Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RvELJ81eWxE6Xb2BNuHXpJJ7GQM.roa
File: RvELJ81eWxE6Xb2BNuHXpJJ7GQM.roa (raw, json)
Hash identifier: 5WWch9krPIUVK6C8qvm+aOwAKiRt7LdPjXSGbFQAuYI=
Subject key identifier: 46:F1:0B:27:CD:5E:5B:11:3A:5D:BD:81:36:E1:D7:A4:92:7B:19:03
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0198E6866A6B705A7CBA6B09E018950F39DA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RvELJ81eWxE6Xb2BNuHXpJJ7GQM.roa
Signing time: Tue 26 Aug 2025 13:17:05 +0000
ROA not before: Tue 26 Aug 2025 13:17:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199239
IP address blocks: 185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:86:6a:6b:70:5a:7c:ba:6b:09:e0:18:95:0f:39:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 26 13:17:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46f10b27cd5e5b113a5dbd8136e1d7a4927b1903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:04:2e:3b:39:18:5a:0a:3a:59:2d:f8:8d:
fd:99:69:4f:e2:cf:a2:74:34:e8:67:8f:cb:73:f5:
76:7e:5b:03:47:05:7f:20:2a:b0:b0:0e:85:94:9b:
08:c8:ea:f1:df:04:31:54:4e:c7:1f:7e:98:81:b6:
35:ce:8a:28:45:2c:13:64:fc:d7:fd:55:b2:eb:15:
02:b7:92:a1:26:76:c5:2c:65:76:57:46:25:34:5d:
bc:cb:aa:ea:91:17:17:9a:bc:f8:e4:e1:0a:6a:fc:
59:ab:8f:00:01:76:78:45:31:ed:21:8d:43:69:fc:
d8:3a:14:66:f0:9e:15:01:fa:b2:b7:65:2e:3a:94:
ac:d5:bf:b6:7b:5d:3d:77:f8:2e:9c:a9:43:0d:38:
b2:eb:8f:3f:af:0f:85:e1:5f:e6:7e:56:50:86:fd:
97:b5:d1:b0:7b:03:40:b1:10:58:fa:16:0f:57:7f:
19:36:92:4c:60:ba:28:cb:99:42:26:71:0b:fe:21:
ec:13:3d:ba:07:a4:76:fd:2c:23:f5:d1:85:6e:19:
89:40:ea:2a:e1:73:9d:a3:c3:32:a5:cb:4d:77:fc:
08:3d:bf:dc:fb:4a:be:5b:2b:e7:58:14:53:e7:05:
dc:0d:21:aa:92:4a:65:f9:15:e0:2b:c8:82:a9:8e:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F1:0B:27:CD:5E:5B:11:3A:5D:BD:81:36:E1:D7:A4:92:7B:19:03
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RvELJ81eWxE6Xb2BNuHXpJJ7GQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
185.226.175.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a4:ba:05:f3:3d:f3:e6:6d:38:53:5c:7d:89:66:c6:07:a6:
9c:ba:42:78:da:a4:aa:b6:ab:65:44:59:c3:cc:2a:24:71:41:
93:4a:ae:c9:66:b3:df:3a:df:d4:04:0d:bb:53:77:23:c0:60:
ad:2c:50:da:d4:17:b7:67:a6:3d:0d:cf:2f:54:a6:70:02:07:
2f:81:6e:dd:3f:6a:b7:30:1f:01:08:cc:10:e1:24:64:f1:69:
ce:9a:0e:f2:8a:93:90:ac:f5:e4:fe:bc:ec:89:47:a9:c1:8e:
c6:ac:96:28:5c:b8:22:bf:0e:2e:20:b8:ec:b8:6b:84:46:e7:
56:19:5d:33:89:c8:16:7f:25:fa:93:69:b0:51:c3:d9:66:0d:
fd:f6:09:8f:fc:c5:da:7a:c2:01:df:6b:3c:26:cf:83:28:71:
e3:cd:43:bb:30:cf:ac:c7:d7:25:75:23:b8:5c:45:c0:80:44:
48:a4:94:f6:e4:4c:8b:4d:e9:75:86:cb:a8:ae:f4:4c:ca:22:
7f:00:f2:24:79:10:c9:09:c8:6d:c2:d0:bf:df:0f:3c:f9:9f:
90:f6:3a:8a:5a:d0:29:8f:5b:40:25:0b:d2:82:8d:9c:64:0e:
d1:96:79:d9:0e:a4:6c:a9:6c:a8:f8:f6:e5:d8:42:2c:69:53:
bb:64:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 10:35:59 2025 by rpki-client