Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/vHSz7syZCdc9si7_Pq1PLv6tdnc.roa
File: vHSz7syZCdc9si7_Pq1PLv6tdnc.roa (raw, json)
Hash identifier: DpwRdEh/R0r3FLFeNbLkCKGthqDKuAQzsAmQCtR8AOE=
Subject key identifier: BC:74:B3:EE:CC:99:09:D7:3D:B2:2E:FF:3E:AD:4F:2E:FE:AD:76:77
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019A2EE185D64919861E0C557E85C8D8E9D1
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/vHSz7syZCdc9si7_Pq1PLv6tdnc.roa
Signing time: Wed 29 Oct 2025 07:32:02 +0000
ROA not before: Wed 29 Oct 2025 07:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206481
IP address blocks: 45.128.200.0/22 maxlen: 22
86.107.40.0/23 maxlen: 23
89.32.189.0/24 maxlen: 24
93.114.247.0/24 maxlen: 24
185.218.96.0/22 maxlen: 22
185.219.120.0/22 maxlen: 22
188.214.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:e1:85:d6:49:19:86:1e:0c:55:7e:85:c8:d8:e9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Oct 29 07:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc74b3eecc9909d73db22eff3ead4f2efead7677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:85:89:b4:02:24:41:8a:ac:d0:77:d9:76:45:
31:c7:87:9f:96:9e:70:2e:3a:91:db:ab:09:7b:6b:
89:40:97:5e:99:bc:bb:59:7d:e5:a8:c5:6c:9a:c8:
7e:d5:b0:f8:85:60:08:83:4d:72:ee:e4:a1:c4:bb:
3e:cc:7a:3e:4c:96:18:65:b1:35:31:21:8c:19:92:
7b:42:fc:4f:28:ac:c4:c1:0f:1c:5b:b8:f4:b0:cd:
12:ad:5d:74:2d:4f:4b:d6:63:e2:a1:28:bb:0a:28:
5d:24:ff:fb:3f:8f:e5:a2:5a:be:49:a7:7c:b7:2d:
ab:c3:b3:4b:6e:52:04:80:95:7f:15:de:cf:04:0b:
40:81:c2:d3:92:3b:40:75:c8:cb:05:0f:4e:5d:c7:
99:15:a8:02:d0:16:b3:89:a2:22:5b:ed:c2:59:53:
db:01:09:82:47:d7:5c:62:86:d9:c0:bf:78:fa:54:
e1:95:f3:c8:c4:df:39:94:b8:f9:74:25:42:db:77:
db:e7:f5:01:e8:9a:08:b9:00:55:f7:2e:e0:b5:f3:
83:13:8e:8d:5b:c3:2e:ec:b0:fa:a8:eb:fb:be:32:
1c:f2:44:1a:49:5c:13:bc:9a:d7:9b:2c:11:fe:10:
46:8c:99:5f:59:83:75:5b:74:c1:14:af:3e:43:ff:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:74:B3:EE:CC:99:09:D7:3D:B2:2E:FF:3E:AD:4F:2E:FE:AD:76:77
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/vHSz7syZCdc9si7_Pq1PLv6tdnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.200.0/22
86.107.40.0/23
89.32.189.0/24
93.114.247.0/24
185.218.96.0/22
185.219.120.0/22
188.214.212.0/23
Signature Algorithm: sha256WithRSAEncryption
58:73:2f:06:49:ac:bd:45:c3:1d:fd:01:68:22:0e:eb:a7:b2:
70:55:c6:65:b8:79:ab:47:7d:76:ba:dd:14:8f:dd:e6:ad:9a:
00:6e:b8:33:b9:a3:4f:42:31:8b:7c:06:05:22:d7:04:75:d2:
a6:a3:56:65:1e:61:02:49:9c:36:db:55:7c:53:38:3e:01:fa:
e4:7c:f1:dd:6e:91:e2:bc:9b:66:c7:14:7e:00:96:94:72:8d:
b0:77:1c:ab:a2:11:4e:30:a4:04:9a:50:53:60:96:51:77:5f:
8a:90:d1:5b:67:01:c5:12:51:8d:4f:73:be:3c:9f:ec:bf:6a:
a8:4b:ca:3c:78:94:4f:74:6c:43:e2:d5:35:59:43:16:e2:08:
df:36:9d:91:8f:93:e8:ee:4d:bf:d2:4f:4e:07:7d:c1:4a:01:
91:0d:7d:a6:79:53:30:0c:64:84:12:74:aa:3b:99:9b:98:d8:
7c:d0:43:46:5b:a6:05:f5:09:b0:0d:cc:43:be:7e:8f:cf:35:
7c:ef:34:ed:c3:f5:1a:9c:38:8a:86:9a:71:21:55:b5:b7:8a:
2a:cb:73:8c:af:bc:8a:f3:ec:df:50:b1:52:21:65:fd:54:fb:
b4:93:b8:97:20:6f:6e:cb:ff:67:b3:1b:b3:6d:72:68:f0:33:
dc:2f:81:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:27:57 2025 by rpki-client