Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SLaZNAjxImfT9EGvzPi0i7_1Yj0.roa
File: SLaZNAjxImfT9EGvzPi0i7_1Yj0.roa (raw, json)
Hash identifier: 82hv0vYxLgPvo/8wkECNbefCFSwFm1NfG9R8MJN+I0g=
Subject key identifier: 48:B6:99:34:08:F1:22:67:D3:F4:41:AF:CC:F8:B4:8B:BF:F5:62:3D
Certificate issuer: /CN=495e500149ce8d71b9604b589e0c32fea07a98b8
Certificate serial: 0199523343EC5562713A95F5D84C131A901C
Authority key identifier: 49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SLaZNAjxImfT9EGvzPi0i7_1Yj0.roa
Signing time: Tue 16 Sep 2025 11:05:15 +0000
ROA not before: Tue 16 Sep 2025 11:05:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 195.182.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:33:43:ec:55:62:71:3a:95:f5:d8:4c:13:1a:90:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=495e500149ce8d71b9604b589e0c32fea07a98b8
Validity
Not Before: Sep 16 11:05:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48b6993408f12267d3f441afccf8b48bbff5623d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:5c:e8:f2:ec:91:a0:f6:fa:03:7f:ed:ea:
33:f3:51:3f:d1:e8:69:d3:9a:7b:89:89:03:42:b0:
67:73:2d:10:10:34:16:6f:ea:62:1c:d2:0a:0b:f6:
4f:66:26:84:3c:1d:2a:1e:3c:ce:e7:86:05:18:cd:
12:75:97:91:d0:c4:99:cc:de:11:6d:d2:a3:1b:30:
b2:1f:29:d7:ce:cf:c4:35:5d:42:90:a2:14:d7:90:
e4:45:59:6a:73:d2:ac:c6:90:a8:7a:0c:b7:09:b8:
aa:b4:04:32:e5:e5:c0:b4:b5:0f:8d:bf:3d:1c:96:
a9:56:84:5b:0d:6f:9d:75:92:d5:87:d2:95:ae:f9:
4b:3f:0d:bc:3f:50:00:ae:84:f9:09:6e:81:28:9e:
ac:df:4a:ae:72:1f:4c:3a:65:7a:eb:9b:78:e3:82:
46:82:ab:22:b6:85:b6:85:8f:b5:a4:28:68:11:d0:
6e:f3:77:25:10:ec:1c:64:ba:ca:29:b1:cf:1e:78:
91:a9:fd:4b:9d:8b:8c:af:8b:a7:59:3d:ec:02:c2:
7c:1d:71:39:14:95:50:6b:c9:1b:75:4c:b0:44:18:
85:0e:06:cb:8c:79:a1:e1:b9:5a:72:fd:fe:bf:e2:
72:7d:6e:3a:0d:b2:ca:37:9d:a4:59:f4:41:2c:db:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B6:99:34:08:F1:22:67:D3:F4:41:AF:CC:F8:B4:8B:BF:F5:62:3D
X509v3 Authority Key Identifier:
keyid:49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SLaZNAjxImfT9EGvzPi0i7_1Yj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.25.0/24
Signature Algorithm: sha256WithRSAEncryption
31:13:5c:f0:99:86:8b:4a:eb:2e:9c:7f:8d:08:a3:99:ee:19:
03:a7:1a:4f:96:a5:19:40:bf:c9:a4:45:29:1e:93:e8:24:6d:
0d:7c:b1:ca:e1:67:82:b4:f9:4b:d4:54:04:ef:05:6b:93:bb:
a4:f0:f0:7f:cf:b0:9f:90:78:46:ee:b2:cd:5c:dc:b0:c3:f9:
84:94:46:79:95:cb:97:c8:aa:6f:39:5f:83:59:e7:e0:34:31:
95:26:00:12:50:92:a3:5f:25:44:0f:9b:25:bd:87:e0:95:ab:
f3:33:75:1f:be:c8:8b:73:4c:d1:0a:1d:50:cd:ad:ed:2e:66:
5d:c4:29:b2:03:7c:23:3c:f1:b0:18:d4:60:f8:4b:64:a6:76:
0f:98:72:b3:66:07:df:0e:ae:3f:23:ca:dd:e8:92:87:53:bf:
a6:e9:12:96:e1:3e:ef:c1:2f:d9:5c:b0:88:f0:f4:65:02:64:
37:b0:7b:c1:92:fa:6c:3e:9c:7c:7a:0c:1f:c5:a0:a4:05:50:
45:4e:36:90:ec:04:7e:4c:1c:5f:47:a8:9f:74:77:0e:db:c3:
49:5a:8f:3e:2a:b9:ce:89:04:3a:3e:a9:d9:a6:57:5a:3b:13:
0c:f4:f7:bd:ed:35:9d:64:42:c5:10:b8:59:01:e6:c3:9a:98:
91:04:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 12:01:35 2025 by rpki-client