Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/S1ZGSjewj6X7QycDLE3iWf9Qwtk.roa
File: S1ZGSjewj6X7QycDLE3iWf9Qwtk.roa (raw, json)
Hash identifier: OqYqcuN/t0Mh36KLaZS2uCSbFs34/AhD50/Wm6gmQKo=
Subject key identifier: 4B:56:46:4A:37:B0:8F:A5:FB:43:27:03:2C:4D:E2:59:FF:50:C2:D9
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019A6306700EC2BD1609C4ADB7B4D3826FDB
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/S1ZGSjewj6X7QycDLE3iWf9Qwtk.roa
Signing time: Sat 08 Nov 2025 10:32:37 +0000
ROA not before: Sat 08 Nov 2025 10:32:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 195.18.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:63:06:70:0e:c2:bd:16:09:c4:ad:b7:b4:d3:82:6f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Nov 8 10:32:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b56464a37b08fa5fb4327032c4de259ff50c2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:c8:8c:ef:c1:bf:b2:f3:1e:48:dc:44:b1:
a2:99:9f:42:27:9d:6f:3f:94:41:28:c2:c7:8b:4d:
10:ac:ed:d6:17:67:17:e5:5b:e5:51:59:9a:f0:55:
7c:60:bf:58:0a:38:68:28:1c:8a:2c:da:20:28:83:
d8:a2:f1:74:85:4e:cc:50:5b:d0:14:53:2a:a9:f1:
25:74:0f:d9:ff:c5:dc:a9:80:36:55:51:7e:dd:f3:
b8:99:a3:a7:8f:9b:37:f4:e5:46:d9:51:e6:f6:74:
88:3d:7f:9c:b4:8b:52:5e:c0:28:78:0c:23:89:dc:
bc:4f:d9:0b:8c:98:84:c9:15:27:92:63:ca:1e:6b:
b0:b8:a3:a7:87:a8:57:a5:bf:89:f2:12:47:41:15:
af:ac:62:c2:3b:5c:72:2d:59:32:b3:78:6e:c6:ca:
83:b8:14:e5:a2:26:d5:3d:7e:65:75:82:5b:55:51:
bb:c7:94:9e:ac:33:d7:16:44:64:4e:d7:81:ee:2f:
c1:db:ac:c9:b1:26:b3:e3:a3:84:5d:a9:24:71:8b:
28:fa:42:92:04:b8:1f:7e:16:1e:40:73:fd:62:a6:
51:e3:19:e4:cd:22:3d:fe:60:9d:c6:84:f3:45:b4:
41:13:6c:f3:26:8a:33:8c:98:75:5b:da:27:2c:84:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:46:4A:37:B0:8F:A5:FB:43:27:03:2C:4D:E2:59:FF:50:C2:D9
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/S1ZGSjewj6X7QycDLE3iWf9Qwtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.18.10.0/24
Signature Algorithm: sha256WithRSAEncryption
36:74:64:89:73:9c:d9:0c:ec:74:90:3e:a9:bd:37:31:59:5f:
66:90:6b:72:07:57:1a:97:ea:8f:0b:65:1c:66:02:a2:7c:58:
f1:c4:fd:7d:c6:86:4b:9b:e3:6c:f3:31:3f:4d:f1:46:44:26:
b2:35:a7:14:8b:18:d6:0b:53:f3:1d:bc:11:98:d8:f1:ef:db:
b8:4c:36:84:37:b9:99:11:17:a3:66:5a:4d:15:22:70:6b:13:
42:ef:30:f1:0e:f4:c6:a2:ac:56:62:49:d4:5d:05:1c:f9:56:
e9:74:a3:09:3b:66:16:81:cf:a8:7e:9c:61:a1:05:66:20:5c:
f3:50:45:a4:05:b1:26:d4:fc:ee:25:94:e4:68:32:2c:1e:ad:
ea:ea:96:8b:29:05:d6:b1:2e:a2:40:fc:c6:5d:10:59:0d:6d:
e4:f2:a2:d1:7a:16:56:71:9c:6d:29:45:52:e6:43:34:75:7d:
b9:d4:67:ea:ec:c9:98:96:62:f8:14:dd:18:c9:c9:6f:17:8d:
d3:66:f0:07:26:e6:31:0e:9f:2b:a9:41:ad:99:1c:d0:c3:e3:
5d:99:aa:41:be:bd:15:2b:1e:ca:54:ac:17:a4:2f:40:9e:26:
f6:1c:67:82:ae:46:59:b5:db:8a:e9:ec:f3:b1:8e:78:19:15:
09:bb:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:54:49 2025 by rpki-client