Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/pSBQwLUPyYWO99fSCGOORj9giws.roa
File: pSBQwLUPyYWO99fSCGOORj9giws.roa (raw, json)
Hash identifier: JkOzR+BpOFLVw+DBFx5vd7D/7xkaT2h6VtCqnTT04N4=
Subject key identifier: A5:20:50:C0:B5:0F:C9:85:8E:F7:D7:D2:08:63:8E:46:3F:60:8B:0B
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 019923B58AB36E6D9EDAA9A36533CCD8197E
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/pSBQwLUPyYWO99fSCGOORj9giws.roa
Signing time: Sun 07 Sep 2025 10:25:23 +0000
ROA not before: Sun 07 Sep 2025 10:25:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 178.17.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:b5:8a:b3:6e:6d:9e:da:a9:a3:65:33:cc:d8:19:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Sep 7 10:25:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a52050c0b50fc9858ef7d7d208638e463f608b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7c:62:70:39:3f:98:f5:69:ff:c1:a4:df:e5:
08:ea:82:3e:71:6d:fd:1d:8d:9b:9c:38:e5:62:6a:
26:d3:9f:99:2a:6e:d2:af:1a:a3:7a:2e:3e:cd:29:
94:63:48:18:3b:3f:2e:b4:e8:06:5b:df:f8:0d:ed:
a4:0f:49:02:28:cf:ce:ef:11:e5:57:03:b3:e4:c7:
2e:38:0f:88:a1:04:a7:93:fe:e4:e5:f9:a3:41:8b:
8e:7b:6e:8c:7c:fb:16:c0:d5:3a:7f:55:49:4f:42:
e7:8f:5c:13:7a:45:0d:56:f8:a2:ad:b7:fa:6d:36:
2e:fc:53:3e:27:62:4a:be:84:53:d2:0a:77:ee:db:
e0:6d:4c:10:0e:a5:e9:87:e8:f3:43:d7:88:67:79:
a9:10:42:e4:f6:79:f2:21:64:39:0c:7a:91:48:f9:
96:88:69:63:87:2c:dc:1c:ee:47:98:33:5e:80:e4:
f8:c3:b8:3d:57:cb:17:d2:04:d0:49:e8:e2:de:42:
93:e9:2d:be:76:95:13:88:8c:03:80:b8:c6:ff:1e:
58:78:b2:01:51:b6:d1:09:48:ef:4a:3f:f7:7f:49:
3d:a9:9c:21:5a:7e:c6:cf:3d:f7:ac:21:55:76:6d:
8b:fa:d6:0f:fa:69:66:90:a9:9c:05:f6:4e:28:f1:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:50:C0:B5:0F:C9:85:8E:F7:D7:D2:08:63:8E:46:3F:60:8B:0B
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/pSBQwLUPyYWO99fSCGOORj9giws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:64:e5:f8:49:c9:2e:19:83:8d:da:3d:35:89:a4:58:51:f5:
e6:57:a8:b5:8c:84:32:06:ec:85:37:85:b0:f8:ff:2c:d7:53:
36:3a:3b:92:ff:d2:e7:73:5a:42:4e:a8:3c:56:85:b9:e4:3e:
cc:a9:10:24:86:f2:6c:ad:f6:45:64:f8:a6:d4:eb:46:b2:c0:
e0:14:3e:4a:1a:b2:63:65:70:20:a4:fb:59:d0:1d:d2:0a:35:
9f:a6:f6:24:1f:8d:7b:0f:50:c3:a5:70:9e:2a:1d:ba:49:57:
85:73:02:09:ad:dc:d3:b6:76:bb:db:f6:c2:3e:db:36:35:f9:
14:02:b1:23:6d:8d:9b:45:01:65:11:4b:ca:23:65:b8:18:36:
78:39:36:e2:6d:9d:13:c8:c1:73:13:6c:18:f7:18:36:34:ee:
f1:54:bd:61:9c:2f:34:44:39:39:ba:28:73:a9:10:ad:1e:4b:
40:2c:59:56:61:52:d1:eb:9e:a7:ac:59:4b:7f:00:eb:06:21:
03:2a:9e:38:17:28:e7:21:b8:b1:4b:3b:0c:0a:32:9c:fa:81:
e8:74:0c:5c:0e:73:ec:99:52:0e:1e:37:75:c1:96:62:5a:63:
73:43:a4:b6:a8:e3:04:38:08:4d:e5:24:53:7c:8d:69:bb:c0:
59:ca:cb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:34:55 2025 by rpki-client