Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/I-sX0mMjM8kXRo5NUo2O1J5bfdk.roa
File: I-sX0mMjM8kXRo5NUo2O1J5bfdk.roa (raw, json)
Hash identifier: Go2R3bZJJoI7RVBZI1wnjguo8NeRa3WOvzexNUQ8j3I=
Subject key identifier: 23:EB:17:D2:63:23:33:C9:17:46:8E:4D:52:8D:8E:D4:9E:5B:7D:D9
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019A39B87D249223722A50BB255815DF7790
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/I-sX0mMjM8kXRo5NUo2O1J5bfdk.roa
Signing time: Fri 31 Oct 2025 10:03:03 +0000
ROA not before: Fri 31 Oct 2025 10:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205634
IP address blocks: 158.94.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:b8:7d:24:92:23:72:2a:50:bb:25:58:15:df:77:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Oct 31 10:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23eb17d2632333c917468e4d528d8ed49e5b7dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:5a:49:e3:18:c9:06:2e:49:eb:d0:e0:a0:
9b:cc:17:e9:cb:b7:33:2a:de:2b:ea:2a:41:53:63:
5a:c8:8d:b2:39:fb:a2:af:07:8f:44:91:3e:f0:bd:
32:89:f9:3b:01:d7:ef:44:29:c8:d3:25:dd:41:1f:
c5:38:c3:8b:fe:ce:07:d7:27:35:0b:2a:02:f0:63:
1c:a6:c0:eb:38:97:7f:51:75:78:a9:11:16:e4:75:
30:88:b0:5b:c5:e2:da:83:88:e5:a0:9f:c9:00:ca:
62:b4:c2:4d:08:66:ea:91:2a:e7:fb:f4:54:c5:28:
ac:9b:3f:04:0c:7b:eb:cb:47:e1:a3:b0:98:f9:83:
57:6e:63:ec:72:4b:e8:40:4b:57:29:99:74:0a:13:
fa:57:ac:55:8d:05:a9:12:85:81:ae:e8:99:ae:0f:
6c:85:5a:07:5f:44:ce:4a:aa:9f:25:35:d4:9a:d5:
ca:e6:50:ed:8f:d9:98:4b:e6:ec:27:23:04:d5:23:
64:69:61:3e:09:ae:77:b5:53:47:f5:27:12:69:77:
d8:ce:22:f0:11:a6:fb:f1:54:fa:20:45:64:ed:97:
64:7b:2f:7c:cd:5c:64:2a:07:44:8a:ba:ce:9c:02:
41:df:7a:f4:b8:4f:16:83:26:28:45:ff:95:4d:15:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EB:17:D2:63:23:33:C9:17:46:8E:4D:52:8D:8E:D4:9E:5B:7D:D9
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/I-sX0mMjM8kXRo5NUo2O1J5bfdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.213.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c1:3f:2a:23:81:42:92:74:52:85:90:a6:ee:0d:49:aa:0a:
a8:8f:8f:81:c8:11:fb:d2:76:b8:19:87:b1:89:58:eb:d3:cb:
a0:72:b4:f1:48:d2:39:24:5f:a7:c5:59:e4:97:6c:e7:29:60:
75:23:56:e8:c3:44:ff:e7:84:b5:92:d9:a5:84:39:64:9c:d2:
5a:e8:5a:ad:ae:f8:b5:8c:3b:99:25:4d:12:85:b0:aa:a6:0a:
47:af:57:f3:6a:b8:87:52:44:0d:2d:a0:a4:fa:00:eb:4f:a1:
7d:d3:f7:64:ac:25:fe:69:5b:70:ec:b9:a8:bd:0f:f9:7e:60:
0c:b0:07:66:19:12:dd:64:86:f3:02:82:20:89:1f:70:43:00:
b0:a3:e0:28:cb:59:d1:a6:13:f3:97:92:65:bb:5b:0b:04:d1:
54:e7:4e:7c:7d:b0:66:c1:c0:5d:71:ed:f4:6d:0a:5d:16:07:
29:b5:76:f7:96:bf:8a:2b:f4:2b:45:28:5d:10:a3:0d:a7:ea:
5a:60:49:20:25:e5:1a:97:c9:6b:56:05:88:94:54:c6:36:67:
27:55:6b:77:c8:81:d4:59:09:01:a7:35:1c:44:0c:b8:1a:58:
07:2b:4c:c9:d6:f5:73:62:b9:98:d6:4b:01:90:87:90:fd:5b:
8a:15:a6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:11:11 2025 by rpki-client