Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/xJcR0deGB_PhVW4Ub0AqpBDixL0.roa
File: xJcR0deGB_PhVW4Ub0AqpBDixL0.roa (raw, json)
Hash identifier: SawuCs7fQfxnKHxl7dEG/czDPI5njJw6MgIPphiYv6k=
Subject key identifier: C4:97:11:D1:D7:86:07:F3:E1:55:6E:14:6F:40:2A:A4:10:E2:C4:BD
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 0199095357F95DC13DC8EFBB416473F7CB7F
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/xJcR0deGB_PhVW4Ub0AqpBDixL0.roa
Signing time: Tue 02 Sep 2025 07:28:00 +0000
ROA not before: Tue 02 Sep 2025 07:28:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209281
IP address blocks: 93.115.196.0/22 maxlen: 22
137.59.56.0/23 maxlen: 23
185.20.108.0/22 maxlen: 22
185.107.0.0/22 maxlen: 22
185.134.189.0/24 maxlen: 24
185.216.188.0/23 maxlen: 23
185.216.188.0/24 maxlen: 24
185.216.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:53:57:f9:5d:c1:3d:c8:ef:bb:41:64:73:f7:cb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Sep 2 07:28:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c49711d1d78607f3e1556e146f402aa410e2c4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:00:d2:c9:51:77:a3:3e:3b:59:d0:cf:29:ec:
c3:26:34:8c:ed:cf:c9:ff:8f:ae:20:df:1b:b9:f9:
c6:e1:18:98:87:1f:44:b0:dd:dd:0d:0e:47:ff:47:
67:cd:6a:ea:f4:bf:ec:37:02:f8:6a:b6:49:f7:2f:
26:c5:85:b8:5b:89:3b:bd:7a:08:bb:0d:1c:9c:73:
4d:23:5d:42:2b:4f:c5:d9:42:aa:e3:c7:80:77:0c:
c9:1f:3d:42:35:82:34:d8:cb:3d:9d:7e:87:b0:2f:
f4:c2:ee:c8:65:97:cc:b9:f8:55:a3:88:b7:a7:8d:
3b:d6:8a:c1:02:40:c9:bb:e3:ce:6b:b8:64:87:6e:
66:a6:7f:f3:f5:6d:41:03:83:57:7a:26:26:4c:22:
3e:01:fd:78:4c:53:17:18:d0:43:c5:45:60:56:e9:
61:15:e9:a3:fa:b8:bd:0a:9b:f4:70:5a:27:00:e9:
72:34:6c:7a:c9:ee:2e:b3:0f:8c:6e:87:b5:50:66:
be:74:31:13:0f:a9:31:cb:07:bb:38:d7:ec:34:d6:
3b:b9:ef:3f:77:20:6d:5e:1e:57:5f:8c:c5:d3:63:
3a:23:46:3d:ce:ca:39:29:b2:22:6b:f1:e4:a8:6a:
e7:13:5b:7a:45:73:25:69:22:c9:bc:66:96:bc:05:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:97:11:D1:D7:86:07:F3:E1:55:6E:14:6F:40:2A:A4:10:E2:C4:BD
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/xJcR0deGB_PhVW4Ub0AqpBDixL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
137.59.56.0/23
185.20.108.0/22
185.107.0.0/22
185.134.189.0/24
185.216.188.0/23
Signature Algorithm: sha256WithRSAEncryption
02:96:e2:e7:44:85:cb:89:94:c3:62:5c:5e:06:0d:79:3f:3c:
0d:95:cc:e1:d8:10:d2:b5:20:54:21:81:a2:fe:a3:01:69:43:
cd:35:f5:ab:5a:ca:db:3b:be:33:60:3c:30:2d:a0:24:d1:38:
b4:3b:4e:67:a9:5d:2d:c1:77:c8:2f:c2:1e:de:0f:84:01:0e:
89:4b:ac:80:e4:ea:ec:c7:33:45:1b:b7:7d:34:05:e3:7d:8b:
f6:55:44:7c:24:c7:c2:d8:8c:35:4a:28:0d:e3:c2:c5:71:9b:
30:81:96:cf:69:63:b2:c7:b3:66:a2:03:bc:69:76:3a:70:25:
87:03:fe:68:7c:35:b4:fc:f9:56:e1:73:54:a4:3c:59:bc:7c:
61:d3:05:4c:88:58:59:a3:c8:cb:8d:d4:46:a4:6d:23:d2:14:
76:bb:8f:14:cb:95:fc:ca:5d:8d:fd:00:b6:a9:9c:7d:f2:83:
ba:40:61:15:a8:68:a4:34:08:c5:0e:ec:96:fa:3d:68:95:69:
cb:fb:17:e3:fc:1c:88:fe:3a:40:1d:d6:a3:3c:f3:aa:46:62:
18:ab:80:ec:cb:64:79:07:3a:d6:77:11:48:a7:2e:4b:60:40:
b1:12:e7:e4:7b:0b:b9:49:9b:ab:e6:a1:64:60:c2:ea:16:43:
e5:98:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:41:37 2025 by rpki-client