Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/C7WJZ0MSGTSK11o8aWAlEWJl0j8.roa
File: C7WJZ0MSGTSK11o8aWAlEWJl0j8.roa (raw, json)
Hash identifier: hyEq8bFB3KSRXz3GQOFcsFfK3xFehxlIq2TZp5r0/CA=
Subject key identifier: 0B:B5:89:67:43:12:19:34:8A:D7:5A:3C:69:60:25:11:62:65:D2:3F
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019A1018AB7FEE7718D1F5C6A0C6611F8CB0
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/C7WJZ0MSGTSK11o8aWAlEWJl0j8.roa
Signing time: Thu 23 Oct 2025 08:04:03 +0000
ROA not before: Thu 23 Oct 2025 08:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204149
IP address blocks: 185.112.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:18:ab:7f:ee:77:18:d1:f5:c6:a0:c6:61:1f:8c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Oct 23 08:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bb58967431219348ad75a3c696025116265d23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:90:30:ac:0d:16:27:fe:c8:5a:46:73:84:
0e:5a:82:03:2e:35:0b:81:fc:c7:8f:6e:15:64:ce:
5f:93:02:c6:5f:c5:23:c4:cd:af:af:99:52:69:18:
69:de:bc:7b:cc:e5:da:a3:81:fc:1b:1d:ff:cd:34:
a2:0e:e9:7a:b4:e9:72:06:7a:bb:45:6a:6a:38:59:
03:0c:53:80:55:f9:59:df:33:d8:49:ee:f1:9a:fb:
dd:49:f9:7a:39:cf:7d:e1:42:d6:ea:ec:cb:4c:24:
e0:c6:09:ef:23:d9:17:db:8e:18:bf:12:c4:79:f0:
91:ce:fc:83:24:3a:e9:a9:7e:1b:a3:40:12:5e:2e:
11:eb:ad:3f:27:ae:95:e6:e3:e0:3a:66:34:1e:0b:
86:f9:c5:ab:3c:56:56:7f:80:69:f1:86:f7:09:08:
bf:d1:76:8c:b9:77:81:e3:4b:d1:f2:e1:ca:58:97:
4c:aa:04:83:a8:bc:74:e9:4c:40:8f:06:7b:6b:3e:
9b:55:b4:93:13:2c:53:16:a2:a5:d8:b8:b0:7e:63:
c1:e4:98:fa:9b:0d:ae:8e:51:bf:57:ea:f4:41:97:
f9:65:1e:bc:82:07:8c:a4:c2:2f:d0:d7:19:e0:0a:
e5:1f:9b:82:46:94:af:ad:f5:01:00:9c:3d:16:51:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B5:89:67:43:12:19:34:8A:D7:5A:3C:69:60:25:11:62:65:D2:3F
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/C7WJZ0MSGTSK11o8aWAlEWJl0j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.188.0/22
Signature Algorithm: sha256WithRSAEncryption
53:db:ed:1d:dd:66:d6:50:2a:01:1d:3e:4c:14:2f:c3:55:2e:
d6:29:c0:33:39:f8:14:cb:5a:f8:2f:c5:4c:0e:f0:ac:4b:6c:
d3:4f:2e:d6:42:dc:c3:3a:69:aa:49:a6:95:93:91:af:ad:52:
81:ab:43:3c:d3:c7:6f:5d:7d:80:0a:08:33:07:14:5d:c1:52:
29:21:cc:06:e3:fd:50:4a:7a:6b:75:d9:27:01:85:15:e7:25:
f1:e5:8b:80:13:b4:7e:44:95:09:94:5f:5f:5d:9b:19:5c:48:
5b:2b:2a:04:2a:9b:33:0d:2d:94:5f:e2:82:57:16:bf:3e:47:
eb:0a:5c:ee:a1:0c:bb:8a:90:37:e1:e6:28:94:4f:05:19:06:
d1:71:a1:65:19:e4:75:2a:09:d0:40:65:b1:79:ed:08:06:15:
1b:ac:6d:38:d8:2b:6c:9e:83:76:94:eb:f3:df:6b:78:6e:52:
9d:2b:07:81:af:3c:1f:8c:ad:26:a5:b4:e4:4b:d7:66:71:5e:
dc:4d:5a:45:46:66:16:9c:dc:83:f7:6a:38:e3:bc:51:43:ad:
73:90:8b:fe:81:c0:2d:d7:20:a1:d7:25:85:14:c0:1d:10:eb:
75:5b:fd:d2:85:03:97:a7:ed:44:31:86:0e:47:5c:f7:64:fd:
90:e4:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:02:25 2025 by rpki-client