Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/aNeNti1OnoEazjIvuWe2cw4fSiE.roa
File: aNeNti1OnoEazjIvuWe2cw4fSiE.roa (raw, json)
Hash identifier: eMyBgjTIu3x6QZFdYc0ThJiGgUZM0+emfvXfZvql+cQ=
Subject key identifier: 68:D7:8D:B6:2D:4E:9E:81:1A:CE:32:2F:B9:67:B6:73:0E:1F:4A:21
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 019995AE28F68985FEEB2113B4F798A7A389
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/aNeNti1OnoEazjIvuWe2cw4fSiE.roa
Signing time: Mon 29 Sep 2025 13:34:02 +0000
ROA not before: Mon 29 Sep 2025 13:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.235.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:ae:28:f6:89:85:fe:eb:21:13:b4:f7:98:a7:a3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Sep 29 13:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68d78db62d4e9e811ace322fb967b6730e1f4a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:e9:bd:f1:c8:07:e6:cf:fa:b7:3c:67:75:
d2:fd:85:dd:c5:6b:2a:a2:8b:0d:af:57:b0:33:46:
1e:b4:e6:d9:90:72:e4:bd:2f:b1:e2:ae:b8:3c:bd:
52:c3:10:77:51:92:38:9a:78:37:07:9c:db:65:95:
4d:d3:20:5d:a0:18:5b:4a:6c:d8:5f:ab:df:52:51:
ab:36:05:28:f4:93:c0:4b:cd:e3:21:f6:c3:8e:d7:
63:51:21:0d:ca:b5:80:7b:53:d0:e6:05:2d:4c:4d:
8d:d9:2b:77:e0:2b:1d:43:3f:f0:a3:79:17:cf:c8:
d3:4b:a8:d8:b9:44:ad:50:04:89:69:c7:12:b5:ef:
39:98:bb:d0:77:22:9d:87:f4:88:58:6f:48:c2:94:
1d:ac:dc:b8:a8:65:8b:59:ef:cc:9e:b7:d1:65:2a:
a8:ce:f1:87:6d:c6:09:f6:77:1b:dc:0b:81:7b:bc:
9d:22:b7:d6:31:59:7e:a5:b5:e7:05:f0:aa:19:b0:
af:5b:ca:f6:c1:68:7d:b7:dc:4a:78:57:b4:c0:a5:
ae:5b:b5:a4:9b:8d:e4:86:b3:d4:97:74:a7:9f:bb:
ef:18:ba:f6:9e:9c:21:84:7c:0d:10:fd:d3:7d:ce:
62:b8:21:46:fc:e8:43:6f:35:d3:1c:70:31:6d:73:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D7:8D:B6:2D:4E:9E:81:1A:CE:32:2F:B9:67:B6:73:0E:1F:4A:21
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/aNeNti1OnoEazjIvuWe2cw4fSiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.156.0/22
Signature Algorithm: sha256WithRSAEncryption
14:ef:9d:76:3b:b8:7f:d2:41:ec:ac:c5:ce:59:5d:13:aa:b6:
6f:b8:9a:84:fa:be:aa:4b:c3:1d:17:b8:3c:62:1f:dc:db:bf:
99:04:48:c6:57:41:f5:6f:c8:32:54:b5:57:81:b7:73:1c:08:
62:a3:43:94:d8:96:9c:77:0e:17:db:29:09:af:41:c3:51:02:
16:52:27:be:7d:ce:cd:b6:db:50:87:bb:68:fa:a7:ba:ce:07:
3a:2b:73:f6:ba:22:a8:47:fb:d7:fe:86:e3:d2:8c:29:2d:09:
dd:b5:75:81:42:bb:17:5f:44:28:91:f8:e2:37:5b:96:85:1f:
51:86:1b:9e:ab:aa:03:6c:38:da:14:03:2a:80:26:c3:b8:e8:
ac:ca:69:2f:63:ba:b4:ab:fa:11:98:7a:3f:a5:7d:c3:60:c1:
35:df:21:70:66:e4:ef:e2:7f:40:2e:de:bd:dc:10:15:ca:a3:
37:8c:f9:13:66:6a:65:43:a9:3d:a4:16:97:98:21:ab:a9:fc:
c7:b7:a1:68:af:a9:6a:d2:fb:c7:80:c8:75:66:d5:99:02:2f:
4c:83:db:f2:54:c3:27:f1:e7:43:7a:f0:9f:b5:1f:17:6e:2a:
4d:93:f8:3c:28:ad:c4:87:b9:2e:7a:45:64:7c:ac:d1:05:41:
18:74:2f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:45 2025 by rpki-client