Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/SiBVXS_bw2kuoujVrIN8SzPjKR4.roa
File: SiBVXS_bw2kuoujVrIN8SzPjKR4.roa (raw, json)
Hash identifier: 89LtnK2pPhxi/v20KQ1BF56P5z4klfGjQZBuaaSsflc=
Subject key identifier: 4A:20:55:5D:2F:DB:C3:69:2E:A2:E8:D5:AC:83:7C:4B:33:E3:29:1E
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 0198F12C69F25CE27CC42E965A1369AEA10E
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/SiBVXS_bw2kuoujVrIN8SzPjKR4.roa
Signing time: Thu 28 Aug 2025 14:54:36 +0000
ROA not before: Thu 28 Aug 2025 14:54:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 84.37.2.0/24 maxlen: 24
84.37.17.0/24 maxlen: 24
84.37.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f1:2c:69:f2:5c:e2:7c:c4:2e:96:5a:13:69:ae:a1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Aug 28 14:54:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a20555d2fdbc3692ea2e8d5ac837c4b33e3291e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:43:3b:6c:88:51:0e:b6:fc:7a:fd:b6:f9:
d8:8d:f1:22:da:8e:4a:21:58:61:2f:6b:79:1b:7e:
7c:3f:3c:a9:19:2f:1a:fa:4d:e0:00:43:27:05:a5:
97:c1:24:f6:ec:8b:16:fb:7c:77:81:52:1b:e9:fe:
b1:93:6d:42:5a:06:71:be:51:4a:62:62:f7:5b:65:
10:5a:b4:68:e9:f6:79:8d:2c:bd:b5:44:89:4b:b1:
03:71:ba:64:36:b0:ac:86:43:78:7c:ac:99:c0:fc:
cb:00:5e:bb:11:02:a6:82:74:fe:c9:e5:38:0a:d7:
aa:b0:36:d5:8b:a7:a3:44:18:c9:50:6b:a9:60:7b:
20:7c:d2:ec:30:11:10:7c:50:20:8c:6f:69:9b:2a:
27:7d:83:1b:77:b6:a4:15:ee:49:88:55:2f:af:37:
8d:f0:af:d6:2a:14:9b:d2:91:a1:2c:c5:2a:cc:46:
55:02:6a:35:76:25:98:d8:a4:21:26:a7:39:60:f4:
63:54:68:a6:d0:99:92:ea:d8:20:9f:77:0a:ec:79:
75:23:2a:ad:21:24:25:e0:dc:f5:27:95:45:b5:a1:
e5:be:c3:fd:9d:69:2e:84:7c:09:17:92:de:82:d8:
be:92:44:1d:1b:fc:b7:d0:09:8d:13:9f:bb:98:de:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:55:5D:2F:DB:C3:69:2E:A2:E8:D5:AC:83:7C:4B:33:E3:29:1E
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/SiBVXS_bw2kuoujVrIN8SzPjKR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.2.0/24
84.37.17.0/24
84.37.23.0/24
Signature Algorithm: sha256WithRSAEncryption
46:dd:9b:bc:b1:85:f5:d2:ee:d9:19:67:79:67:bd:0f:32:2c:
62:20:fc:8e:76:52:f7:13:0c:02:70:73:7a:e5:a8:55:3c:09:
8d:9f:a6:b1:f5:a1:0a:16:a1:34:71:51:b9:21:77:24:10:63:
da:1b:e2:72:39:3b:6f:1f:09:5e:58:7b:84:20:63:0e:70:4e:
04:ce:13:e5:41:54:db:7e:d0:98:95:d5:cb:cd:d8:6d:04:a9:
52:a7:94:c4:c1:ba:a9:00:22:ee:98:a0:d9:d9:f6:7e:39:e4:
1a:43:d4:c3:0b:37:67:e4:ce:62:91:6d:d7:10:92:1c:52:0b:
0f:dd:45:92:01:c5:57:df:88:37:27:5b:8e:25:f0:36:d5:fe:
e7:ea:12:82:f1:f2:f8:98:ed:4b:98:08:bc:e3:48:38:d0:c4:
96:c0:14:4f:0c:21:f9:7e:aa:8b:49:20:8f:39:89:43:ae:80:
a7:d6:ef:a0:21:66:c6:11:2d:79:5d:90:c2:88:2f:75:61:35:
60:81:d2:6a:88:a4:4c:7b:e5:e6:bc:03:5e:95:72:b6:c8:28:
27:1f:4e:84:78:f4:df:0a:1c:8b:1b:29:f7:c2:0d:55:39:ff:
f5:b0:88:32:45:d4:04:51:97:b0:07:8a:39:18:96:59:73:87:
ff:3a:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:39:36 2025 by rpki-client