Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xNhehFnYPthb2s-kFEk1P3Yo_us.roa
File: xNhehFnYPthb2s-kFEk1P3Yo_us.roa (raw, json)
Hash identifier: SXAxlywZyIGBCMumwTHy7lgtTybJMpTUQWStYB9Hj6Q=
Subject key identifier: C4:D8:5E:84:59:D8:3E:D8:5B:DA:CF:A4:14:49:35:3F:76:28:FE:EB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A05D087096216336B36AE24439208C325
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xNhehFnYPthb2s-kFEk1P3Yo_us.roa
Signing time: Tue 21 Oct 2025 08:09:03 +0000
ROA not before: Tue 21 Oct 2025 08:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209630
IP address blocks: 93.123.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:d0:87:09:62:16:33:6b:36:ae:24:43:92:08:c3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 21 08:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4d85e8459d83ed85bdacfa41449353f7628feeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:0e:cb:00:df:06:47:7e:f2:09:4b:6e:1c:
99:25:7d:fa:a5:13:7e:c9:c9:68:66:29:02:58:4b:
eb:f1:08:4d:14:fc:a6:f4:d5:57:d9:32:aa:a4:5b:
f7:1e:0c:18:5a:31:86:8f:95:72:11:f8:ae:8b:67:
d7:6d:42:d1:42:5e:d5:b2:f4:b9:9e:d5:c1:d1:eb:
90:df:33:e2:a1:29:00:ce:14:3d:91:e2:6f:d9:41:
72:c4:dc:29:e5:18:1d:5f:48:10:b6:b8:6f:c9:71:
e3:99:fe:00:52:1b:f9:9a:e4:54:58:1f:4d:03:6a:
a0:6f:0b:33:c5:49:73:5f:8e:b0:90:34:c3:b7:fd:
ff:d2:f2:d9:48:3c:34:da:93:55:59:85:1f:e9:27:
b9:69:03:9d:c8:89:77:d6:eb:be:d2:bb:fe:94:bb:
fb:8e:a3:6a:f1:f8:b7:11:40:d6:77:85:5b:cc:80:
7e:d4:6f:12:db:9a:de:46:fa:ff:1f:35:38:62:13:
c5:74:9f:46:db:dd:b4:22:a8:37:e8:e2:8b:2d:68:
4a:c5:4b:09:c7:44:ca:e8:06:f4:7f:c1:98:d2:85:
18:ec:75:1d:1b:b9:d3:59:21:7a:2d:54:e6:b9:9c:
51:83:fc:a7:a0:73:cc:07:23:a0:51:58:12:81:dc:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D8:5E:84:59:D8:3E:D8:5B:DA:CF:A4:14:49:35:3F:76:28:FE:EB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xNhehFnYPthb2s-kFEk1P3Yo_us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.118.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f0:90:55:2a:62:60:ff:1f:c9:ae:52:e4:c3:d7:12:87:8d:
25:ad:1b:1b:fd:3c:bf:8f:82:8f:34:9b:d2:a6:30:f4:c9:84:
7a:c5:85:ea:61:fb:15:ce:a1:45:db:47:ad:5f:b0:fb:02:8a:
28:f2:d3:ae:fe:4e:3b:b1:9f:60:e1:bc:38:7d:1a:d9:9e:bc:
83:9f:d6:fb:6a:12:24:d3:10:47:eb:fc:2d:d0:9a:60:7b:be:
47:79:4d:a2:c1:76:45:93:2e:c3:5b:79:cb:2f:ba:d2:ad:4a:
bd:38:76:63:8f:ec:49:e5:ae:5b:e6:a0:5b:6b:31:b9:94:ab:
8d:56:0a:94:c6:09:81:5e:47:9f:80:47:29:5e:97:de:8b:f5:
02:ea:04:75:bd:b4:c5:20:32:4e:f8:63:f9:47:fe:2a:ee:ab:
a3:44:08:09:9f:e1:7b:2b:d7:4b:a4:4e:37:03:0b:bc:cf:d4:
a6:94:20:87:8b:a1:40:05:40:dd:04:77:6e:1a:e3:c9:ce:40:
bb:50:43:37:d8:c5:fc:c8:e3:db:d9:92:5c:24:55:98:bc:ba:
71:c6:10:cc:70:35:00:d5:1f:d6:97:b3:b6:f2:59:76:0d:9e:
13:be:34:e2:97:e6:dd:71:47:61:fb:6e:5f:8a:5d:17:ea:1b:
c4:9f:cd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:23:09 2025 by rpki-client