Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/S6ARzlctdDq96q94jWBMrmIylDo.roa
File: S6ARzlctdDq96q94jWBMrmIylDo.roa (raw, json)
Hash identifier: +viXZkt1nTpPkLH6AsY8vE6YPrHqcSXsoNT4zTZ7Xh8=
Subject key identifier: 4B:A0:11:CE:57:2D:74:3A:BD:EA:AF:78:8D:60:4C:AE:62:32:94:3A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A10ED1117B84A690D11F0C3E411426A0C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/S6ARzlctdDq96q94jWBMrmIylDo.roa
Signing time: Thu 23 Oct 2025 11:56:03 +0000
ROA not before: Thu 23 Oct 2025 11:56:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 2.56.101.0/24 maxlen: 24
45.85.160.0/24 maxlen: 24
45.86.12.0/24 maxlen: 24
93.190.245.0/24 maxlen: 24
103.114.42.0/24 maxlen: 24
185.126.66.0/24 maxlen: 24
185.242.244.0/24 maxlen: 24
193.23.253.0/24 maxlen: 24
193.27.10.0/24 maxlen: 24
194.33.29.0/24 maxlen: 24
194.62.31.0/24 maxlen: 24
213.139.217.0/24 maxlen: 24
213.139.218.0/24 maxlen: 24
2a0a:2d06:104::/48 maxlen: 48
2a10:7500::/29 maxlen: 29
2a11:efc0::/29 maxlen: 29
2a12:ef00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:ed:11:17:b8:4a:69:0d:11:f0:c3:e4:11:42:6a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 23 11:56:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ba011ce572d743abdeaaf788d604cae6232943a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:92:72:b4:c7:f4:ab:b5:b6:d7:70:b7:ba:
01:0e:31:bc:40:12:3b:49:f4:00:28:de:85:a4:38:
4a:71:94:d1:59:ec:d4:ef:1b:d8:e8:39:2f:e0:59:
9e:74:dc:39:7d:ae:f8:db:4d:2f:03:ca:ce:ee:7e:
4f:e9:81:e6:31:57:3d:f6:07:5b:ed:56:4f:1b:12:
0b:81:56:b7:10:4d:1c:93:c8:10:e6:e8:cf:cf:a5:
9d:25:15:64:9b:86:fd:14:1e:aa:d6:66:ab:04:95:
e1:49:0c:9e:a9:64:67:6e:78:50:a6:06:a9:83:7c:
8b:39:0a:f6:91:b6:c9:95:f0:52:45:45:2e:ee:cf:
5b:8c:1f:19:17:ad:47:87:70:b2:19:0c:f6:cc:1a:
02:11:52:83:72:8f:81:77:95:30:7a:12:59:9f:ef:
20:22:c3:e6:34:99:9e:db:7a:33:2e:c0:5e:20:73:
eb:f8:a2:b3:8b:89:15:80:80:4f:67:6c:d7:fb:e3:
20:50:05:d1:52:0f:95:f8:63:59:93:d6:fa:2d:b6:
cd:f1:6d:3f:78:d3:72:68:8e:9f:4c:89:a3:e6:bb:
5a:fe:f0:cf:b9:bc:f9:3d:97:4b:2b:2a:58:02:48:
12:6f:7a:59:fa:33:bf:f9:32:68:bf:7a:05:1c:da:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A0:11:CE:57:2D:74:3A:BD:EA:AF:78:8D:60:4C:AE:62:32:94:3A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/S6ARzlctdDq96q94jWBMrmIylDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.101.0/24
45.85.160.0/24
45.86.12.0/24
93.190.245.0/24
103.114.42.0/24
185.126.66.0/24
185.242.244.0/24
193.23.253.0/24
193.27.10.0/24
194.33.29.0/24
194.62.31.0/24
213.139.217.0-213.139.218.255
IPv6:
2a0a:2d06:104::/48
2a10:7500::/29
2a11:efc0::/29
2a12:ef00::/29
Signature Algorithm: sha256WithRSAEncryption
3c:93:e9:c4:32:05:db:b5:7c:f4:0e:5e:9c:a4:3a:11:cd:62:
d4:e2:d1:de:a6:d4:ba:0f:71:ca:ce:97:93:cf:f7:2a:fb:c9:
ba:7e:29:80:d6:e7:71:9a:4e:89:6e:05:b3:e2:9e:25:5a:23:
23:01:31:8b:ed:f5:da:4e:cc:aa:ef:99:58:c5:32:8c:2b:a2:
cd:72:a6:1b:ad:e6:b9:40:c0:86:5e:6f:23:5b:5e:86:c9:48:
a0:ea:c7:cd:ec:54:b5:a2:93:75:ad:dd:40:f0:bc:c3:40:7a:
d1:fd:67:1b:04:85:dc:51:0f:e0:94:2f:89:c5:d3:e5:96:b7:
1f:7e:0a:8c:3c:f6:de:80:18:0d:10:91:cc:77:7f:2e:b6:b2:
83:1e:67:13:c8:47:09:59:f5:11:7c:71:28:c8:89:62:05:bf:
7b:88:72:83:43:c5:9c:0a:9c:ff:77:30:ee:35:71:30:64:09:
99:3b:d8:a6:bf:0d:c2:08:28:b6:0b:98:3f:6a:27:65:22:7b:
68:c8:64:05:0b:f9:7f:80:bb:8b:a3:63:4b:92:c8:d5:2b:7f:
5a:1e:2f:df:78:48:e3:db:f6:84:a7:4b:1a:c6:24:10:c5:89:
e8:00:25:83:5e:1b:84:e6:74:9b:f1:cc:5e:7a:80:26:76:dc:
5b:74:a5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:03:17 2025 by rpki-client