Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/SOOUfYeqqZHuoh2Gony2KLPyjUg.roa
File: SOOUfYeqqZHuoh2Gony2KLPyjUg.roa (raw, json)
Hash identifier: 3qFCFMkMfnTPWsf6Qhr45sO5P402Ny67zVPmMEC99q8=
Subject key identifier: 48:E3:94:7D:87:AA:A9:91:EE:A2:1D:86:A2:7C:B6:28:B3:F2:8D:48
Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial: 019A3A0DA18DF317D4CC85C604F53AA288E7
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/SOOUfYeqqZHuoh2Gony2KLPyjUg.roa
Signing time: Fri 31 Oct 2025 11:36:03 +0000
ROA not before: Fri 31 Oct 2025 11:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207108
IP address blocks: 45.154.197.0/24 maxlen: 24
185.139.7.0/24 maxlen: 24
2a12:ab46:5341::/48 maxlen: 48
2a12:ab46:5342::/48 maxlen: 48
2a12:ab46:5343::/48 maxlen: 48
2a12:ab46:5344::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:0d:a1:8d:f3:17:d4:cc:85:c6:04:f5:3a:a2:88:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Validity
Not Before: Oct 31 11:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48e3947d87aaa991eea21d86a27cb628b3f28d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:82:10:1c:0d:0b:8c:60:17:fc:75:93:bf:
24:96:62:4b:d6:b3:c6:20:40:1b:7a:e3:a8:19:73:
0f:dc:b6:2b:5a:c3:e7:62:8b:cc:7b:84:12:ed:f3:
74:9f:a2:45:cc:61:93:ab:b1:92:89:91:cb:b0:3c:
f9:ee:ee:15:f6:59:f6:36:9e:a4:14:d2:eb:d2:01:
8f:2a:48:84:b5:bc:1d:37:b8:cc:52:fb:ab:1a:d4:
01:6e:91:af:d5:23:3e:4e:58:d3:86:8a:5e:f3:6f:
61:ea:23:a6:09:82:0b:e9:bf:1e:b7:35:ed:00:1d:
cc:04:99:78:bb:d8:9a:98:f2:cd:27:6b:e5:9e:3f:
3e:5c:c5:28:77:f9:58:2c:4e:bf:57:59:22:2c:2a:
1c:2f:34:fb:23:ae:3c:3d:dd:c1:8e:07:4a:5a:dc:
87:03:3e:14:7a:22:8b:c4:68:91:6f:cf:cc:98:05:
94:95:7b:2e:b3:22:f6:08:8e:60:b0:ba:12:4c:4f:
a6:33:3c:d8:d8:4a:c5:34:db:b4:4b:55:be:a1:25:
c4:ce:8c:2b:bf:7f:3e:da:4f:3a:b0:67:39:f0:db:
75:63:55:9e:95:2f:97:3a:f2:b0:68:6d:5e:8b:9c:
c7:d0:94:e5:3f:56:a8:56:ac:af:c0:b4:a8:08:e6:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E3:94:7D:87:AA:A9:91:EE:A2:1D:86:A2:7C:B6:28:B3:F2:8D:48
X509v3 Authority Key Identifier:
keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/SOOUfYeqqZHuoh2Gony2KLPyjUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.197.0/24
185.139.7.0/24
IPv6:
2a12:ab46:5341::-2a12:ab46:5344:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:3a:46:09:01:09:2c:6d:2c:29:86:32:80:2e:06:a9:ba:da:
87:55:13:6e:df:d6:9c:ea:1f:37:3d:95:68:5f:7b:e6:d9:10:
a2:5a:1d:b2:39:64:d5:b3:b7:1d:a2:7e:35:31:aa:62:79:1a:
2c:82:35:ea:b4:9a:11:d5:cf:41:ec:8c:dc:13:92:10:d9:b0:
ff:ea:65:ef:12:1d:88:89:81:25:f5:3a:f6:11:78:b1:b2:a6:
43:09:3f:49:48:25:3e:25:1b:aa:11:a8:40:70:32:7f:98:b8:
0c:a3:3a:aa:73:86:b2:ca:76:bb:6a:f3:ba:de:a5:87:1b:9e:
85:1f:de:12:6f:29:7b:72:bd:20:f8:ef:9b:21:bd:21:ca:98:
4e:83:f6:fb:99:60:c4:46:4e:6d:c8:e8:58:0b:a3:e8:eb:ce:
24:f7:1a:7d:e2:57:5c:7b:54:da:db:a0:56:50:b4:04:37:e1:
d3:45:54:3f:ce:ef:c8:27:6d:ea:eb:5c:3f:e2:1e:06:7c:38:
70:d6:43:7f:99:ee:46:51:ef:64:f4:cf:1f:ca:ba:02:64:f2:
3b:4f:ea:61:b5:2c:cb:e0:9c:0a:65:9a:2e:5f:da:8e:b3:e1:
92:55:a5:c6:ee:18:dd:c9:38:79:a8:23:6c:6a:fd:34:c8:56:
0e:8c:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:06 2025 by rpki-client