Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S-QfoBISB_JYSZgnVDlJsbQ3skw.roa
File: S-QfoBISB_JYSZgnVDlJsbQ3skw.roa (raw, json)
Hash identifier: xudustT8rK6uVHddRXjKTdAG9jlc1adhA0i5iNxk4uI=
Subject key identifier: 4B:E4:1F:A0:12:12:07:F2:58:49:98:27:54:39:49:B1:B4:37:B2:4C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0198EC31865D03608F7F79A393DFEEF9DC68
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S-QfoBISB_JYSZgnVDlJsbQ3skw.roa
Signing time: Wed 27 Aug 2025 15:42:05 +0000
ROA not before: Wed 27 Aug 2025 15:42:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211621
IP address blocks: 95.47.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ec:31:86:5d:03:60:8f:7f:79:a3:93:df:ee:f9:dc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 27 15:42:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4be41fa0121207f258499827543949b1b437b24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fb:19:61:36:20:8e:06:0b:d3:ce:7e:9d:08:
64:6e:88:6c:75:07:d7:07:97:49:b1:4b:9d:72:15:
1f:a9:64:e9:30:ba:bb:bf:9d:42:fe:93:a8:6e:89:
93:1e:0e:c8:7d:e0:43:6b:b3:4a:66:2d:84:cd:53:
58:c8:fa:a0:fb:21:a0:f9:ed:7d:4c:e4:50:da:6d:
d6:6d:2b:e4:80:ac:ce:c1:de:81:93:e9:29:ca:70:
43:c3:20:6e:0c:00:bb:47:d5:75:40:1b:6e:7f:c2:
50:3f:ed:16:65:58:13:2b:1d:8f:87:8b:fb:60:4c:
86:40:4e:ec:5b:5e:15:34:d8:55:b1:c1:f2:3d:8e:
40:99:80:3b:d5:b3:ed:89:f5:8f:18:11:27:c6:eb:
c1:42:04:b9:4d:b2:14:f2:72:41:88:4b:27:da:07:
4e:57:f0:55:fe:3b:27:0d:07:c5:c6:6a:8c:d6:64:
92:ef:e3:3b:eb:56:f2:77:7f:e7:c6:82:c1:fc:9a:
f5:6e:45:86:52:d1:11:aa:46:ca:8e:1a:e6:ca:ed:
89:cf:47:50:b6:e4:41:ac:79:4d:5e:9a:03:da:57:
0e:fb:2b:0c:64:2d:55:c3:a5:e3:52:76:de:76:63:
b3:61:09:11:30:cb:e4:83:4b:30:86:f0:29:3b:c4:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E4:1F:A0:12:12:07:F2:58:49:98:27:54:39:49:B1:B4:37:B2:4C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S-QfoBISB_JYSZgnVDlJsbQ3skw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.104.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:00:95:27:04:55:8f:72:9a:be:f0:7a:21:42:27:a8:e0:e7:
0e:63:7d:07:b5:a1:b3:6a:99:95:75:2b:20:c4:d6:00:a4:7e:
98:a5:4b:31:67:77:8e:1e:a5:0d:14:ee:3a:7d:0b:4d:a2:7e:
5f:b0:2f:8c:f5:7f:24:93:59:fe:7f:ba:6b:7f:dd:3d:39:e4:
c3:84:ad:a4:83:fb:90:d4:ad:ca:be:dc:22:fd:2c:c8:2c:b4:
47:50:68:b5:f9:fd:a6:92:00:5f:49:ec:eb:a7:9d:0e:b0:29:
56:36:98:bf:d4:c1:52:c9:ad:9f:db:ad:47:a5:37:e3:4d:91:
f5:2a:b2:d6:05:c5:70:fc:f1:48:f9:9b:5a:57:95:c1:57:4f:
ef:12:a6:e8:ef:9c:71:3f:a2:c9:a7:21:7e:7f:10:61:3b:9f:
72:40:36:34:7d:4a:a7:67:9f:f4:08:28:f6:b6:cd:d2:87:44:
56:1b:03:5b:62:0c:99:82:ba:75:a7:fc:20:98:6a:75:9b:e6:
2e:51:23:af:8a:2f:e2:8f:8d:f1:1d:35:31:f7:7e:ce:fe:48:
68:51:7c:63:ea:20:61:ff:22:99:1c:6b:b0:36:ca:71:2c:81:
46:ea:1f:5c:5b:53:fb:d3:9c:97:05:5a:d2:4b:73:30:0c:4b:
b4:87:fc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:41 2025 by rpki-client