Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/SZM5Er5wXxnioT_Zht4nD9nQ-CM.roa
File: SZM5Er5wXxnioT_Zht4nD9nQ-CM.roa (raw, json)
Hash identifier: tNdmo2zVK8UIM/9GRfu3w41GIKyyMUBWbfqHp+BP3KQ=
Subject key identifier: 49:93:39:12:BE:70:5F:19:E2:A1:3F:D9:86:DE:27:0F:D9:D0:F8:23
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019A41BC301E28DD81CB0537010DB86A4EC6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/SZM5Er5wXxnioT_Zht4nD9nQ-CM.roa
Signing time: Sat 01 Nov 2025 23:24:03 +0000
ROA not before: Sat 01 Nov 2025 23:24:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28459
IP address blocks: 45.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:bc:30:1e:28:dd:81:cb:05:37:01:0d:b8:6a:4e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 1 23:24:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49933912be705f19e2a13fd986de270fd9d0f823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:08:de:68:3d:78:17:f4:3d:57:e0:72:8d:
a8:cc:56:f9:a0:86:1f:bd:4f:2c:b2:89:c0:82:f6:
57:01:3f:d7:94:d0:3d:cc:fc:a4:20:52:1b:ec:9e:
cd:9d:ce:ad:45:15:11:ef:26:7e:5b:9b:a5:b5:69:
2d:2e:de:0f:ef:44:76:9d:13:1f:d7:8e:c5:51:18:
ce:fd:4c:f8:7a:8e:0e:f1:b8:40:9a:f3:bd:bb:31:
09:a1:b0:7f:a0:60:2b:bc:a1:75:b3:f7:3f:7e:8a:
ab:3c:8c:96:73:2e:17:23:ed:9e:a0:82:1b:30:c3:
3a:e1:c4:13:55:0c:2c:30:c5:1c:1b:96:08:9b:f1:
a3:7e:98:50:53:4e:04:38:a1:ad:bf:74:25:5e:6c:
7b:d0:d2:10:e9:7f:83:06:bd:2e:fa:2a:02:77:c9:
00:4e:a5:8b:cd:4a:2a:80:00:bd:b6:d7:2b:c3:18:
76:4b:a4:e5:41:b1:c5:e5:e9:cd:75:d0:0b:0c:b4:
54:c9:b0:db:b8:aa:0a:61:a0:04:38:72:5c:40:b0:
94:5b:ac:4d:49:5d:79:c7:a7:b1:4c:23:76:38:46:
96:74:9d:33:da:e5:c7:3b:e1:70:88:d3:a5:63:6a:
ae:54:61:45:6e:51:22:15:61:bb:bf:62:19:be:b2:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:93:39:12:BE:70:5F:19:E2:A1:3F:D9:86:DE:27:0F:D9:D0:F8:23
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/SZM5Er5wXxnioT_Zht4nD9nQ-CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9f:9b:41:a6:9e:02:1b:c9:fa:22:32:2e:0e:4a:0c:81:9a:
2b:1c:87:5b:ca:50:13:e8:60:77:95:b3:5a:3b:71:af:d6:44:
5c:3e:2e:b9:34:fb:a4:e8:6d:fe:92:18:e0:b1:9c:a7:db:fd:
8e:9c:3e:19:78:1a:1c:53:8b:9d:94:e3:9e:a6:cf:06:39:c4:
e8:f9:2f:e2:cc:af:c4:6a:16:ed:a1:f7:ca:31:23:5a:98:1a:
e7:24:3b:0c:fd:38:e9:fa:13:d7:08:20:13:21:3a:6c:35:79:
af:16:94:92:06:d0:84:a0:b0:98:57:84:8e:bb:97:80:4b:4f:
4e:81:ce:3f:55:39:45:b4:a8:d4:d7:34:04:dd:65:94:8c:04:
fd:4f:93:b9:b1:f8:18:9e:d4:45:67:95:82:25:da:e8:df:6b:
7c:bb:77:31:6a:af:fa:fb:fb:bc:32:bb:90:2f:30:09:7a:7a:
fb:0b:14:9f:c5:5a:66:73:04:90:a1:29:ab:52:34:fb:44:df:
96:fd:aa:b8:48:7c:54:aa:79:0b:3a:01:83:c8:d0:7b:ce:50:
f8:c5:c8:40:0e:73:76:10:93:b9:b0:97:8d:dd:66:00:af:e1:
ff:5f:88:1c:da:63:5e:68:e7:6a:3a:a1:9d:95:70:62:f4:da:
86:82:f7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:03:54 2025 by rpki-client