Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cH4X2RZ3HdtPTDN5VaJYeQ7JMDE.roa
File: cH4X2RZ3HdtPTDN5VaJYeQ7JMDE.roa (raw, json)
Hash identifier: 3q+hShLmRzyr653KWAz2ORuQjJePhPo2M+kG/soVhEo=
Subject key identifier: 70:7E:17:D9:16:77:1D:DB:4F:4C:33:79:55:A2:58:79:0E:C9:30:31
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A059C8077A9644EDAA0167C0F1C00E441
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cH4X2RZ3HdtPTDN5VaJYeQ7JMDE.roa
Signing time: Tue 21 Oct 2025 07:12:13 +0000
ROA not before: Tue 21 Oct 2025 07:12:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135392
IP address blocks: 178.215.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:9c:80:77:a9:64:4e:da:a0:16:7c:0f:1c:00:e4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 21 07:12:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=707e17d916771ddb4f4c337955a258790ec93031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:94:c2:3c:54:2c:57:ed:0e:8b:a5:53:41:
c3:e0:0f:db:f5:78:32:cd:43:45:b6:bc:af:2f:3a:
d0:45:7e:7d:70:a9:92:b4:ec:2a:77:43:31:42:ab:
d0:4e:08:29:86:8a:09:02:8a:f2:0a:ce:c8:bf:06:
15:65:f3:61:7b:6a:e9:a2:5f:54:93:41:05:ee:33:
d2:a0:9a:7b:1f:7c:46:cf:80:bd:36:74:65:38:1c:
13:12:df:08:91:4b:5b:3a:31:e4:d2:e5:5e:b9:44:
34:2f:36:33:de:af:dc:60:bd:a0:62:7b:da:19:09:
11:9e:be:6d:5b:9a:aa:dc:b3:66:38:0e:4c:f4:bb:
48:c9:0a:55:9e:d3:e5:9e:f0:97:37:4f:6e:dc:9d:
3d:f1:ce:cf:30:bb:bc:e4:3c:57:a7:fe:f8:45:2a:
2d:9a:34:4a:2a:4d:66:2d:01:cb:20:9c:9f:99:e3:
73:3b:70:ef:15:c6:89:51:73:15:8d:e7:d2:10:62:
4b:a0:f4:36:c9:f8:f8:af:28:75:0d:39:d2:91:7e:
b1:66:c0:e1:a4:24:6e:48:e8:a0:5f:a3:a1:f3:1f:
e0:37:bc:2f:30:eb:a2:9f:87:f0:dc:7e:c6:25:b5:
ef:0e:78:01:e6:53:b0:b5:5f:65:6a:37:0d:26:d5:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7E:17:D9:16:77:1D:DB:4F:4C:33:79:55:A2:58:79:0E:C9:30:31
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cH4X2RZ3HdtPTDN5VaJYeQ7JMDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.227.0/24
Signature Algorithm: sha256WithRSAEncryption
42:bf:8e:4b:68:1a:3f:f4:bb:85:26:cc:4b:de:fc:aa:f2:66:
16:05:b4:30:cc:44:28:42:8e:8d:ad:9b:26:d0:b1:5e:c6:7c:
b9:d4:c1:b8:de:27:6e:c7:95:48:ee:93:86:77:61:75:bc:d9:
ea:87:f1:83:f7:4e:f4:77:a0:d9:91:c5:0e:0b:82:90:52:f4:
12:6b:e4:1d:29:11:4a:71:21:0d:27:41:b6:2f:ef:63:36:c4:
64:a4:3f:49:fe:2e:f8:eb:19:46:94:6d:02:7f:60:23:0f:6a:
e5:a2:f4:09:3a:a0:5b:1d:de:d0:df:1f:9f:bd:38:18:05:9a:
d8:54:da:61:95:b0:7f:7f:10:f8:cc:65:43:68:bf:55:61:96:
16:f0:64:7d:ca:cd:b4:b4:8d:60:a3:9e:3a:84:73:3f:4b:98:
0a:c1:f2:5a:46:41:19:1b:71:13:9e:dd:e4:07:99:26:e7:54:
b4:55:0c:38:5b:fb:51:4f:ff:d2:ed:71:85:ed:01:bb:b5:91:
13:73:b4:3b:b6:4e:7b:20:39:0a:25:cc:fc:23:d7:a5:e3:21:
d0:e2:fe:58:e4:0d:b2:d6:00:09:05:18:b9:35:2f:c2:ff:c9:
ec:a2:66:57:a3:f2:7c:50:77:96:60:2f:92:01:a8:04:db:bf:
d3:50:24:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:55:50 2025 by rpki-client