Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/X2ZWwlq5JgdZCBhrE-skZo9Zodk.roa
File: X2ZWwlq5JgdZCBhrE-skZo9Zodk.roa (raw, json)
Hash identifier: jm4EeR/8LyEqdFtytjbhKQG8mWbwHJBMpiLCK8D6HPo=
Subject key identifier: 5F:66:56:C2:5A:B9:26:07:59:08:18:6B:13:EB:24:66:8F:59:A1:D9
Certificate issuer: /CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Certificate serial: 0198F6E00352C65C160A2566860CDB783C1D
Authority key identifier: 3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/X2ZWwlq5JgdZCBhrE-skZo9Zodk.roa
Signing time: Fri 29 Aug 2025 17:28:52 +0000
ROA not before: Fri 29 Aug 2025 17:28:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208263
IP address blocks: 185.146.100.0/22 maxlen: 22
2a03:ab60::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:e0:03:52:c6:5c:16:0a:25:66:86:0c:db:78:3c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Validity
Not Before: Aug 29 17:28:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f6656c25ab926075908186b13eb24668f59a1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:06:85:c5:8a:6e:a7:e4:69:e5:a9:cb:d4:
81:46:90:9b:68:2b:23:57:a8:27:c4:5c:d3:8c:0b:
3e:7b:e1:6b:70:12:3c:a2:17:11:ac:39:c6:9b:ef:
dd:00:7b:33:2d:af:74:7c:e2:ee:4a:32:e1:e9:d4:
5e:63:a5:35:b1:38:71:cd:d7:01:3f:5c:06:f3:0b:
a2:77:f8:7e:55:5b:31:34:7b:6c:df:f3:7b:f8:2e:
ba:0b:b7:2d:66:a7:83:78:31:23:00:bb:01:21:dd:
a6:9d:c7:0c:0b:a8:1e:74:a8:b9:12:9c:42:32:d1:
f9:23:ed:84:e3:e3:1d:be:07:83:36:c9:87:76:f5:
ad:86:3c:4d:82:5f:05:0e:e6:4d:a1:66:2b:3d:6b:
e4:4a:2b:dd:e3:25:07:ed:cd:c9:73:e4:c9:fd:8d:
52:fb:51:ed:87:d2:27:d0:30:f5:a6:98:30:71:d0:
1b:91:b8:a9:ef:00:05:a2:29:a6:30:5d:72:02:0a:
53:fb:90:9e:83:04:62:9f:36:d8:38:e9:d5:08:61:
81:33:d7:95:4d:e6:f9:b6:32:4d:80:1f:06:fa:e1:
be:3d:91:0c:cb:ca:7e:7a:71:f8:71:e7:d6:ee:49:
d2:7f:77:b7:45:6d:ff:00:19:9f:de:ed:42:33:a6:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:66:56:C2:5A:B9:26:07:59:08:18:6B:13:EB:24:66:8F:59:A1:D9
X509v3 Authority Key Identifier:
keyid:3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/X2ZWwlq5JgdZCBhrE-skZo9Zodk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.100.0/22
IPv6:
2a03:ab60::/32
Signature Algorithm: sha256WithRSAEncryption
39:30:42:b4:54:7d:8c:39:cc:57:02:6e:ae:ec:ee:33:cc:e2:
da:e3:d5:e6:16:d1:0c:9d:40:7a:26:78:5c:ed:68:74:92:1a:
a4:8e:6b:63:fe:d9:6c:c1:e4:6f:c3:9c:77:52:6c:04:4b:32:
bd:ae:bc:a4:93:23:b5:68:96:40:d1:fe:77:85:ef:20:e0:dd:
62:f4:41:25:2c:ac:5a:89:e3:7a:de:15:a2:ea:44:63:cb:4e:
aa:73:63:27:50:e5:ba:a9:70:23:34:72:5b:f5:ac:13:e8:76:
f2:da:12:29:63:ea:76:0c:ae:50:40:68:68:42:d7:b8:57:e1:
d0:b5:b8:6f:67:6b:63:1e:73:5d:21:bd:5e:57:6f:69:d3:f2:
81:76:6a:bd:df:68:38:36:cd:1c:8c:dd:83:12:b0:19:28:7b:
29:df:94:1a:44:b4:aa:ca:a0:7d:93:6e:53:dc:61:25:fe:dd:
38:8f:b7:64:ec:5d:b8:98:ec:19:81:11:12:83:04:c8:38:0c:
78:c3:55:4e:72:1d:ec:03:69:d6:0e:4c:43:2a:33:e8:6e:70:
04:0e:fe:2f:85:e5:23:e0:e7:05:22:26:7c:a3:37:02:2e:e4:
d4:de:b4:d0:ad:fe:29:77:f9:d1:27:55:5b:86:43:ba:fe:10:
b8:41:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:23 2025 by rpki-client