Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aPan4NoTFQz0HZPAh8aRjD7mxD4.roa
File: aPan4NoTFQz0HZPAh8aRjD7mxD4.roa (raw, json)
Hash identifier: 8bshkttsOoCQ1QsOu6ebKAy8orMrPuSOEDYUY5LhZTs=
Subject key identifier: 68:F6:A7:E0:DA:13:15:0C:F4:1D:93:C0:87:C6:91:8C:3E:E6:C4:3E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A47733414DA63BA7F36654424EC757243
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aPan4NoTFQz0HZPAh8aRjD7mxD4.roa
Signing time: Mon 03 Nov 2025 02:02:03 +0000
ROA not before: Mon 03 Nov 2025 02:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 93.123.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:47:73:34:14:da:63:ba:7f:36:65:44:24:ec:75:72:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 3 02:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68f6a7e0da13150cf41d93c087c6918c3ee6c43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:aa:e8:0c:ca:cd:dc:dd:eb:51:38:3c:33:
5b:db:09:99:c6:d5:81:a1:bd:b9:82:01:14:a6:40:
4f:16:4e:73:80:0e:d2:3d:68:02:d8:5a:f1:d2:03:
6c:c4:53:f4:4b:36:e4:82:16:2c:f1:10:d5:5d:87:
36:6e:da:41:2c:eb:7b:c3:f0:f0:be:19:22:2d:53:
52:ed:1a:63:09:1e:bf:8c:9b:b3:e5:4d:cd:62:11:
80:13:cb:3f:4e:1f:2d:94:1c:f0:71:65:11:77:97:
7e:db:cf:42:bd:59:83:18:9b:da:41:89:dd:90:d0:
a4:52:3b:de:ca:03:45:a0:0a:3b:bc:c2:39:46:64:
7e:12:05:66:d8:55:f5:8e:4a:21:d5:f7:b8:14:2e:
bf:f8:6f:e8:9d:1e:e3:15:b0:6c:f8:00:26:03:ec:
ca:a8:0a:47:fd:a7:a9:3e:ce:01:9e:f1:6c:2d:f5:
94:30:ad:2f:16:9c:36:d8:e5:58:c9:fb:50:6f:88:
e7:b6:8a:70:8f:f5:21:4f:da:f9:9c:fc:ca:76:39:
b7:4b:51:24:12:f8:71:75:ec:c1:30:0c:94:b7:1b:
0e:78:19:4e:b5:fa:d5:e8:fa:a5:2b:b3:69:94:c6:
12:ff:ac:66:cf:4f:3c:21:3c:3d:d4:70:de:1a:0f:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:A7:E0:DA:13:15:0C:F4:1D:93:C0:87:C6:91:8C:3E:E6:C4:3E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aPan4NoTFQz0HZPAh8aRjD7mxD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.113.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ba:7a:47:5e:3f:f4:82:99:df:40:6e:01:9b:78:ac:3a:43:
76:a7:6a:26:1a:2e:a5:50:81:fb:b1:2e:1a:da:8d:66:d4:66:
24:28:d6:fc:04:2b:ba:2f:46:09:95:15:c4:60:a6:16:23:84:
f3:74:e5:2f:50:42:a7:1d:f1:bd:58:5b:e8:30:a5:48:69:3f:
3d:1f:94:3f:89:f0:b1:ca:a3:bb:c5:0b:d6:7a:0e:22:02:e7:
15:09:df:36:b3:23:03:6d:34:2a:64:0e:10:84:03:24:c0:78:
7f:95:4f:0e:ff:1f:9a:d4:d1:38:6e:2d:72:b4:d3:4e:d5:fc:
9e:6e:d1:b6:ce:c5:a3:22:c9:72:fe:63:55:f0:36:87:7e:90:
3c:19:83:ee:61:32:53:4f:03:8a:a7:31:70:e2:b2:7f:6e:fb:
08:87:1f:d9:44:4b:e1:6c:c1:dd:af:1b:e7:22:37:6d:77:bc:
03:43:74:2d:a6:66:e2:d4:4d:fd:35:72:6e:15:6b:30:c8:14:
a7:2d:0b:b6:a0:6d:95:bb:9a:25:eb:c7:b7:b1:20:2b:81:da:
15:bf:42:67:11:d8:fa:79:56:45:15:bd:2d:98:56:47:81:e7:
ad:ed:ba:20:c9:e1:8f:69:8b:24:49:33:cb:1a:71:c7:4c:f7:
a9:36:e9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:59 2025 by rpki-client