Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IoUTU4sJPfhDJ1yl0LghPlzYnmI.roa
File: IoUTU4sJPfhDJ1yl0LghPlzYnmI.roa (raw, json)
Hash identifier: 37cxU2/qatQzYjfXYMiHKknPTLJgMm4a6y3I//S/+S4=
Subject key identifier: 22:85:13:53:8B:09:3D:F8:43:27:5C:A5:D0:B8:21:3E:5C:D8:9E:62
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0198E6281CEF2BD8B61C9B35E791CCAA6947
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IoUTU4sJPfhDJ1yl0LghPlzYnmI.roa
Signing time: Tue 26 Aug 2025 11:34:04 +0000
ROA not before: Tue 26 Aug 2025 11:34:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213861
IP address blocks: 185.244.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:28:1c:ef:2b:d8:b6:1c:9b:35:e7:91:cc:aa:69:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Aug 26 11:34:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=228513538b093df843275ca5d0b8213e5cd89e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:b7:27:32:41:0f:f8:9b:87:9f:32:9b:bc:
39:c8:51:d3:26:a9:bb:a3:a6:35:e1:ad:4d:a2:c8:
a5:45:09:00:73:2b:e2:cd:08:34:90:84:50:e8:a3:
e4:fb:78:7c:9a:17:6c:9f:61:75:dc:27:90:ea:e3:
ec:b2:6e:19:a8:fb:59:31:95:37:c5:64:ad:fb:56:
85:69:95:90:f9:d5:bc:a3:57:85:a5:da:1e:b3:19:
cc:01:4d:16:75:dd:70:4d:e3:d7:d8:c9:bc:05:de:
5d:6a:32:8f:e8:ea:ab:ab:56:46:0e:b5:ab:07:09:
f1:c3:16:59:d1:1a:85:dc:6a:9e:41:cb:a6:7f:e8:
f9:0b:5b:9f:a9:53:1f:fb:fd:64:5a:e9:2f:50:21:
69:33:fe:10:e8:5b:c7:bc:ca:2e:d1:7d:4b:a1:ee:
f7:8b:6b:e0:fd:9c:a8:00:3c:6c:70:f5:38:ff:13:
00:9b:09:02:b0:ac:b5:f3:b4:12:b5:17:de:03:d0:
04:0e:d1:11:45:4a:ba:d9:5f:eb:cd:08:08:b9:a6:
d2:a6:06:9b:1f:55:dd:f0:73:ec:6f:9e:24:75:d0:
c8:35:1e:00:4a:c5:ae:95:73:b9:13:b9:c0:51:9a:
18:b9:92:0d:0f:57:ca:bc:ea:ff:bc:97:34:c9:86:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:13:53:8B:09:3D:F8:43:27:5C:A5:D0:B8:21:3E:5C:D8:9E:62
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IoUTU4sJPfhDJ1yl0LghPlzYnmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.175.0/24
Signature Algorithm: sha256WithRSAEncryption
62:03:c5:40:1f:3c:39:86:87:07:ce:d2:af:c3:6f:a3:93:03:
aa:40:0e:3f:d8:a6:e8:a6:70:07:0b:45:a8:a3:f5:e7:7b:5a:
c2:53:e2:f6:5a:1d:59:87:ef:34:7e:26:e9:79:a5:b0:f3:11:
df:44:b4:2b:f6:42:57:37:ac:ac:3c:7a:97:d6:4d:f3:65:d0:
ab:59:12:98:71:53:90:ee:8b:77:3d:35:7d:dd:f2:87:17:3c:
2a:7c:53:58:13:67:8f:d0:21:b5:f4:00:2b:78:be:b1:0b:95:
a4:57:b0:54:ff:8e:fe:ef:d7:95:0f:68:b2:3c:44:9d:d4:87:
92:e7:d2:86:31:a8:3d:7e:7c:6f:ce:6e:99:62:d3:2d:50:3a:
d7:54:5f:94:be:85:f4:63:90:ca:69:79:c3:f1:53:11:cb:bb:
60:5f:9d:6d:f2:b1:a3:a8:17:f7:8b:8f:61:c1:99:4b:30:2d:
95:08:55:b6:9c:10:0a:b4:dd:d1:23:60:6c:54:d6:d3:13:f4:
4e:1e:d7:b9:af:de:84:4a:d1:18:47:22:b0:fa:0d:8f:6c:5c:
f1:43:d5:28:a6:54:2a:b7:89:8c:0d:5f:e1:88:2d:a7:20:a6:
5e:5c:5e:c1:0b:85:86:26:64:c5:ec:41:1b:e8:e2:f7:0a:09:
d3:15:72:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:44:24 2025 by rpki-client