Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/SxPBbYo58oLitVAzEK4RzpAHroM.roa
File: SxPBbYo58oLitVAzEK4RzpAHroM.roa (raw, json)
Hash identifier: x/LKDIhF3WKbDCafmVd+/FFuTno4tND9/e8qOk+osKM=
Subject key identifier: 4B:13:C1:6D:8A:39:F2:82:E2:B5:50:33:10:AE:11:CE:90:07:AE:83
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01990F55F0C1038739C6247160DE291D7132
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/SxPBbYo58oLitVAzEK4RzpAHroM.roa
Signing time: Wed 03 Sep 2025 11:28:34 +0000
ROA not before: Wed 03 Sep 2025 11:28:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.53.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:55:f0:c1:03:87:39:c6:24:71:60:de:29:1d:71:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Sep 3 11:28:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b13c16d8a39f282e2b5503310ae11ce9007ae83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:85:eb:ba:be:f2:1c:8e:7f:68:e5:1b:ea:
be:6a:7a:a0:85:b8:c5:e5:bd:64:41:e7:b5:82:82:
7d:3e:15:49:c4:a1:04:0a:da:09:a8:f6:e6:6c:75:
d6:2c:16:1b:cf:8b:de:e6:9d:3e:e6:2d:5e:91:af:
35:0c:11:0c:b0:44:69:bc:ee:a6:86:f3:37:6a:9d:
d2:f4:eb:99:90:3f:9c:80:bd:e5:13:85:a0:b3:e6:
45:25:c7:6a:8b:ff:c4:0e:00:3b:5b:02:a1:5a:4c:
7c:62:d9:37:c5:8c:76:53:1c:35:93:45:af:a9:c7:
1f:ed:47:84:05:8a:ce:b8:ae:33:ef:4a:83:6b:d6:
23:45:4e:ae:f2:66:23:e2:16:66:74:5e:a0:b5:2a:
0d:fb:5e:1d:8e:5b:57:83:49:7a:c9:17:e6:03:92:
99:50:64:db:62:46:9c:eb:f6:e6:ea:3a:83:19:d3:
59:f0:b1:22:c4:e4:31:04:c5:c7:ee:36:54:ab:d9:
5a:f5:3f:db:70:56:ca:2e:2e:3f:d3:1f:dc:0a:a8:
c6:b6:46:27:35:46:01:58:9f:3a:ce:ed:17:fd:38:
8a:42:e9:84:03:c7:a3:d3:2e:90:29:6e:1b:82:14:
37:34:80:c5:4d:b5:7e:f8:69:0d:c4:78:14:f8:2d:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:13:C1:6D:8A:39:F2:82:E2:B5:50:33:10:AE:11:CE:90:07:AE:83
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/SxPBbYo58oLitVAzEK4RzpAHroM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
84:86:d6:3d:22:b2:b4:6d:ad:c1:a0:ac:37:9c:74:ff:80:14:
6c:65:d8:4f:8f:23:f5:57:d5:08:58:fa:51:32:f8:04:a2:56:
fb:80:06:bf:62:95:5c:86:ae:39:6b:1a:2e:ea:4c:ab:2a:83:
0b:df:4a:44:20:63:d8:e3:d7:15:de:1b:d6:f8:8f:94:96:7f:
03:bd:69:28:97:da:83:45:97:e2:6c:ef:84:d2:13:76:57:63:
58:70:ab:9b:1b:9d:e8:4d:53:b0:2d:50:78:ff:b3:f5:e8:7e:
fe:33:f6:1c:f9:af:86:15:05:56:5e:50:dc:11:dc:74:48:6a:
be:e1:b0:95:6e:2c:ce:1c:1d:bf:b0:94:ba:c0:18:af:65:85:
60:64:70:4f:05:37:6d:15:63:99:f5:e6:6d:a1:8c:44:77:cf:
9f:2c:13:dc:7b:33:78:5b:eb:26:89:a5:a1:e7:d7:0f:74:77:
e5:1f:9e:8d:93:5c:a7:eb:68:e6:58:b6:91:b0:3f:77:96:64:
36:c1:a3:53:e1:ea:81:02:fd:e2:7e:c1:8e:41:36:10:de:1c:
4e:72:30:70:1b:d9:09:75:5d:4e:d7:aa:b3:ca:fd:e2:57:95:
78:9d:40:0f:b9:58:10:31:ce:c5:4c:e7:b6:2d:27:87:6d:cd:
3d:ee:09:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:25:44 2025 by rpki-client