Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/IuSi6E2OqyGC8JrvU9bBDewGhB8.roa
File: IuSi6E2OqyGC8JrvU9bBDewGhB8.roa (raw, json)
Hash identifier: xhr1WJNVnuwtRBZVPH3Muk8E3trcpTvU2YyXMkQE9XE=
Subject key identifier: 22:E4:A2:E8:4D:8E:AB:21:82:F0:9A:EF:53:D6:C1:0D:EC:06:84:1F
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019A1018AB071B4270856B487BBA4736D9F0
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/IuSi6E2OqyGC8JrvU9bBDewGhB8.roa
Signing time: Thu 23 Oct 2025 08:04:03 +0000
ROA not before: Thu 23 Oct 2025 08:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203217
IP address blocks: 185.112.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:18:ab:07:1b:42:70:85:6b:48:7b:ba:47:36:d9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Oct 23 08:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22e4a2e84d8eab2182f09aef53d6c10dec06841f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:65:1b:1b:3d:e5:fd:79:90:e6:09:bc:dc:
bd:40:14:10:51:b1:8d:dd:da:24:73:51:e1:f3:72:
0e:d3:ee:5c:f0:a4:e9:eb:48:a3:10:6c:4c:24:ab:
46:cf:07:c5:d3:5d:46:c2:22:8b:9a:86:69:89:65:
2a:1c:97:9e:5b:98:4b:6f:23:1b:39:66:55:8a:55:
bb:8f:79:db:af:32:b3:57:cc:2d:f3:7f:da:8f:76:
42:d0:e8:86:01:c1:f4:ad:ce:ae:d8:76:e2:30:02:
fc:53:e9:fb:16:5e:1c:71:b2:0d:5e:53:d4:d6:73:
44:36:d1:6b:66:41:92:7d:5b:2c:45:98:bc:9d:1c:
71:6d:d1:c1:fc:f0:52:3c:cd:cb:aa:35:2e:58:43:
64:00:82:78:2f:97:a3:2d:fc:bd:eb:a5:95:42:01:
00:33:51:9a:59:1c:a1:84:b1:75:e5:91:95:e0:a5:
65:1c:51:24:ce:fe:2e:db:c7:90:53:d6:03:a6:1d:
6f:52:a8:d8:7f:aa:12:30:7f:5f:c2:34:56:91:d9:
5c:0e:ff:e5:4c:56:90:fc:be:29:4d:79:14:10:49:
cc:f2:1c:0a:20:43:cd:42:e4:ed:03:f5:eb:f9:20:
d8:c5:2c:91:2e:22:9e:6e:21:bb:a6:df:6d:8d:7a:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E4:A2:E8:4D:8E:AB:21:82:F0:9A:EF:53:D6:C1:0D:EC:06:84:1F
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/IuSi6E2OqyGC8JrvU9bBDewGhB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.188.0/22
Signature Algorithm: sha256WithRSAEncryption
01:7f:4a:59:49:ba:db:a1:f2:96:60:07:85:1d:1b:a5:23:13:
c1:68:24:9f:b9:c5:69:6f:07:f6:65:bc:10:49:d4:1f:af:07:
4a:eb:ab:59:c6:a3:64:f3:9b:be:81:61:76:55:12:e7:89:99:
9e:9c:5e:77:a3:ab:40:53:78:cc:01:04:a2:8f:91:44:bf:6f:
3e:70:5f:cd:40:3d:db:b9:db:41:cf:e4:f7:75:6c:f7:5d:3b:
d0:46:83:b9:75:32:c8:30:a2:1d:33:68:4c:ab:e5:82:52:70:
f8:d5:3f:ad:3d:b7:01:87:02:82:3d:83:3d:11:41:2d:38:f7:
d8:3d:2f:fd:64:f2:76:3e:91:3d:d4:05:d1:7d:c6:31:f7:a6:
e7:09:61:8a:8c:20:ad:b5:8b:a7:82:d9:33:ee:cb:e3:df:5d:
a6:a9:ae:bc:25:b2:01:aa:f1:ce:5d:db:ea:1e:8a:10:79:1a:
a9:7e:90:4b:34:fc:1f:5f:bb:ff:af:a9:19:49:ec:38:ff:65:
c9:5d:1c:66:98:81:13:0b:d8:26:15:4e:10:64:5f:6e:f6:e4:
f2:87:7c:32:64:42:a3:2f:0d:77:d3:bb:f1:62:8b:9a:73:cc:
41:2e:27:ac:9b:2c:ea:95:75:4c:13:5a:35:53:dd:8a:3a:8d:
34:55:ea:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:13:50 2025 by rpki-client