Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SCbH1zR7wFC1SajhXKRubOf7nig.roa
File: SCbH1zR7wFC1SajhXKRubOf7nig.roa (raw, json)
Hash identifier: chBxOvijY1XUuAg5ZKhOX95t3vO1szp9J18Un+mu5Ro=
Subject key identifier: 48:26:C7:D7:34:7B:C0:50:B5:49:A8:E1:5C:A4:6E:6C:E7:FB:9E:28
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019A26DEBDC9F6C82334FEF1D74900A12135
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SCbH1zR7wFC1SajhXKRubOf7nig.roa
Signing time: Mon 27 Oct 2025 18:12:03 +0000
ROA not before: Mon 27 Oct 2025 18:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197963
IP address blocks: 185.229.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:de:bd:c9:f6:c8:23:34:fe:f1:d7:49:00:a1:21:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 27 18:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4826c7d7347bc050b549a8e15ca46e6ce7fb9e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:65:83:26:a4:fe:71:e3:51:fb:86:74:03:
cb:ec:da:48:9e:81:47:f4:7f:3b:db:14:d7:a5:f0:
b9:73:f5:21:78:da:21:37:87:58:69:7e:59:50:27:
b0:ef:ac:8b:77:0d:40:66:1b:21:8b:50:f9:41:bc:
d6:db:00:c0:d4:53:cc:ee:7e:c9:fe:32:b7:cf:fe:
de:53:db:48:0f:4a:14:f0:2e:ec:af:ec:78:9d:0f:
4f:e4:83:e2:d6:e8:7e:37:97:56:dc:e4:79:3e:67:
e7:0c:4e:1f:85:d7:e1:fb:5b:e8:09:b0:d2:ed:4f:
66:05:28:f4:b6:70:d6:ad:22:d6:a2:aa:48:b6:9e:
37:4a:df:07:fc:d8:ac:8d:e1:7e:7e:62:f9:92:04:
23:82:01:7c:70:a4:6f:42:a5:35:7b:a7:f3:ff:d9:
64:3b:14:05:c9:81:c2:c1:bd:f7:10:a6:e0:bc:fa:
3b:2c:bd:b7:de:e3:24:88:73:18:bf:08:8d:93:9c:
03:1f:b9:3c:b9:7d:6b:9b:30:1f:e6:3a:ad:57:ce:
65:cf:9b:15:a4:ef:88:c3:90:62:79:0c:a6:8c:2f:
6d:75:9e:64:83:fe:4f:07:84:5a:14:4a:ec:f6:d0:
8f:d3:9d:48:a2:e2:ab:f4:7a:d5:07:92:d4:38:1b:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:C7:D7:34:7B:C0:50:B5:49:A8:E1:5C:A4:6E:6C:E7:FB:9E:28
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SCbH1zR7wFC1SajhXKRubOf7nig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:22:8b:23:c4:92:36:4d:35:c3:13:1b:a7:d0:e7:24:92:61:
27:5e:cd:61:84:58:39:5d:35:22:4a:04:68:84:66:0c:7f:b8:
c2:91:a6:f0:1b:a2:62:85:fd:08:16:0f:c9:80:4f:08:b1:e4:
0c:9f:f8:2c:bc:84:28:bc:01:38:a8:62:50:b6:1d:e1:ba:3c:
d6:3f:11:b1:d6:80:ba:31:06:d5:8b:46:fa:84:10:67:4d:06:
a8:c9:9a:dd:65:36:18:1a:bd:07:68:03:e8:c4:01:a7:21:23:
6a:32:cf:af:53:04:e9:8b:d8:66:46:d0:b1:5e:ac:62:89:1f:
44:e9:62:60:ea:4b:da:c7:71:43:77:98:45:49:58:dc:f5:78:
1a:c0:86:21:94:d0:ed:0d:1c:cd:78:7a:b9:f4:d3:57:f5:e5:
a1:2c:94:82:5f:f2:3c:4f:88:aa:be:a3:5d:8e:ac:d4:6c:2b:
57:cb:3f:6d:b1:09:5c:19:46:6c:72:bc:2b:2b:fc:ef:ea:05:
c5:c5:ec:1a:a4:8e:1a:6b:b8:56:fd:63:46:ee:6b:c8:e0:51:
4a:ae:9e:ac:58:2d:65:a4:be:d7:42:e1:a0:46:9f:da:e4:17:
6b:56:1c:6a:19:e2:bc:3d:74:5d:3d:79:39:a8:41:b5:80:43:
71:ec:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:51:29 2025 by rpki-client