Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/sejuuPdZzCrTGWMQL8q6fL6s1bI.roa
File: sejuuPdZzCrTGWMQL8q6fL6s1bI.roa (raw, json)
Hash identifier: Ijpq2YAMnAhyxDacqfun38Wp4QxYF9meZt2cnqXBEVs=
Subject key identifier: B1:E8:EE:B8:F7:59:CC:2A:D3:19:63:10:2F:CA:BA:7C:BE:AC:D5:B2
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 0197D0C4BDCD71FD0BF2C089FAEF32EC2D85
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/sejuuPdZzCrTGWMQL8q6fL6s1bI.roa
Signing time: Thu 03 Jul 2025 14:50:43 +0000
ROA not before: Thu 03 Jul 2025 14:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205631
IP address blocks: 185.95.30.0/24 maxlen: 24
2a05:1500:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:c4:bd:cd:71:fd:0b:f2:c0:89:fa:ef:32:ec:2d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jul 3 14:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1e8eeb8f759cc2ad31963102fcaba7cbeacd5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:53:86:21:05:01:d6:cf:a9:67:84:b7:48:
5b:e8:32:c3:2e:69:2f:ea:24:92:a8:b4:dd:0d:6d:
2c:e5:b2:e6:28:26:34:d0:30:e6:b0:48:80:3c:6b:
47:45:b1:2d:9b:3d:a4:56:34:53:ac:c3:92:5a:75:
47:1f:ce:74:03:52:bf:12:e1:e3:ca:af:ec:e5:a5:
ae:b0:8f:24:8c:f7:99:48:28:0b:3d:0e:89:e7:4b:
82:2b:31:8c:57:a7:85:90:3f:bb:97:c6:f8:74:ff:
05:11:1d:94:49:af:05:e8:a8:c5:68:f6:d8:a1:d6:
67:5c:02:d1:52:8a:31:c1:a2:0b:c9:75:f2:11:87:
e1:fc:99:a3:a8:52:60:38:b9:6a:fc:13:6a:be:ef:
9c:d8:68:fe:07:89:35:88:2a:f7:c0:82:20:ce:48:
4d:1a:b1:23:08:6d:62:a9:a0:15:9f:7f:b3:5c:e7:
df:07:06:78:32:59:da:e0:bd:4e:4d:b8:a0:0d:c3:
06:2c:98:e8:28:3e:ea:5a:7d:11:ab:5c:26:cb:e3:
fb:28:b9:c3:95:ad:2f:38:ec:70:7a:6b:9d:ed:b4:
dd:40:3f:62:7d:86:e0:06:8f:68:41:fe:e6:51:44:
eb:ff:0a:9d:cc:1a:4d:30:81:63:c4:2d:e5:9e:e5:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E8:EE:B8:F7:59:CC:2A:D3:19:63:10:2F:CA:BA:7C:BE:AC:D5:B2
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/sejuuPdZzCrTGWMQL8q6fL6s1bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.30.0/24
IPv6:
2a05:1500:400::/40
Signature Algorithm: sha256WithRSAEncryption
05:2f:aa:d0:22:ef:50:b1:4f:f6:6b:f1:7d:47:6f:ef:fa:8e:
d6:ba:58:34:93:0c:7a:82:23:94:3f:66:0f:1e:52:ff:f2:62:
ff:d9:7d:22:b1:da:ea:d6:78:87:20:17:82:df:00:80:61:fb:
aa:d1:a0:e9:33:d1:ea:fe:d3:1a:c4:66:9d:f3:6b:44:ab:9b:
cd:f9:92:03:0e:bd:36:ec:9f:c5:1b:d5:ff:fb:c1:81:74:8f:
1b:72:fb:8f:43:84:7f:15:8f:57:72:c5:31:1f:e9:40:97:cb:
af:ed:d9:80:a5:70:a3:bf:36:6d:f6:77:4b:99:cf:02:79:4e:
d4:df:f4:29:de:9c:37:9a:32:5f:38:ac:7f:64:be:0a:54:d8:
e3:7c:46:c1:71:09:0e:ff:e3:2e:7e:ed:5d:03:81:57:1b:c7:
d9:24:6d:00:e1:ce:e2:01:54:1b:2b:f9:51:41:a0:06:e2:61:
9a:7c:ea:84:3a:21:c3:33:7e:f9:cd:95:f8:32:35:91:8e:ad:
d0:3f:68:65:30:e1:69:9b:42:89:1e:1a:82:28:97:0b:62:fb:
6d:7c:7f:94:1f:cb:a7:b8:77:3f:fb:79:e8:9a:42:b7:5b:c7:
63:1a:d3:6f:ac:9a:26:44:e0:0b:8c:4b:f8:68:54:85:dd:26:
de:f4:98:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 14:39:07 2025 by rpki-client