Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/8hfZpPtt0GO_DVotiG51hg4eT8w.roa
File: 8hfZpPtt0GO_DVotiG51hg4eT8w.roa (raw, json)
Hash identifier: aRQIDK4lxFg6x90EVDVduD7FDzfgBWcJpd7K/cuKbaE=
Subject key identifier: F2:17:D9:A4:FB:6D:D0:63:BF:0D:5A:2D:88:6E:75:86:0E:1E:4F:CC
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 019A58A1E9DA2A54157978F6B8B904AC9058
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/8hfZpPtt0GO_DVotiG51hg4eT8w.roa
Signing time: Thu 06 Nov 2025 10:06:37 +0000
ROA not before: Thu 06 Nov 2025 10:06:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12926
IP address blocks: 185.113.156.0/22 maxlen: 22
213.63.0.0/16 maxlen: 16
213.63.0.0/17 maxlen: 17
213.63.128.0/17 maxlen: 17
213.141.0.0/19 maxlen: 19
2a00:fa00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:a1:e9:da:2a:54:15:79:78:f6:b8:b9:04:ac:90:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Nov 6 10:06:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f217d9a4fb6dd063bf0d5a2d886e75860e1e4fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:82:71:5c:90:b8:f7:92:6b:2f:6b:ad:29:
cd:2a:12:08:49:e9:44:91:2d:bf:ad:3a:5d:7e:77:
2d:26:04:b8:ab:3a:8d:bc:c2:fe:cc:81:ba:8f:4e:
d4:ee:5b:33:ee:f8:20:7c:10:6c:ee:a5:b2:ed:e0:
6a:68:ae:5e:e0:ca:3b:3d:78:29:93:a0:fc:81:d6:
00:a7:2c:bb:cd:c4:61:ca:9e:de:7d:71:16:7f:d9:
90:00:3b:be:4e:ad:04:ec:72:99:18:24:53:11:af:
f4:8c:61:33:14:64:a9:db:e7:c5:45:62:ab:da:93:
f7:67:6f:ea:89:dc:96:de:17:17:b7:be:7a:b8:d4:
a9:37:e4:4c:86:a8:d0:2b:2f:3b:e3:da:13:c7:d1:
91:b6:d3:08:f9:db:11:ee:74:05:49:19:ab:30:14:
4d:0f:bb:77:55:0e:0f:18:47:39:96:20:a1:c1:1d:
51:e9:6a:7f:a6:6f:6d:f4:a4:c8:c0:95:98:c1:7f:
ca:b6:c6:8a:d1:52:6e:db:ce:6c:62:cc:25:ad:b5:
67:39:55:ba:bf:dd:2e:cb:7a:84:82:8c:54:9b:fb:
ce:48:44:7b:c4:7f:c0:20:a7:1a:a0:09:e7:a1:79:
bf:49:82:b7:4e:22:4e:ed:d3:eb:26:d5:48:96:51:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:D9:A4:FB:6D:D0:63:BF:0D:5A:2D:88:6E:75:86:0E:1E:4F:CC
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/8hfZpPtt0GO_DVotiG51hg4eT8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.156.0/22
213.63.0.0/16
213.141.0.0/19
IPv6:
2a00:fa00::/32
Signature Algorithm: sha256WithRSAEncryption
67:db:1d:f5:b9:79:a4:7a:5b:30:97:1c:c6:dd:e6:e4:9e:8f:
40:63:24:ee:10:e6:55:10:df:c3:cb:dd:53:18:ec:94:36:b6:
96:64:0c:0a:08:47:e4:47:78:97:61:81:91:33:67:4a:76:7a:
ab:4e:d1:32:3e:42:79:25:1f:c1:0f:ca:68:83:ac:02:80:8a:
a2:09:d9:52:df:49:fc:a7:70:ed:2c:bc:2a:05:5f:81:88:a9:
87:8c:74:e6:1c:65:c5:84:09:e3:33:80:00:e7:25:04:3a:4c:
37:08:8f:ad:e7:a7:5e:77:cc:ea:9c:be:c4:dd:2f:51:13:23:
5d:89:85:71:9d:ff:38:45:c7:e1:ce:c7:be:89:a3:81:6b:dc:
6b:15:ec:ea:77:03:de:0d:23:3b:16:92:a6:92:12:58:33:35:
81:14:29:d1:ac:0c:57:e5:88:71:08:95:9b:c0:4a:f5:53:7f:
53:46:e0:f1:c8:a1:8e:97:50:e3:9d:4f:d0:75:8c:41:fb:b9:
50:4d:b5:ac:ff:ab:d4:69:6f:aa:bc:19:57:48:bf:b8:84:c3:
67:af:d6:e6:c9:5d:ef:d3:b7:59:62:a5:7f:81:88:17:fd:4b:
77:36:16:9b:f3:08:aa:19:65:58:01:b1:bd:9e:be:79:6a:a0:
8d:9a:20:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:16:07 2025 by rpki-client