Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/svXrG3QIK1PSpFAJHEHHGRbfEO0.roa
File: svXrG3QIK1PSpFAJHEHHGRbfEO0.roa (raw, json)
Hash identifier: 7T2NVDjV6DcXy4mWtWp/NMapveCETPUIEEYMdpJqHYk=
Subject key identifier: B2:F5:EB:1B:74:08:2B:53:D2:A4:50:09:1C:41:C7:19:16:DF:10:ED
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019A2064B8E30780D5E21C97544D3C1EA1D5
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/svXrG3QIK1PSpFAJHEHHGRbfEO0.roa
Signing time: Sun 26 Oct 2025 12:01:03 +0000
ROA not before: Sun 26 Oct 2025 12:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 185.219.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 07:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:64:b8:e3:07:80:d5:e2:1c:97:54:4d:3c:1e:a1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Oct 26 12:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2f5eb1b74082b53d2a450091c41c71916df10ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:62:21:fc:b2:9e:d5:41:44:e5:2c:cc:42:
b0:8f:89:65:22:34:de:89:ee:fd:af:a1:fc:91:28:
21:3b:e7:20:48:80:94:cf:2a:da:d5:c1:27:fc:c6:
38:11:1f:4c:38:cd:15:89:6a:49:31:06:44:ea:b8:
8b:e0:39:14:af:d1:5c:66:80:81:41:da:c5:25:8f:
4b:8e:a6:d6:31:ef:d9:fe:30:9a:b5:d2:3d:3a:c5:
8d:0f:ef:04:45:fd:54:a2:88:33:8e:9e:92:f0:62:
88:22:0a:e4:63:b7:65:5b:00:c0:0e:90:02:4b:50:
e7:8e:a3:bd:d6:be:75:a2:3b:51:0f:6f:14:26:07:
a5:d4:44:1a:98:9b:64:36:09:3f:22:81:1d:ae:e3:
15:8f:c1:f4:22:f5:c9:74:32:df:40:5b:9d:c3:16:
9c:d5:d1:a1:0b:f0:9e:74:25:d0:c9:d9:89:a9:2e:
72:2a:47:c4:71:b4:b2:66:f4:9e:23:86:d5:47:f5:
09:d0:12:fd:9f:ec:6d:06:4b:74:d8:5e:9c:d0:30:
9b:7c:81:7c:89:73:8f:10:38:15:9e:1e:98:9e:89:
38:4f:a1:7f:71:3d:3a:3b:1c:96:65:93:95:f5:da:
b0:e7:89:21:4a:e4:b7:f3:75:a3:43:72:2f:e7:39:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F5:EB:1B:74:08:2B:53:D2:A4:50:09:1C:41:C7:19:16:DF:10:ED
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/svXrG3QIK1PSpFAJHEHHGRbfEO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.190.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ff:ab:40:62:10:bb:15:7c:75:d5:bb:48:c9:d8:94:1d:af:
40:2c:13:40:15:fb:ca:bc:d8:02:ad:85:7a:31:f5:f0:2f:4e:
00:e9:87:1e:18:14:4a:27:c2:2d:21:e4:3e:a8:dd:4d:f2:1d:
41:fe:83:8e:a7:d3:76:c0:08:ae:9a:c0:4f:17:d8:a8:4c:68:
96:79:d2:9a:92:a7:90:d9:7a:3f:c6:76:2a:c1:42:15:29:a8:
8d:d9:79:b5:e4:cc:18:5e:6f:83:27:4a:9d:a7:8d:6e:b7:f8:
7e:22:67:04:e9:82:9e:6d:22:46:26:3c:2f:1a:64:e5:7a:ea:
e7:47:a2:cf:d6:a2:9f:fc:e9:47:cc:11:8b:e3:9e:7b:e3:82:
9f:30:cc:7c:c9:50:95:a5:89:75:1b:fc:a7:81:c7:54:12:5d:
a2:a7:d8:1e:eb:16:42:f9:59:86:9f:73:7e:bf:c7:d8:40:1d:
9a:df:d4:28:1d:06:c3:41:17:f0:4c:df:55:c4:0e:12:9e:00:
e8:b4:0f:92:e2:73:97:31:8b:86:75:98:be:cf:cf:2a:88:22:
ad:98:f5:9b:f2:56:b3:06:32:4d:fc:29:0a:10:12:bf:20:c2:
bb:53:83:2f:8f:87:ac:ae:a1:07:0f:7f:4d:fc:7c:20:7b:42:
f1:58:57:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:03:17 2025 by rpki-client