Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-wxyucRyxQgFLtH52PPxEMNQdFo.roa
File: 1-wxyucRyxQgFLtH52PPxEMNQdFo.roa (raw, json)
Hash identifier: bPM2FpX5vUtu1xM8So6UgJFmtiGD9EwlL7s2wcW1ybo=
Subject key identifier: FB:0C:72:B9:C4:72:C5:08:05:2E:D1:F9:D8:F3:F1:10:C3:50:74:5A
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0199A0424AABBA14ED8001E659944BEB4A0B
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-wxyucRyxQgFLtH52PPxEMNQdFo.roa
Signing time: Wed 01 Oct 2025 14:52:02 +0000
ROA not before: Wed 01 Oct 2025 14:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 85.254.29.0/24 maxlen: 24
85.254.178.0/23 maxlen: 23
159.148.169.0/24 maxlen: 24
159.148.177.0/24 maxlen: 24
185.27.92.0/24 maxlen: 24
185.27.93.0/24 maxlen: 24
185.27.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a0:42:4a:ab:ba:14:ed:80:01:e6:59:94:4b:eb:4a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 1 14:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb0c72b9c472c508052ed1f9d8f3f110c350745a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:d4:c8:79:24:92:0d:8d:2e:e7:0e:eb:27:
23:82:2c:a7:d5:30:f2:bf:a2:42:c5:37:db:2d:11:
e1:29:c5:ae:71:8f:f7:a1:d7:d4:6d:62:ed:80:11:
d4:ee:93:4e:de:3d:b8:b4:2d:b7:ee:71:aa:4c:db:
66:17:1c:57:a5:7b:0b:41:aa:e8:e1:dc:ec:6a:74:
dd:45:eb:1a:15:9e:18:82:2a:07:13:f7:77:a7:9c:
7a:a0:78:36:3f:b7:bd:59:aa:40:bc:e8:f1:92:a1:
4a:c3:2e:4d:57:3a:6e:de:e2:ae:2e:db:b5:f8:65:
c8:04:27:23:c9:6a:7d:eb:0d:3d:11:ec:ca:ff:84:
e2:4b:ea:87:c1:20:d8:89:22:7b:7b:76:55:a3:e5:
2f:ec:a8:22:12:fa:08:31:8c:48:7b:69:42:31:8c:
b7:cd:3f:c3:56:e3:1c:01:ab:f3:d0:16:d3:21:07:
f7:35:de:85:21:57:72:9b:f7:bb:c0:3a:20:f3:a6:
7d:70:1d:dc:45:e2:60:28:bd:93:8d:5d:2f:18:ec:
d1:9e:47:46:05:ce:a4:9d:be:62:04:c3:26:fd:4b:
96:ba:7c:5f:4e:76:97:e4:61:72:e8:56:a9:25:f8:
0c:06:69:a3:72:95:bb:69:b7:b7:cc:6c:3c:a4:50:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0C:72:B9:C4:72:C5:08:05:2E:D1:F9:D8:F3:F1:10:C3:50:74:5A
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-wxyucRyxQgFLtH52PPxEMNQdFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.29.0/24
85.254.178.0/23
159.148.169.0/24
159.148.177.0/24
185.27.92.0/23
185.27.95.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:41:fa:1d:c8:8c:f3:0c:0a:2e:12:ce:54:63:fb:c4:8e:22:
38:6b:80:59:18:3e:38:33:e3:f7:84:8c:fd:77:3f:33:82:80:
9b:5b:9c:62:96:a2:fb:c6:5b:1b:c5:14:25:32:de:f7:5d:ed:
2a:12:c5:16:fd:f8:e4:00:94:5d:e4:2e:a5:e0:cd:53:43:dc:
30:0d:36:61:f3:63:1e:e2:69:78:e4:93:67:4b:fe:e4:d1:60:
9b:5d:73:a6:4e:b3:64:01:c7:1f:62:2b:ed:7f:66:03:76:29:
51:f8:29:73:9e:18:0e:17:47:dd:a0:7f:5f:0c:93:fa:c7:37:
eb:c6:c0:c7:62:15:98:ba:dd:ec:d0:5c:d5:f5:a1:94:2a:2d:
9d:3d:56:48:be:ff:99:eb:63:38:69:a7:ea:94:63:9c:86:89:
1b:c7:87:0f:16:14:dc:ef:32:da:b8:9b:99:81:62:ed:22:47:
14:0d:02:c8:e5:48:96:8a:58:54:37:62:75:f7:0e:85:1c:28:
64:ab:8a:bd:90:2b:3a:e1:24:0b:e3:c1:1a:97:1b:6a:f0:b0:
5c:3b:ec:82:9b:c1:c6:e1:b8:5c:e2:40:48:b2:2b:d7:75:9e:
90:fa:df:22:2e:e8:b2:dc:8d:44:dd:3b:2f:28:6a:b2:ca:85:
9c:0e:12:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:24 2025 by rpki-client