:03:ef:8d:e4:6b:a6:57:6e:e6:28:
e1:8d:e1:3b:3d:5b:a4:59:f0:b7:f1:c3:27:3a:22:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:21:9B:D6:24:90:59:33:2B:50:4F:65:A4:F3:A0:49:35:50:53
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/s_shm9YkkFkzK1BPZaTzoEk1UFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.219.0/24
Signature Algorithm: sha256WithRSAEncryption
41:60:16:99:5f:cd:33:63:ff:ea:fd:c2:e2:4d:77:21:e4:c3:
1c:ce:99:bb:b2:64:16:19:70:0a:ca:12:b2:53:31:8e:a1:83:
5e:24:ce:d9:02:a1:d3:62:9a:00:f7:63:16:3a:19:f3:d5:ff:
b5:e0:bd:9e:e1:3f:34:65:eb:5a:64:f3:fe:fd:e0:74:d8:ef:
af:51:5d:d4:94:6d:58:7c:05:7f:21:9f:10:25:aa:81:b9:a8:
f9:da:3c:19:85:2e:ea:7c:ba:17:35:6f:9a:07:2e:87:d7:69:
86:70:ea:3e:5b:1d:7d:63:eb:3c:58:82:c2:09:c4:bf:37:4f:
ea:68:ba:1d:30:72:6d:6c:21:fe:90:86:01:39:cd:56:6b:07:
5c:43:26:d4:f1:67:00:64:b7:bf:5d:48:29:e0:fa:11:94:8b:
0e:79:9f:4b:c5:d2:67:a1:22:70:45:88:01:b8:f4:ae:35:98:
fa:eb:2c:85:4c:16:a0:58:7c:f5:e0:15:0a:f2:f1:77:1d:b2:
7c:a9:c1:8a:61:cb:2d:bb:6a:d0:f7:bd:d9:62:5d:63:b4:eb:
1a:27:7d:7d:13:66:39:c0:3b:42:36:ea:c8:de:01:b8:a6:23:
8b:a7:5d:ab:66:95:66:f7:24:50:48:30:82:24:ea:3c:13:c7:
7e:a9:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:36:58 2025 by rpki-client