Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/CS6PaNsOORF5Q5g8pIfyUyaygxY.roa
File: CS6PaNsOORF5Q5g8pIfyUyaygxY.roa (raw, json)
Hash identifier: 3stzl/sYhJozCDkieG76tAlU7Cvnri2Jf7aML3MWSmU=
Subject key identifier: 09:2E:8F:68:DB:0E:39:11:79:43:98:3C:A4:87:F2:53:26:B2:83:16
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0198521772611AF91F765C0FBE481783FA82
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/CS6PaNsOORF5Q5g8pIfyUyaygxY.roa
Signing time: Mon 28 Jul 2025 17:32:05 +0000
ROA not before: Mon 28 Jul 2025 17:32:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 85.203.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:17:72:61:1a:f9:1f:76:5c:0f:be:48:17:83:fa:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jul 28 17:32:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=092e8f68db0e39117943983ca487f25326b28316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:8a:ff:45:ed:2f:14:f4:4c:33:38:b3:45:
95:83:64:2e:04:c8:dd:a8:bb:e1:cd:93:e6:1e:fb:
b6:47:6f:f0:3b:b5:ef:c8:76:f7:84:c9:6c:1d:02:
3d:06:f0:f0:e0:15:a3:46:47:2c:64:a2:2a:91:df:
11:87:b5:41:db:6a:37:6a:4c:f5:f4:bd:c3:84:77:
87:2d:1c:c5:d4:dc:ef:e3:21:6d:ac:cd:1a:06:90:
bb:fa:35:d5:a9:d9:ee:a2:d2:d1:cd:52:f3:e6:f0:
cb:7e:c5:49:03:94:cb:8f:59:80:33:d1:fd:ba:fb:
c5:86:31:05:54:d8:79:fe:de:1b:e1:72:5a:40:6e:
4f:2c:7b:6b:f1:a7:02:b4:86:0f:c7:d7:c3:de:89:
9e:90:da:89:7a:9b:77:9f:2b:62:56:f3:ae:00:99:
d1:a3:78:29:b9:40:b0:3e:9c:de:92:a5:73:7d:ed:
5c:0d:3a:06:bb:78:9c:52:76:01:1f:e3:bd:d3:5a:
9a:d4:7f:1b:be:cb:15:7d:a9:fe:25:5a:e4:6d:0d:
cb:90:61:ac:5f:a2:dc:ca:14:06:c0:86:9a:fc:77:
f4:dc:fe:6e:45:64:c8:5c:a4:a3:0a:9f:08:3b:f1:
6a:34:bb:6a:b9:63:4b:d7:39:06:a0:4e:1d:89:2d:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:8F:68:DB:0E:39:11:79:43:98:3C:A4:87:F2:53:26:B2:83:16
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/CS6PaNsOORF5Q5g8pIfyUyaygxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.33.0/24
Signature Algorithm: sha256WithRSAEncryption
90:32:19:56:bd:15:ba:22:a9:74:f4:1f:8c:c8:84:12:c5:e7:
59:c8:3e:ff:65:e0:37:b4:71:28:23:35:7e:2c:23:8d:34:af:
e7:b9:5f:41:bb:07:73:23:ef:41:ed:b4:9b:4a:7e:3d:cb:a9:
1d:ce:db:e7:e2:8a:a0:64:f9:d4:e8:45:7b:de:65:c4:43:96:
bd:d2:85:a5:aa:fc:70:77:00:6f:61:6c:30:28:f0:18:c1:28:
f9:7a:96:25:42:c6:85:8f:11:1a:21:fd:0b:d5:10:b6:f6:30:
9f:31:ca:4c:52:6f:80:cb:39:9e:50:c2:7e:79:15:28:de:81:
40:bc:21:3c:2d:72:d1:42:a6:19:26:99:cd:bf:a4:ad:f4:f8:
9b:28:95:df:41:97:e6:1e:a1:70:c1:77:ad:99:6c:0a:fc:79:
af:0c:ee:d6:9f:4e:43:dd:32:ad:da:c5:4a:a3:0a:3c:3e:29:
32:8c:42:cc:15:62:2d:69:57:14:74:62:4c:3e:74:36:59:c3:
83:0b:32:6e:42:27:fa:cf:3a:2e:ad:6a:5c:db:8a:d0:34:bc:
1d:1b:ed:af:30:57:95:28:ba:5f:0b:2a:8a:fc:4c:1b:12:e6:
e5:63:02:de:8b:7f:ac:74:38:e7:35:8c:c9:d7:0f:bc:ca:c5:
13:36:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:55:54 2025 by rpki-client