Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/pBHHVqfa0x1Imx6T_GwMeahEWbo.roa
File: pBHHVqfa0x1Imx6T_GwMeahEWbo.roa (raw, json)
Hash identifier: Xxb+HPPyDbTmwlC2rHka8smyo3kx9QGy/l07UqH4+ZY=
Subject key identifier: A4:11:C7:56:A7:DA:D3:1D:48:9B:1E:93:FC:6C:0C:79:A8:44:59:BA
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E24D2986C02A06CE677E8731E47DC676
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/pBHHVqfa0x1Imx6T_GwMeahEWbo.roa
Signing time: Mon 25 Aug 2025 17:36:04 +0000
ROA not before: Mon 25 Aug 2025 17:36:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142299
IP address blocks: 85.203.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:4d:29:86:c0:2a:06:ce:67:7e:87:31:e4:7d:c6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:36:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a411c756a7dad31d489b1e93fc6c0c79a84459ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:f7:f4:2b:00:6d:b9:f2:75:74:79:49:4c:
10:80:61:f8:84:08:30:be:1c:84:ad:ea:a3:2d:39:
a7:8c:c6:6c:a3:df:d7:20:fa:b3:d9:62:98:02:7d:
99:84:d5:15:57:16:9f:86:63:32:a9:22:4b:9d:ca:
be:72:d1:0b:07:06:59:5e:48:83:14:8b:82:6e:b5:
21:d1:11:73:2d:95:62:75:13:41:09:9d:98:94:20:
54:20:de:e6:20:a4:b9:37:63:ad:94:46:15:71:17:
95:a2:1f:d7:e2:b9:6d:9b:4e:8c:e6:3a:33:15:7e:
e2:41:0c:27:a4:b5:2d:90:d2:02:01:ce:3f:bf:e1:
ed:8c:57:f1:f6:24:95:05:69:64:2d:06:a4:d0:0e:
a6:c5:27:98:ab:f6:58:90:87:77:da:75:62:9b:8c:
ba:a8:70:7f:21:25:2f:3d:fc:a8:fa:5d:d3:83:00:
b6:08:5e:87:80:0f:63:e2:1a:c4:fc:4b:4f:cc:e7:
82:d9:44:c9:90:1d:b6:17:c5:3c:8d:de:d3:84:e1:
c5:a9:59:c3:7b:be:48:16:cb:b5:44:38:78:04:11:
c2:84:a4:8a:9f:d7:31:b1:fb:82:c6:bf:9c:a6:8c:
5b:34:60:13:c9:75:28:3d:6e:32:21:be:5a:da:43:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:11:C7:56:A7:DA:D3:1D:48:9B:1E:93:FC:6C:0C:79:A8:44:59:BA
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/pBHHVqfa0x1Imx6T_GwMeahEWbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.4.0/24
Signature Algorithm: sha256WithRSAEncryption
76:5b:80:54:af:a7:04:51:61:31:89:b9:95:38:24:37:0f:86:
27:b1:dc:44:b0:f6:0d:fc:0d:64:58:ed:57:90:5e:e3:a9:4c:
2d:3f:f5:6f:f6:30:fb:8c:f8:6d:d6:f7:b4:5f:bc:f3:5a:19:
5c:13:c6:98:34:01:67:d6:a9:9b:3f:bf:4d:d7:96:b3:e2:57:
f9:7b:26:7a:05:79:22:c1:66:4f:87:12:8e:0f:1a:fc:18:6b:
a6:3e:06:28:ec:30:27:2e:2e:58:22:57:3b:5a:43:97:a2:f9:
c7:e6:2d:3d:a2:f0:7a:ab:5c:38:28:7f:ff:77:cb:c7:37:4f:
8e:67:57:34:0a:17:1f:0e:36:b4:9c:96:88:c8:2f:95:e5:47:
9c:06:22:61:e6:1d:ff:92:a5:92:3a:f7:37:cf:8b:02:3c:15:
80:a8:60:6b:8b:22:da:4f:bd:4a:40:37:47:49:e1:65:74:a1:
ea:80:5a:62:89:b8:87:bf:d8:c4:10:4e:49:ea:98:c3:2c:35:
96:6b:f5:37:90:86:fd:e7:3d:75:58:a1:a4:94:0b:e7:d7:14:
d3:ce:27:96:ca:cd:d0:fc:94:ac:2b:9d:65:e6:11:b7:36:75:
f7:dc:e7:ff:bb:f8:a0:80:2b:e8:85:af:d6:d3:38:2e:95:be:
db:7e:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:33:26 2025 by rpki-client