Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/94-CfRKJcsd-Ydd4FDNQKX0Zp3E.roa
File: 94-CfRKJcsd-Ydd4FDNQKX0Zp3E.roa (raw, json)
Hash identifier: T/WAoLxo0PnxVr7nnlx3pomYG3O8lrRy6KTbycXayvo=
Subject key identifier: F7:8F:82:7D:12:89:72:C7:7E:61:D7:78:14:33:50:29:7D:19:A7:71
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 0198515CAF4798F7E30F8D7A92F3135BE48D
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/94-CfRKJcsd-Ydd4FDNQKX0Zp3E.roa
Signing time: Mon 28 Jul 2025 14:08:05 +0000
ROA not before: Mon 28 Jul 2025 14:08:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46635
IP address blocks: 185.22.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:5c:af:47:98:f7:e3:0f:8d:7a:92:f3:13:5b:e4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jul 28 14:08:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f78f827d128972c77e61d778143350297d19a771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ca:95:5a:f6:63:ed:98:d5:37:6e:3c:e5:6e:
b0:9f:ac:db:ee:eb:9b:d5:e4:b9:97:3c:10:0d:93:
f1:e9:40:4c:88:29:27:07:73:40:6a:08:fc:9f:a8:
bd:74:90:09:e0:da:21:e0:5f:3d:db:1f:ad:3d:64:
e9:83:e0:92:88:1a:d3:63:fa:68:8c:87:9d:33:8b:
38:19:d6:5a:19:dd:88:34:01:93:82:aa:1d:cd:81:
e5:88:bc:b0:7c:e3:66:a7:35:11:68:36:19:bd:10:
59:84:4e:a7:55:ce:3f:e2:1d:9e:2a:47:33:e7:1e:
a1:9a:6b:9c:01:d9:3d:e3:86:be:b8:f4:ec:c8:4c:
db:56:82:fc:37:4e:74:af:c1:aa:00:2d:e7:4a:59:
55:70:da:ac:09:fc:20:81:47:71:60:80:b5:3e:13:
af:48:48:20:c1:b7:e1:4a:ce:54:bb:56:c9:e0:50:
ee:f6:e3:9a:ed:be:bb:10:d3:61:b3:0e:4d:54:52:
0b:4e:22:b8:22:9e:8f:4c:ef:d6:c3:96:1d:4b:54:
eb:b0:d7:d9:a2:d6:5b:23:4d:65:1b:e2:01:07:e0:
ed:16:26:a8:a2:50:02:8e:e3:c2:99:28:50:50:3e:
f8:41:24:ed:57:4c:09:4a:51:16:a4:53:6d:38:b1:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8F:82:7D:12:89:72:C7:7E:61:D7:78:14:33:50:29:7D:19:A7:71
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/94-CfRKJcsd-Ydd4FDNQKX0Zp3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.41.0/24
Signature Algorithm: sha256WithRSAEncryption
31:08:e6:64:56:49:5b:cd:c9:f6:4b:d8:1b:e5:e2:e6:67:5b:
e6:45:77:17:1c:bc:c8:2b:01:f6:63:61:45:4b:4b:13:e1:ce:
1e:f0:4b:6e:f3:c5:ab:ef:c7:ba:94:9b:22:ca:2c:26:83:79:
89:2e:53:3b:fb:e1:4f:20:01:2d:34:51:14:62:03:0a:ce:a9:
78:ea:f6:a6:31:45:42:ac:73:c5:0f:21:c5:49:10:ac:ac:90:
9b:bf:d8:9c:75:0e:e7:58:ae:13:06:98:d5:3b:5a:77:ba:d4:
ec:55:3d:47:a9:56:bd:d1:c6:2e:ad:b1:20:83:37:fa:53:d3:
c5:7c:a6:f0:c2:db:ad:4a:64:1f:81:94:33:72:dd:13:8c:26:
43:3c:04:b1:c7:81:e1:a0:80:d5:3d:93:f5:c5:52:85:e7:81:
02:bc:79:41:c0:7b:5a:90:e8:20:87:f0:e2:01:46:f2:c4:ac:
32:d0:7a:2c:05:55:03:c2:12:8d:c9:e1:18:b5:28:62:de:21:
33:0e:3b:d2:13:fb:c4:12:7d:d9:32:8b:42:94:a5:3d:07:cd:
f6:9d:36:3a:e0:3c:3a:3b:a4:e9:a2:f2:c4:b7:5a:39:20:75:
00:62:7a:bc:08:14:44:e1:68:db:40:5b:25:64:1b:2e:3e:cc:
f0:e6:d5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:27 2025 by rpki-client