Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/so0qnaePVf-1j6Sm9a19tpcCNaQ.roa
File: so0qnaePVf-1j6Sm9a19tpcCNaQ.roa (raw, json)
Hash identifier: ESTQ2RxrQEjdpeqqeqULztxXVQTtL+3+1LYMpfup6IQ=
Subject key identifier: B2:8D:2A:9D:A7:8F:55:FF:B5:8F:A4:A6:F5:AD:7D:B6:97:02:35:A4
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019A3F3228FCF584AE9AC88D6A962A6D8A07
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/so0qnaePVf-1j6Sm9a19tpcCNaQ.roa
Signing time: Sat 01 Nov 2025 11:34:03 +0000
ROA not before: Sat 01 Nov 2025 11:34:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.193.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:32:28:fc:f5:84:ae:9a:c8:8d:6a:96:2a:6d:8a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Nov 1 11:34:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b28d2a9da78f55ffb58fa4a6f5ad7db6970235a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:3a:cd:f9:a6:ec:7c:b4:23:b0:b7:3b:05:
b6:ed:b6:5f:29:4f:17:16:19:c3:3a:cc:cf:d5:29:
7b:11:0a:c9:d4:7a:c5:ba:4e:89:f9:cc:48:d6:f8:
9a:85:30:4b:5a:a8:f9:1b:dd:7a:a1:5e:27:3a:92:
6b:eb:14:22:56:5e:d5:d9:04:62:8d:07:71:f9:29:
79:34:d9:64:ca:53:87:40:10:aa:7c:c4:48:b6:77:
45:39:fb:1d:9e:62:36:bd:73:95:02:96:3f:bb:74:
9b:df:af:49:7f:3a:0e:c0:0e:8c:2c:73:53:8d:74:
df:15:36:63:b7:9e:59:80:a3:37:43:50:b2:ca:a1:
1a:f6:ca:d6:66:86:ad:e7:32:98:d9:fb:bc:55:15:
ff:51:20:98:b4:3b:d5:d5:94:35:65:54:ed:8b:43:
4e:14:ea:5d:e0:b8:a5:05:bc:04:86:60:27:0b:02:
fe:ea:ed:c2:f2:12:5d:59:50:5a:f8:32:98:7c:b9:
7c:13:72:e6:0a:3f:11:a7:8f:8a:11:83:ec:1e:7d:
df:7b:a8:98:ca:14:18:80:ca:1d:d2:b4:08:eb:f3:
db:44:ef:84:d1:37:44:bd:ef:55:17:5b:74:ef:ab:
b7:f9:48:16:10:dd:8d:0b:97:cc:14:4b:62:9d:be:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8D:2A:9D:A7:8F:55:FF:B5:8F:A4:A6:F5:AD:7D:B6:97:02:35:A4
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/so0qnaePVf-1j6Sm9a19tpcCNaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.233.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:38:dc:c7:e4:1d:7f:11:ef:65:be:98:1c:94:c6:cd:98:e3:
0f:76:16:13:8a:dd:cf:1d:4c:2f:ac:03:7a:d5:38:e3:de:75:
f8:19:df:5d:8e:24:07:62:28:97:e0:b5:2f:d8:3f:a4:d3:e9:
cd:92:2c:50:14:ec:7b:9b:a2:ac:b5:15:66:9f:c5:f8:8e:40:
b1:09:2e:a7:95:92:e2:9f:d7:c8:84:93:e1:09:2c:62:bd:16:
9e:86:24:b6:2c:09:f2:4f:57:6c:9f:54:57:14:ec:d4:a8:1c:
c6:a0:5e:8e:12:78:78:29:39:22:d0:14:28:bb:d6:d3:6c:92:
b0:e2:50:37:3b:9b:59:f6:01:2d:83:42:b9:f2:0e:23:19:c3:
ef:a4:69:21:32:32:02:16:aa:54:d1:ef:b0:7b:39:2e:37:c2:
5f:8b:6e:f6:30:b0:01:3d:70:40:b1:3f:28:c6:a3:ff:c1:ae:
be:9e:cf:44:20:c5:e1:52:ef:d2:78:29:b1:54:65:83:78:db:
20:f8:c3:a1:2d:05:bd:a7:1e:c6:73:91:fd:35:e9:03:b3:82:
dd:c9:bf:5d:66:29:60:a0:a6:7f:be:04:51:ca:0b:6b:29:30:
ea:4c:cb:71:ba:ab:d2:c4:67:29:6a:67:99:2a:16:5a:be:50:
24:d0:68:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:21:13 2025 by rpki-client