Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/wH79H7VLCdN5YtP0LxlWGgP-7wY.roa
File: wH79H7VLCdN5YtP0LxlWGgP-7wY.roa (raw, json)
Hash identifier: Y7802HKFTg1oTxqjc4QwPKue1f3pDtAL5PzfBXV2MTY=
Subject key identifier: C0:7E:FD:1F:B5:4B:09:D3:79:62:D3:F4:2F:19:56:1A:03:FE:EF:06
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019A0C139CB8BA94EB7A76B830E262450A6A
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/wH79H7VLCdN5YtP0LxlWGgP-7wY.roa
Signing time: Wed 22 Oct 2025 13:20:03 +0000
ROA not before: Wed 22 Oct 2025 13:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31251
IP address blocks: 85.203.0.0/22 maxlen: 22
85.203.0.0/24 maxlen: 24
85.203.2.0/24 maxlen: 24
85.203.3.0/24 maxlen: 24
85.203.5.0/24 maxlen: 24
85.203.6.0/24 maxlen: 24
85.203.12.0/24 maxlen: 24
2a02:a10::/29 maxlen: 29
2a03:60c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:13:9c:b8:ba:94:eb:7a:76:b8:30:e2:62:45:0a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Oct 22 13:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c07efd1fb54b09d37962d3f42f19561a03feef06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:35:a4:d8:9c:15:67:42:5a:b7:4d:a2:78:
43:4b:ef:cf:c8:fa:83:77:e8:30:82:99:5f:1e:80:
a0:9e:f0:ab:ed:b1:ab:da:3c:48:76:54:16:15:ab:
2a:8e:0e:c3:d7:f0:2f:7f:5a:1f:0a:e1:94:c9:ab:
e2:46:1e:e5:0c:d4:26:8f:6e:6f:f5:fd:0d:99:6f:
da:33:d2:14:0f:a2:98:27:a2:39:a1:03:b3:72:5d:
fb:1e:7c:05:fe:e8:c7:07:a7:f4:f4:05:ac:8a:42:
2c:04:37:7e:6b:46:6d:3d:95:0d:e0:aa:f0:29:b0:
46:0d:8f:00:4b:0b:15:9f:7d:e9:4c:e2:8b:43:8f:
7c:79:7c:d7:74:c9:8b:9b:28:46:6f:30:3d:89:10:
d8:91:3e:6c:31:f5:fc:95:aa:d4:fd:79:1a:f3:7e:
d0:e0:4b:a7:de:ac:21:1b:52:7e:9d:73:bd:c4:28:
5b:b4:9b:3f:ef:7d:44:ef:c5:2b:d5:0e:a8:98:79:
68:3a:74:3e:47:29:ba:80:0f:2e:37:01:b4:8f:7c:
98:fe:94:fe:fc:e7:5f:76:52:ba:f2:fb:5a:8e:9a:
a4:47:38:fa:c0:44:f3:e7:d1:bc:14:d2:03:4a:93:
28:d5:8f:b7:8a:b6:a7:4f:3d:3c:d0:35:23:40:da:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7E:FD:1F:B5:4B:09:D3:79:62:D3:F4:2F:19:56:1A:03:FE:EF:06
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/wH79H7VLCdN5YtP0LxlWGgP-7wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.0.0/22
85.203.5.0-85.203.6.255
85.203.12.0/24
IPv6:
2a02:a10::/29
2a03:60c0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:98:14:74:5c:20:64:af:04:1c:36:60:dd:f6:66:dc:6d:11:
87:29:d0:9a:5d:32:b0:fd:e0:75:81:9c:58:4b:04:70:54:2a:
ea:6c:f2:04:86:b0:03:34:34:f7:50:81:f2:d4:c5:8c:30:1a:
e4:ab:05:f1:ce:26:c1:9b:9d:a5:77:c5:19:d3:43:3c:f6:e5:
49:81:ac:e0:a4:20:46:83:0d:ca:6b:0b:1c:4e:55:c3:06:b6:
20:3d:c9:78:85:ea:56:7c:5d:f9:8b:1d:da:fb:4f:97:f7:4a:
ea:c7:7b:e9:9d:f4:16:dd:b8:de:28:ba:51:d6:ef:ad:4f:81:
69:fe:96:40:df:23:bb:56:25:d1:e9:f0:cc:cf:d9:a0:89:32:
b9:2b:39:19:ac:39:92:65:13:97:10:5b:9f:16:4d:e2:ec:97:
15:a4:95:61:9e:d5:be:d7:32:d1:21:dd:88:a0:5d:9c:fc:f6:
6a:de:51:ab:2c:49:eb:7d:f6:6a:79:3a:cf:a3:b8:c0:ff:c9:
b0:e7:69:2a:92:c6:fc:12:aa:fd:fc:a1:d6:47:fe:84:44:b6:
87:e4:d9:b3:c9:c7:e1:67:d4:a3:05:e2:e4:0a:b3:c8:0f:f2:
8f:49:cc:d1:4f:54:43:9a:99:19:07:a7:6e:b8:f8:74:65:63:
ca:40:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:47:03 2025 by rpki-client