Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/RH37hHc3GmgIoml6z_o3SxfSdR0.roa
File: RH37hHc3GmgIoml6z_o3SxfSdR0.roa (raw, json)
Hash identifier: w1vLiJ/bJwF0Pqx6pmikofyWlbdaoX3R+uI564sKdJA=
Subject key identifier: 44:7D:FB:84:77:37:1A:68:08:A2:69:7A:CF:FA:37:4B:17:D2:75:1D
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019A52A875E36D07F51E7269C49A924AE456
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/RH37hHc3GmgIoml6z_o3SxfSdR0.roa
Signing time: Wed 05 Nov 2025 06:16:03 +0000
ROA not before: Wed 05 Nov 2025 06:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 984
IP address blocks: 95.170.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:a8:75:e3:6d:07:f5:1e:72:69:c4:9a:92:4a:e4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Nov 5 06:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=447dfb8477371a6808a2697acffa374b17d2751d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:6e:d9:d9:fc:70:16:c9:b3:35:23:84:24:
47:52:8a:80:1d:f2:76:77:2e:c1:07:26:dc:6b:99:
38:fd:b9:b6:cf:7e:fb:7c:30:a5:b2:ac:04:76:b7:
fb:4a:1e:dd:dc:00:6a:97:2e:d8:ed:c4:d3:ba:f0:
25:c5:36:a3:75:f8:cc:bb:0c:8e:63:7a:ec:42:77:
69:f1:28:88:45:f8:6a:c4:b9:76:96:f9:f8:09:b2:
4b:9b:78:7a:fe:78:fd:18:c5:5b:6d:b1:89:21:7d:
63:70:85:e0:55:e3:15:fd:03:13:6b:44:d8:0b:4e:
59:85:32:6b:70:ef:9b:86:3e:b7:0c:a5:6e:21:33:
33:e8:12:c9:0b:f2:4b:06:d2:49:d1:d0:1d:f5:c7:
14:02:07:db:c1:c5:d4:d7:dd:1d:09:ca:f1:2e:77:
4d:4b:67:65:29:37:92:61:76:87:05:b0:47:dd:de:
ab:cb:9b:39:44:9e:f5:54:1e:da:6b:0f:59:80:e2:
7d:00:f6:32:c3:d7:3e:1d:ea:33:6b:80:d6:fc:8d:
97:44:e5:fe:49:be:8b:88:12:c2:59:fe:e9:da:5c:
59:b3:e2:d7:a7:86:69:93:90:b1:97:c1:4a:41:ff:
23:75:e4:3e:da:f2:95:44:11:75:53:71:49:32:f3:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7D:FB:84:77:37:1A:68:08:A2:69:7A:CF:FA:37:4B:17:D2:75:1D
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/RH37hHc3GmgIoml6z_o3SxfSdR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:da:b9:88:2c:85:cb:78:33:2b:23:c4:20:1b:69:ad:fb:75:
b5:2f:d9:59:83:4c:95:b0:e6:08:60:5c:dc:0d:8c:1d:df:ac:
9b:96:37:ec:99:4f:8d:55:3e:3a:ed:0d:52:43:5e:9b:77:5c:
a1:38:76:80:68:20:00:82:96:98:a3:ab:30:7a:0d:a4:d3:f1:
e2:7b:29:65:f1:14:65:9a:65:f9:aa:bc:ba:d0:bd:18:e4:31:
2f:17:30:ff:27:43:11:43:ac:9a:97:82:1e:2f:b0:1e:72:f0:
6d:7d:ef:f2:7a:a6:ce:9d:0f:10:47:ca:b5:b1:cf:b1:4a:1c:
08:88:59:46:e6:33:8f:fd:78:27:85:c8:15:1e:fc:72:7f:5c:
ca:f0:05:f2:ce:f5:5b:ee:f7:90:a0:ab:4a:3a:d9:20:60:60:
27:36:78:ca:b1:c3:f7:cc:30:94:ce:12:0d:47:55:90:81:b7:
64:75:23:72:21:a7:fd:9e:57:af:30:c2:27:ff:59:87:d2:02:
d2:9e:20:c1:71:e0:93:2a:5c:f2:bf:48:e5:9e:1b:59:ec:ad:
1e:d5:bd:5a:94:ed:51:72:8f:9d:d5:9a:17:72:c0:a0:51:4f:
d2:e9:ca:5f:19:4d:90:f5:08:eb:d6:3d:74:29:2c:1b:0f:b2:
ff:51:9f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:47 2025 by rpki-client