Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/S6tNaPYZdsuzOO7m-U1I69Y3cBM.roa
File: S6tNaPYZdsuzOO7m-U1I69Y3cBM.roa (raw, json)
Hash identifier: 8PfppkiGoy4FP7iCUWfVUFg4spOTthzJ1xoFm2gh7Eg=
Subject key identifier: 4B:AB:4D:68:F6:19:76:CB:B3:38:EE:E6:F9:4D:48:EB:D6:37:70:13
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A10EB3DB13307C30EF6BCF935F1BA5040
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/S6tNaPYZdsuzOO7m-U1I69Y3cBM.roa
Signing time: Thu 23 Oct 2025 11:54:03 +0000
ROA not before: Thu 23 Oct 2025 11:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 80.253.251.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
185.99.96.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
185.242.247.0/24 maxlen: 24
195.66.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:eb:3d:b1:33:07:c3:0e:f6:bc:f9:35:f1:ba:50:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 23 11:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bab4d68f61976cbb338eee6f94d48ebd6377013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:94:f7:55:c9:8d:27:4b:3c:dc:1f:2b:45:
50:d3:03:38:ad:ea:ba:09:8a:86:c1:f9:56:58:09:
cd:9d:41:d3:50:ed:73:b1:6a:c9:22:b4:76:c1:48:
17:07:ff:7e:9f:bc:1e:31:be:02:7d:72:5a:f3:b9:
99:3f:27:68:47:76:2d:0b:d2:a3:28:bf:8e:e9:0e:
75:ff:f3:3e:ae:b3:cf:52:28:f7:94:15:8f:4c:7e:
f5:3e:78:d5:5b:4d:45:b2:90:b4:ea:31:35:1a:e9:
42:5e:fa:f8:b4:98:37:80:6d:db:cd:54:59:69:9b:
4c:39:9c:29:12:7f:d1:cf:62:3d:62:4a:92:c8:9b:
9f:b9:2e:7d:a8:94:38:11:d0:90:d0:ac:8c:9d:1b:
28:ec:87:b2:16:c7:1b:81:0c:44:85:f3:14:74:4f:
bb:49:6b:7e:3e:83:32:3a:63:fe:e2:1d:31:55:a8:
06:bc:7f:78:d3:d4:a7:a8:95:fc:6d:1e:16:4d:d5:
44:55:3e:23:ad:04:6f:6d:aa:17:ef:4f:90:32:81:
d2:a1:8f:58:25:fc:e1:29:99:44:e4:17:c0:38:66:
50:da:e8:8c:66:5b:c2:40:ae:ac:fd:c7:c2:93:ea:
10:ad:44:a5:3c:64:83:6f:66:33:90:ae:0f:ee:99:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:4D:68:F6:19:76:CB:B3:38:EE:E6:F9:4D:48:EB:D6:37:70:13
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/S6tNaPYZdsuzOO7m-U1I69Y3cBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.251.0/24
113.30.152.0/24
185.99.96.0/24
185.214.74.0/24
185.242.247.0/24
195.66.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:83:00:ee:7e:9b:af:59:14:35:bb:3e:82:f7:fa:e9:ff:6b:
70:be:28:fa:03:80:d0:7e:59:b3:f3:d8:a5:88:e5:cd:90:5e:
87:dc:bc:34:5b:9b:a5:d5:2e:ea:5c:71:1d:2c:fd:d8:f0:4b:
44:ba:2b:c1:76:cb:28:c5:91:60:20:df:99:31:dc:77:44:72:
10:ef:52:1d:9d:41:e3:08:f3:d5:70:f8:90:46:66:28:57:cc:
10:64:09:2e:36:29:f4:f2:df:1f:1c:aa:92:b8:d7:09:29:0a:
08:4f:ae:74:8b:87:80:56:5b:1b:9a:70:86:22:03:51:ff:87:
e9:68:dd:ea:89:20:b1:55:1f:59:47:06:4f:a8:f9:c6:7e:38:
d0:8d:c0:90:c6:33:fe:17:b5:ac:0c:55:f8:f5:39:63:7b:a1:
bd:10:5d:f9:06:bf:ea:92:36:de:59:54:3f:05:1f:d4:34:cb:
50:e9:a9:8d:4d:7d:40:59:43:57:e1:74:b6:99:0a:67:5a:1c:
ce:01:37:d9:6d:33:12:d7:01:fb:36:b1:32:95:10:e7:8c:cf:
81:3c:1a:bb:97:18:82:de:8c:14:e6:52:d8:6e:88:19:f3:4d:
54:7c:b8:df:8c:9d:77:74:32:82:66:7a:a8:e4:4d:8a:40:f6:
6d:c7:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 03:21:44 2025 by rpki-client