Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hGhcmr7XWlW-HJqSlHsChntcXwc.roa
File: hGhcmr7XWlW-HJqSlHsChntcXwc.roa (raw, json)
Hash identifier: sJw6DC0yPXpDitHap+tfLAgurogRJkCglW4fsE80JJc=
Subject key identifier: 84:68:5C:9A:BE:D7:5A:55:BE:1C:9A:92:94:7B:02:86:7B:5C:5F:07
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019A54196BB4A2F0E0F74682861DCBDF3B18
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hGhcmr7XWlW-HJqSlHsChntcXwc.roa
Signing time: Wed 05 Nov 2025 12:59:03 +0000
ROA not before: Wed 05 Nov 2025 12:59:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 94.158.189.0/24 maxlen: 24
157.22.41.0/24 maxlen: 24
157.22.50.0/24 maxlen: 24
157.22.58.0/24 maxlen: 24
157.22.65.0/24 maxlen: 24
157.22.97.0/24 maxlen: 24
157.22.106.0/24 maxlen: 24
157.22.116.0/24 maxlen: 24
157.22.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 18:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:19:6b:b4:a2:f0:e0:f7:46:82:86:1d:cb:df:3b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Nov 5 12:59:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84685c9abed75a55be1c9a92947b02867b5c5f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:6d:92:d3:5b:83:29:32:f9:ef:25:19:4a:
e8:1f:ba:ed:17:16:0d:38:6e:a6:09:5e:a5:3c:7c:
fd:b9:ef:5d:9a:1f:bb:aa:37:31:1f:4a:6f:b7:a1:
de:92:3f:f3:20:3b:dd:8f:7b:3b:91:cd:f0:76:f3:
ba:35:87:db:60:29:be:15:51:14:21:a5:a1:9f:1a:
28:d7:71:d1:85:c7:c0:d2:5f:b5:a0:e9:71:9d:9a:
d2:89:f7:53:91:30:a6:52:2a:dc:75:71:fa:e9:f3:
a3:52:8e:2d:0f:80:c8:32:46:91:80:07:81:97:2f:
63:b3:e7:f4:3e:27:b9:5e:3a:3a:e9:e2:bd:59:02:
bc:72:33:aa:95:96:bc:41:40:97:8d:ed:1f:97:e9:
13:28:19:d0:76:9d:3e:b7:73:1a:02:6a:78:b6:d6:
3d:8a:a9:59:fd:67:6d:fe:87:16:5c:bd:93:68:c9:
88:ea:90:0a:fa:7b:c4:61:52:28:a5:af:8b:2e:45:
93:5b:90:38:87:40:61:a4:9e:1d:91:9d:01:18:4e:
ec:c4:69:94:6d:43:d2:7f:e5:b5:f2:0d:8f:c0:40:
c6:2a:dc:8b:e6:47:2d:b2:6f:03:51:6b:57:29:e1:
a6:d2:21:5e:85:7e:8d:57:07:c1:32:09:4e:13:18:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:5C:9A:BE:D7:5A:55:BE:1C:9A:92:94:7B:02:86:7B:5C:5F:07
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hGhcmr7XWlW-HJqSlHsChntcXwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.189.0/24
157.22.41.0/24
157.22.50.0/24
157.22.58.0/24
157.22.65.0/24
157.22.97.0/24
157.22.106.0/24
157.22.116.0/24
157.22.119.0/24
Signature Algorithm: sha256WithRSAEncryption
55:9f:db:b0:f3:ae:c4:bb:aa:a1:dd:4a:33:74:dc:7a:2b:df:
8c:13:27:89:e7:c6:b4:cc:b1:d9:4c:23:2c:b5:8f:c7:a7:d4:
a1:23:53:b2:9f:79:15:dc:e9:f2:99:51:39:a1:21:6f:5f:4b:
31:ec:fe:f3:37:8a:90:d2:cd:f9:ae:eb:3d:c9:9b:81:3e:78:
c4:37:31:7d:bd:51:93:c5:a1:32:4b:40:03:38:88:a7:10:93:
fc:8c:97:3e:52:a0:e4:ca:3f:3b:b8:30:61:b2:d1:d0:36:26:
ec:00:c5:eb:77:01:a2:18:0a:b5:bc:75:9c:2b:e5:38:75:8b:
38:c4:ae:8c:f2:0c:28:9d:1f:47:16:f8:c2:db:89:ff:81:30:
86:f8:48:98:9d:95:86:cf:08:bd:c0:df:88:8d:b2:f9:eb:dd:
85:41:a0:63:b4:01:6b:b7:9a:1f:35:f1:80:18:fd:54:b6:39:
df:86:92:15:d5:85:d9:ad:0f:67:90:78:c8:41:8b:50:3b:b3:
bd:c8:8a:ac:3e:91:65:f3:0c:d0:f4:4a:3c:55:d7:bd:2a:1c:
cf:19:56:bf:9f:4d:e0:9d:12:60:f7:e4:91:71:ee:3a:cc:7a:
92:72:5d:d0:71:b7:ea:0a:fe:71:fd:aa:9d:1f:28:ab:91:7f:
f0:8e:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 23:03:24 2025 by rpki-client