Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sfI41UBIaEziPNj1MP1GBBeT5Ws.roa
File: sfI41UBIaEziPNj1MP1GBBeT5Ws.roa (raw, json)
Hash identifier: z6x7nG/tAg5MfhmL6uJnuLkcWC0zzOMrc75I4X/cXH0=
Subject key identifier: B1:F2:38:D5:40:48:68:4C:E2:3C:D8:F5:30:FD:46:04:17:93:E5:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A49C476F2524DE9BE571F5935CB9A5FB8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sfI41UBIaEziPNj1MP1GBBeT5Ws.roa
Signing time: Mon 03 Nov 2025 12:50:03 +0000
ROA not before: Mon 03 Nov 2025 12:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 93.123.39.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:c4:76:f2:52:4d:e9:be:57:1f:59:35:cb:9a:5f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 3 12:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1f238d54048684ce23cd8f530fd46041793e56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:1d:b6:b6:4b:18:80:07:f7:cf:e2:89:8f:
32:24:ab:c6:dc:f4:b0:3e:a3:71:68:7c:91:00:58:
e2:19:80:67:63:c6:7d:74:9f:bc:61:ce:bf:88:4f:
cb:6a:1e:ee:ae:09:ad:3a:20:9e:12:e9:8f:dc:cf:
f4:8e:85:f1:b5:28:05:23:36:d6:e8:f1:f2:77:8b:
cd:55:8b:54:a5:94:46:05:ca:d5:3f:f6:85:e7:d9:
4a:a6:95:a3:02:f9:0d:53:11:18:28:2f:bc:45:02:
ae:a5:91:b8:8c:e6:24:e1:f5:d8:1c:3d:10:80:1b:
b9:1c:50:4d:8e:12:a8:13:34:28:c6:45:c8:52:98:
8d:fa:2d:67:1a:9c:77:c3:7d:d1:72:86:0a:9c:98:
ac:75:52:2b:83:30:b1:93:bd:0b:00:c2:60:97:70:
52:30:6d:bb:36:a0:5d:87:28:a4:93:6d:77:4d:4b:
94:1a:a7:01:5c:04:94:c1:e3:3f:3d:1c:d2:7e:f3:
9e:5a:f3:3e:be:13:be:5c:68:ac:2f:d0:94:4e:93:
35:15:92:58:e4:9b:74:c4:cc:fb:e2:4a:5a:a0:7c:
88:41:fb:bc:a8:eb:f7:8e:bc:2e:e4:dd:8a:85:5a:
b2:3a:0d:b4:a5:2e:9c:fe:e5:f1:d0:a3:de:c3:1c:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F2:38:D5:40:48:68:4C:E2:3C:D8:F5:30:FD:46:04:17:93:E5:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sfI41UBIaEziPNj1MP1GBBeT5Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
141.98.6.0/24
Signature Algorithm: sha256WithRSAEncryption
72:80:ee:db:2d:51:06:ee:f5:c3:27:29:ac:eb:ad:76:2e:50:
ae:72:f8:66:ed:0d:43:17:bc:85:47:b2:4c:5e:e9:10:8a:13:
c0:7f:5c:74:2b:77:ca:c9:61:0e:b0:53:55:9e:fb:a7:e6:ab:
0f:45:84:77:5c:38:24:31:a1:46:8c:3d:85:57:ca:1c:a0:db:
74:ac:7a:19:dd:d0:f2:ff:2a:45:e5:68:db:4a:8d:b2:19:91:
2b:4d:6a:d6:9d:3a:97:e2:74:d0:12:a7:44:79:45:a8:06:0f:
12:e7:a6:34:8b:c0:50:ce:5d:26:14:e9:69:dc:9f:4f:53:05:
2a:b4:78:34:65:2b:1a:a3:42:35:30:71:5a:4c:80:95:86:bb:
72:bc:f6:8d:93:9a:b5:95:bf:01:36:fd:c8:d5:f5:6f:52:bd:
73:e5:e0:29:bd:2e:64:71:2d:a1:4c:f3:a2:ee:0d:9a:ea:68:
4f:b6:0e:a9:6f:38:fc:fd:df:8f:2a:44:12:09:04:ab:20:fc:
0c:8f:f3:97:f4:f5:17:01:1d:4a:ec:b4:f3:a3:3b:3c:87:b3:
76:07:e1:a9:52:74:8d:18:e1:86:51:da:5b:0c:76:28:ee:73:
cf:59:31:f5:a2:75:18:9a:ca:a6:65:53:36:1a:1b:ed:da:78:
e5:9e:99:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZpJxHbyUk3pvlcfWTXLml+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUxMTAzMTI1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWYyMzhkNTQwNDg2ODRjZTIzY2Q4ZjUzMGZkNDYwNDE3OTNlNTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DUdtrZLGIAH98/iiY8yJKvG3PSw
PqNxaHyRAFjiGYBnY8Z9dJ+8Yc6/iE/Lah7urgmtOiCeEumP3M/0joXxtSgFIzbW
6PHyd4vNVYtUpZRGBcrVP/aF59lKppWjAvkNUxEYKC+8RQKupZG4jOYk4fXYHD0Q
gBu5HFBNjhKoEzQoxkXIUpiN+i1nGpx3w33RcoYKnJisdVIrgzCxk70LAMJgl3BS
MG27NqBdhyikk213TUuUGqcBXASUweM/PRzSfvOeWvM+vhO+XGisL9CUTpM1FZJY
5Jt0xMz74kpaoHyIQfu8qOv3jrwu5N2KhVqyOg20pS6c/uXx0KPewxyTGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLHyONVASGhM4jzY9TD9RgQXk+VrMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvc2ZJNDFVQklhRXppUE5qMU1QMUdCQmVUNVdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXsnAwQA
jWIGMA0GCSqGSIb3DQEBCwUAA4IBAQBygO7bLVEG7vXDJyms6612LlCucvhm7Q1D
F7yFR7JMXukQihPAf1x0K3fKyWEOsFNVnvun5qsPRYR3XDgkMaFGjD2FV8ocoNt0
rHoZ3dDy/ypF5WjbSo2yGZErTWrWnTqX4nTQEqdEeUWoBg8S56Y0i8BQzl0mFOlp
3J9PUwUqtHg0ZSsao0I1MHFaTICVhrtyvPaNk5q1lb8BNv3I1fVvUr1z5eApvS5k
cS2hTPOi7g2a6mhPtg6pbzj8/d+PKkQSCQSrIPwMj/OX9PUXAR1K7LTzozs8h7N2
B+GpUnSNGOGGUdpbDHYo7nPPWTH1onUYmsqmZVM2Ghvt2njlnpl8
-----END CERTIFICATE-----
Generated at Mon Nov 10 11:38:34 2025 by rpki-client