Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/utXzgzMJjaIrp5ghklXHQNuDj0w.roa
File: utXzgzMJjaIrp5ghklXHQNuDj0w.roa (raw, json)
Hash identifier: Y9s+msDVsT/czxYxM2UzwdwxQOsm8/16ui4R//h8OS4=
Subject key identifier: BA:D5:F3:83:33:09:8D:A2:2B:A7:98:21:92:55:C7:40:DB:83:8F:4C
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 019856BEE99025AEC81A001A2018774F1FBC
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/utXzgzMJjaIrp5ghklXHQNuDj0w.roa
Signing time: Tue 29 Jul 2025 15:13:28 +0000
ROA not before: Tue 29 Jul 2025 15:13:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215944
IP address blocks: 185.114.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:be:e9:90:25:ae:c8:1a:00:1a:20:18:77:4f:1f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jul 29 15:13:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bad5f38333098da22ba798219255c740db838f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:66:fb:21:77:a7:74:ef:66:8f:d3:b2:dd:
23:c2:2d:96:b7:c2:cd:50:8d:9a:9b:54:ba:b6:ab:
ea:60:c9:ae:44:7c:7d:f6:a1:3f:46:bd:97:f9:49:
f8:3a:9e:91:5d:31:cc:16:14:94:a4:f3:2a:bd:ab:
8f:03:00:0c:81:77:d4:27:b9:97:56:63:bb:af:d7:
f3:75:bc:a2:aa:ba:da:3d:56:fa:a0:fd:85:51:38:
d1:2d:1f:cd:d7:34:c1:f3:5b:ef:bf:af:78:6b:e9:
22:5b:42:22:08:5a:f4:36:36:9d:06:95:a7:92:d1:
fa:04:7b:6d:08:ca:45:f0:65:23:c7:0e:7b:22:68:
a8:71:42:3d:a1:27:d2:43:f1:07:f7:a5:e4:1a:57:
8e:2a:14:15:fc:b5:85:de:4e:4a:20:c5:37:12:d7:
c4:1c:8b:65:ea:3d:f2:06:bb:de:71:36:64:b3:c7:
79:7c:7f:f0:df:e1:df:7d:0d:6e:a4:10:18:4a:cf:
f1:1f:a2:91:24:6a:dd:d8:6d:82:cb:bc:8c:58:9d:
b2:ee:9a:37:cd:f5:d9:e7:9f:98:8c:82:43:0a:47:
d6:b2:b2:89:f3:46:fe:85:18:9c:36:d1:31:ae:b7:
3b:4d:09:3b:85:7d:ed:4c:a8:0b:cb:cd:f9:01:ac:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:F3:83:33:09:8D:A2:2B:A7:98:21:92:55:C7:40:DB:83:8F:4C
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/utXzgzMJjaIrp5ghklXHQNuDj0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:d5:ee:65:eb:16:01:59:a2:f5:b7:aa:22:0f:e1:94:62:be:
8e:e4:8e:88:80:c2:0a:d6:cd:7b:98:f6:ed:d1:20:63:ed:ce:
d7:b8:a7:d3:3a:b8:35:73:7c:3c:48:76:cd:c2:18:13:d8:ec:
1a:56:26:87:b8:0f:e5:22:5d:da:f7:b8:43:21:68:bb:7b:26:
79:a9:bf:2f:9a:68:35:9e:29:f4:bf:31:82:94:2d:d2:56:47:
39:55:f9:85:0b:93:e5:f9:db:62:f7:a4:03:48:20:73:54:c5:
44:2e:6a:0e:29:f4:3c:2e:95:89:84:71:f1:71:a6:01:3f:29:
a1:fc:52:47:2c:b6:2d:6e:9f:54:c4:98:d8:5d:68:ea:7e:79:
7f:26:6a:ce:9d:e6:3c:52:be:1a:86:84:27:88:26:ab:c5:42:
a6:59:d6:e8:19:6a:c2:94:cd:e1:13:d0:d9:be:3f:1a:eb:eb:
3d:34:11:03:3f:0c:a6:60:2b:72:1e:45:e0:c6:d7:98:51:7d:
cc:73:a9:69:56:8f:8f:5a:33:e9:8c:ac:6a:69:e8:45:70:a9:
ea:91:33:37:a5:97:9f:06:df:3a:89:07:6c:09:5d:ea:a2:56:
75:b8:11:ad:e2:95:cd:86:1a:57:bb:3a:0e:f2:2d:a3:08:52:
48:1f:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:17:18 2025 by rpki-client