Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RJkvjJW3uVuDFf8VnYACTZdBK40.roa
File: RJkvjJW3uVuDFf8VnYACTZdBK40.roa (raw, json)
Hash identifier: axSr6V5hr7jN0TQlIyMYpQ0QXHz0vjbfBtIabX44/OA=
Subject key identifier: 44:99:2F:8C:95:B7:B9:5B:83:15:FF:15:9D:80:02:4D:97:41:2B:8D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01986174C9120D87D26973DB05DC5D97FB52
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RJkvjJW3uVuDFf8VnYACTZdBK40.roa
Signing time: Thu 31 Jul 2025 17:08:20 +0000
ROA not before: Thu 31 Jul 2025 17:08:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208287
IP address blocks: 185.222.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:74:c9:12:0d:87:d2:69:73:db:05:dc:5d:97:fb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 31 17:08:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44992f8c95b7b95b8315ff159d80024d97412b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:58:72:37:be:29:f9:8b:26:6a:f9:e2:b4:
7f:92:a0:98:79:13:18:0a:4f:07:a1:b8:ff:f3:67:
37:13:0b:6c:ba:08:29:e5:f5:ec:85:64:10:2b:dd:
5c:a5:95:00:88:87:df:1e:82:c1:f4:3e:85:80:f7:
65:ec:c1:b5:79:56:ed:6c:c5:eb:21:36:d6:2a:80:
bc:06:fa:34:67:28:ad:15:06:67:f9:63:e0:a4:31:
dc:35:41:f4:fd:50:c6:6d:72:63:5f:90:8d:2d:33:
dd:a5:e6:a2:1d:d3:45:40:e0:15:81:0a:88:b4:b7:
da:20:41:24:81:d0:00:70:0c:4f:8a:81:a4:18:18:
57:5d:03:ec:53:e2:55:36:9a:56:5c:4d:44:3c:18:
37:2b:97:a9:d0:7a:ff:67:8a:98:8a:34:b2:20:fb:
b8:09:92:73:17:e5:78:16:e5:e8:b2:1e:4d:6f:22:
29:f4:e9:92:ee:e9:92:ea:ae:74:38:a3:b6:10:23:
b9:c4:82:60:b4:47:ac:d3:c3:52:bb:c8:05:c1:5d:
09:ed:3e:d2:86:9f:9a:85:dc:67:6d:a0:85:9d:2b:
e1:94:12:45:2e:93:4d:ec:8b:df:38:be:db:35:f5:
65:53:e8:fa:3a:28:6a:a8:94:8e:49:bd:67:2d:7f:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:99:2F:8C:95:B7:B9:5B:83:15:FF:15:9D:80:02:4D:97:41:2B:8D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RJkvjJW3uVuDFf8VnYACTZdBK40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ea:5c:d0:5a:ef:a2:ae:f1:bc:3a:53:b1:e2:a8:c7:ef:ec:
4b:1d:7e:98:1c:a2:ff:40:6c:c3:1f:f4:6c:c1:60:d8:2d:52:
98:b0:da:40:d7:94:62:d1:92:8c:46:0f:c4:cb:af:e3:b4:68:
57:7e:8f:f1:1a:14:78:c6:d5:db:28:de:d2:f7:36:6e:c6:b7:
e7:d2:7f:c8:4b:75:aa:28:ee:30:a9:58:85:35:e9:e4:f9:4d:
98:ad:e2:32:e5:25:88:bf:b8:3e:b5:0c:78:30:97:7e:02:08:
96:b1:e0:85:38:ed:cc:32:19:42:91:4d:f7:eb:6d:33:d8:66:
27:e4:5b:61:93:8a:0f:1d:9b:3e:6d:87:6a:04:e9:94:8d:5f:
ec:92:06:dd:56:3f:38:f0:6b:c3:12:c8:49:03:4a:1a:03:2c:
48:27:d3:fd:aa:1e:9c:c3:5d:31:22:11:04:34:6c:5e:a0:6d:
5d:26:58:fc:b4:f0:90:f3:99:d0:2e:0c:72:e4:46:62:91:07:
7f:89:a0:8c:dc:a5:b1:d6:2e:38:d5:4f:c1:3a:60:91:45:44:
de:8b:c6:ad:b3:4f:ee:e6:69:4e:e2:ae:b3:b8:c8:20:f0:fc:
cc:a1:ee:b1:a1:3b:1d:31:f6:40:ff:f0:86:09:54:66:f7:a9:
9d:c2:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:33:33 2025 by rpki-client