Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0Vm4cX6YNbHxzFLnP8S_Xz79e60.roa
File: 0Vm4cX6YNbHxzFLnP8S_Xz79e60.roa (raw, json)
Hash identifier: z12oUPSOG13FcwYLFSfnV8yb28jrBK8ysQV1RuK/D9A=
Subject key identifier: D1:59:B8:71:7E:98:35:B1:F1:CC:52:E7:3F:C4:BF:5F:3E:FD:7B:AD
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019A544646E9E2EA7BAD5B7B4291D065C159
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0Vm4cX6YNbHxzFLnP8S_Xz79e60.roa
Signing time: Wed 05 Nov 2025 13:48:03 +0000
ROA not before: Wed 05 Nov 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213267
IP address blocks: 87.246.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:46:46:e9:e2:ea:7b:ad:5b:7b:42:91:d0:65:c1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Nov 5 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d159b8717e9835b1f1cc52e73fc4bf5f3efd7bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:9a:3b:b9:eb:4e:2e:27:18:62:97:7c:ca:
db:18:c6:bb:fb:f3:08:1d:27:3a:05:ef:91:fe:59:
ce:b6:e8:0f:f0:97:4a:00:67:89:8b:7e:40:fd:f3:
8b:09:f5:d8:7a:4b:97:76:cb:6a:1b:ae:5e:fd:b7:
f7:13:24:56:f3:75:31:73:03:e8:3e:8e:49:8d:22:
30:5c:c8:40:c1:a2:1c:6a:2d:31:f9:3e:23:2e:e8:
9d:65:0d:37:d5:ec:09:27:3d:30:33:eb:af:a6:e0:
c5:06:4b:82:e0:f9:5d:00:70:8f:50:27:2c:08:30:
56:91:da:67:0d:de:a7:eb:1c:94:bb:f7:36:08:4c:
18:4f:8f:77:d5:fa:46:e7:30:35:2e:8f:34:89:2b:
cf:71:88:e8:28:10:dc:b8:a7:4f:fb:a3:fe:8b:41:
53:db:0e:23:de:e8:98:8e:78:c6:6d:8b:9c:23:2a:
da:e5:60:ee:7a:52:c8:56:c1:91:64:49:78:c0:f3:
dd:d8:34:99:90:65:00:1e:4e:51:b3:74:38:0f:02:
b3:ed:1a:23:3d:34:24:17:51:e8:81:3c:75:65:c6:
d6:bf:f0:66:f4:e7:0d:df:f1:b5:f8:82:64:1a:bf:
4d:f0:86:62:e1:4e:84:cc:4c:63:8f:60:cd:69:44:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:59:B8:71:7E:98:35:B1:F1:CC:52:E7:3F:C4:BF:5F:3E:FD:7B:AD
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0Vm4cX6YNbHxzFLnP8S_Xz79e60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.160.0/24
Signature Algorithm: sha256WithRSAEncryption
89:27:e5:e3:63:45:b4:7c:3b:de:b4:30:8c:38:3c:9a:d8:db:
7c:74:c6:14:21:8e:1d:f5:5b:2f:7f:cd:86:b8:45:32:0a:d2:
68:da:ce:8b:68:6f:72:16:32:ba:fa:0a:6a:d6:5d:17:10:fe:
96:ac:79:bf:0f:e8:78:a5:90:c8:7c:c7:51:ac:85:1f:b6:5f:
8e:07:04:8f:b5:e5:df:fe:36:38:44:52:7f:bd:53:6a:42:da:
e6:d8:2a:62:f9:c2:2b:01:53:e9:e2:c6:4b:d8:e4:33:54:b1:
c9:28:63:d4:47:c0:2d:9b:18:90:d3:2b:09:76:f7:3c:b1:6b:
29:ae:0c:22:1b:a9:2a:3e:c7:2b:6b:55:31:8d:09:8e:64:08:
e4:5d:e2:56:c1:7e:3b:ee:18:24:a4:a8:67:be:28:51:a5:ef:
73:48:f3:d3:c2:e8:47:fe:7a:bb:0d:d1:72:41:d0:48:1f:9a:
37:a4:61:9e:13:4f:b6:19:64:5f:b9:48:80:b4:14:24:e6:87:
aa:fd:ac:3f:3c:57:d2:0f:f1:d1:7b:e4:ff:71:d2:4c:17:fe:
71:e4:f9:90:2c:8b:02:19:70:b8:29:69:5c:dc:91:57:25:d9:
49:30:3d:50:17:c2:22:a8:24:96:08:15:12:6f:ac:00:c0:b4:
2c:c7:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:42:04 2025 by rpki-client