Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/X57o2syzPbfznAEnkuFPfTQEZsQ.roa
File: X57o2syzPbfznAEnkuFPfTQEZsQ.roa (raw, json)
Hash identifier: GQSc4ByVQqn+QttMMb4JY7U3gZxngdNYLtw1PJpJuC0=
Subject key identifier: 5F:9E:E8:DA:CC:B3:3D:B7:F3:9C:01:27:92:E1:4F:7D:34:04:66:C4
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019A17C2A3DA5BD968BA990EC685E9AFAF44
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/X57o2syzPbfznAEnkuFPfTQEZsQ.roa
Signing time: Fri 24 Oct 2025 19:47:03 +0000
ROA not before: Fri 24 Oct 2025 19:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 185.244.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:c2:a3:da:5b:d9:68:ba:99:0e:c6:85:e9:af:af:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 24 19:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f9ee8daccb33db7f39c012792e14f7d340466c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:96:87:4c:5a:9d:56:49:0c:07:8b:0f:4f:a2:
43:88:94:36:de:e6:4f:e3:27:7a:39:dd:44:21:fa:
15:3f:83:63:8a:6e:4a:37:07:0a:60:40:ee:a4:23:
18:66:08:9b:0a:6b:fe:a5:e9:38:0f:c9:49:ca:a1:
c3:d0:0f:5f:bf:b5:79:8e:d2:22:18:1a:49:62:88:
50:54:8c:16:9a:91:13:7a:cb:b9:be:65:39:c7:61:
f3:ac:77:24:fb:4e:cc:b4:46:3c:22:b9:74:26:ce:
21:2a:3f:8f:df:72:a5:29:3f:49:8e:13:d4:b0:00:
4f:3e:dd:96:c9:f0:8b:28:6d:37:68:1e:b4:85:f0:
62:2e:4a:4a:11:5f:d4:51:ff:32:bf:ba:7f:05:1e:
60:ad:4d:5d:56:4d:bd:00:b4:86:57:dd:f1:7f:c2:
8d:71:bb:36:75:d9:e5:6e:01:0d:c4:60:4c:61:b7:
a6:4a:fe:2a:c6:a0:b4:1b:83:c7:4a:89:56:7a:65:
fc:23:d2:90:4f:17:e8:09:77:6b:7a:3b:e0:56:85:
00:83:fe:64:29:d5:8a:3d:a3:a5:80:cc:5f:73:23:
7f:86:d0:1c:50:b9:c6:63:cb:cf:b9:d4:db:b9:73:
e5:61:e0:8e:1f:7d:8b:08:b3:da:8e:98:84:5c:f4:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9E:E8:DA:CC:B3:3D:B7:F3:9C:01:27:92:E1:4F:7D:34:04:66:C4
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/X57o2syzPbfznAEnkuFPfTQEZsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ac:bb:ca:c9:46:29:aa:f8:fa:98:87:b6:f1:c9:40:8b:83:
94:38:61:06:78:b0:e6:3b:68:40:77:2a:0a:d7:10:4e:0b:94:
cb:06:83:0b:cd:53:17:0d:8a:e5:8c:8e:f2:a3:92:d7:74:15:
50:6f:0f:6c:c0:aa:f6:89:74:14:96:ee:19:55:64:47:76:43:
1a:3d:b6:4f:5f:05:14:08:c2:08:9b:a5:89:b1:be:d8:cc:0d:
ee:87:f2:93:91:e0:2b:a1:ef:54:fd:b4:e7:c2:e8:69:07:da:
6f:65:5f:57:3c:f5:69:72:92:e9:95:d7:2e:01:9f:be:1d:40:
65:54:c8:2f:34:4a:1f:4a:78:02:09:b6:32:46:da:42:59:7a:
24:8c:74:8a:ce:a4:88:11:21:f2:5f:4b:57:8f:fe:a1:cf:88:
e9:aa:04:d9:13:e5:26:2f:90:2d:04:d5:db:e6:38:dc:94:cc:
15:e8:45:8e:f5:bc:a9:c8:7c:87:d4:4e:ca:bb:d0:5d:93:84:
c2:2f:b7:90:67:b4:0b:99:c6:bc:5c:19:4f:30:ea:06:97:77:
0b:f2:05:04:d3:17:0f:91:6c:18:a9:6e:d3:e3:b4:78:be:be:
4e:e7:a6:2e:70:06:d7:ad:e9:8e:04:cc:e7:50:98:78:1d:46:
cd:08:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 11:54:11 2025 by rpki-client