Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aMz4D7rmN8pbzKJK3xqlJBDyjfI.roa
File: aMz4D7rmN8pbzKJK3xqlJBDyjfI.roa (raw, json)
Hash identifier: tg8rWkJXZh9Y0ot22gFAvAn8mpZswZ5Sbo6El9bqyUA=
Subject key identifier: 68:CC:F8:0F:BA:E6:37:CA:5B:CC:A2:4A:DF:1A:A5:24:10:F2:8D:F2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A2B44D828B54FD6717CC7A79535D77FB7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aMz4D7rmN8pbzKJK3xqlJBDyjfI.roa
Signing time: Tue 28 Oct 2025 14:42:03 +0000
ROA not before: Tue 28 Oct 2025 14:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.60.0/23 maxlen: 23
87.121.61.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
94.156.253.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
212.87.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:44:d8:28:b5:4f:d6:71:7c:c7:a7:95:35:d7:7f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 28 14:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68ccf80fbae637ca5bcca24adf1aa52410f28df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:86:6f:3b:9d:39:30:3d:90:2c:e4:f5:39:
b0:e0:68:b3:6a:6c:25:0f:d1:9e:17:cb:13:3a:03:
e3:cd:31:1d:9f:ef:b7:c0:64:d9:2f:5e:07:bf:a1:
b5:d3:07:d2:e0:a4:5e:19:95:8e:e4:1d:68:e4:47:
70:f7:37:4e:d4:28:6e:a4:10:e8:ec:ef:d5:a8:c0:
ec:8f:aa:34:0a:04:a4:f5:05:4e:c6:45:03:ca:3b:
0e:6d:9c:a8:24:7d:d5:fa:c9:54:e4:c0:1d:a6:ca:
4d:4e:fe:ab:b4:38:fa:af:52:3e:08:1c:ff:12:7b:
f2:68:33:0e:81:fa:08:a9:a5:c9:90:27:32:6f:ab:
e0:24:8c:e3:d7:df:bd:cb:0f:8f:06:58:67:c7:cc:
31:1b:41:1c:5f:9f:af:81:80:45:9d:bd:a4:87:29:
9a:52:19:71:bf:45:26:70:18:0f:9a:4a:9e:0e:09:
ef:9f:83:2c:d0:24:ff:ae:c4:4d:5c:32:1f:b4:88:
f4:e4:ef:8c:85:0b:71:77:bf:26:31:bb:7e:f8:59:
a4:cc:c5:89:8d:0f:27:e8:d0:d1:a3:6f:e8:b8:a0:
94:1b:85:a1:49:47:4f:60:82:59:7b:0a:d8:bf:31:
53:b4:cb:33:08:d1:c7:7a:37:73:87:74:3f:a9:75:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CC:F8:0F:BA:E6:37:CA:5B:CC:A2:4A:DF:1A:A5:24:10:F2:8D:F2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aMz4D7rmN8pbzKJK3xqlJBDyjfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.60.0/23
93.123.74.0/23
94.156.253.0/24
185.252.160.0/23
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b4:9d:a7:d4:ce:77:09:e5:d5:13:9b:4d:da:c2:27:53:3b:
95:55:4f:8a:a1:0f:28:2d:f0:a9:28:30:ae:50:c5:41:ca:79:
81:9f:d6:ee:de:b2:49:16:6b:ca:d1:73:94:92:f4:7c:c5:c3:
96:4c:1d:ee:1b:1e:e1:49:48:0d:62:25:74:a4:9a:9c:d4:0a:
33:9b:57:23:cc:ee:14:0a:f9:53:53:74:6b:b5:e1:77:4e:5e:
38:3b:89:07:0e:3e:e3:ee:41:f8:b1:c1:c6:db:33:eb:1a:a5:
d6:c5:31:ee:12:44:2b:a3:91:ff:23:96:bc:db:66:4f:fa:bd:
3e:1b:f9:42:a0:0c:8f:50:c9:fd:ae:94:19:9a:d8:67:6b:b0:
1e:85:7b:6d:29:46:a9:aa:ca:ea:3a:03:a1:99:4b:77:02:62:
2c:65:b5:49:d9:9c:c2:d3:b3:97:09:8c:a0:bb:7d:96:b2:a3:
cd:fc:d3:30:ec:00:c2:c7:de:e7:b0:f9:9e:56:0f:5e:13:22:
41:ad:90:5c:1a:3f:31:3a:2d:9f:1f:1d:df:7d:c7:d8:6e:92:
5c:77:cb:cc:61:b6:f2:df:3f:f4:b8:b1:58:8e:9d:56:4d:b3:
dc:54:44:7b:32:93:06:09:e6:4a:a9:25:8c:74:d1:94:37:f5:
de:d3:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:36:11 2025 by rpki-client