Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/ey_HbPVH-fdSqz0HYztvUA0UE4I.roa
File: ey_HbPVH-fdSqz0HYztvUA0UE4I.roa (raw, json)
Hash identifier: upy8JLus6gUmjxLyY05s4dKH4rsD9BpLxwpFWnLAb38=
Subject key identifier: 7B:2F:C7:6C:F5:47:F9:F7:52:AB:3D:07:63:3B:6F:50:0D:14:13:82
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 019A06763C0D9465289F79D557C101D426E0
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/ey_HbPVH-fdSqz0HYztvUA0UE4I.roa
Signing time: Tue 21 Oct 2025 11:10:03 +0000
ROA not before: Tue 21 Oct 2025 11:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400529
IP address blocks: 185.115.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:76:3c:0d:94:65:28:9f:79:d5:57:c1:01:d4:26:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Oct 21 11:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b2fc76cf547f9f752ab3d07633b6f500d141382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:d7:90:46:f6:e8:f5:d3:5d:c2:c6:0b:97:
ae:64:9e:fd:dc:7a:36:3a:e6:21:8c:04:4a:2d:32:
01:76:55:b5:c4:f0:c0:99:e7:ea:29:28:7f:d1:0d:
05:52:d0:a5:4d:c2:4e:8d:87:28:1f:f6:13:16:d9:
32:17:09:e9:53:3f:d6:e3:25:9f:f1:8e:d0:84:e4:
5c:9a:cf:26:74:31:78:44:33:60:fa:a4:5a:d0:94:
f1:fc:4a:32:96:5a:9e:d3:e1:85:d8:60:b3:ef:98:
49:45:67:4f:12:a8:f1:f7:69:99:f8:ad:38:e8:ac:
21:45:65:ef:6a:2b:a4:6f:ca:2d:3b:d6:e4:3e:63:
a8:82:26:3f:42:96:3d:1b:9a:ff:6a:a9:9c:17:c0:
ed:c5:f5:ea:e7:ad:8c:08:33:eb:71:d1:5b:a8:f3:
71:ed:13:42:c2:57:42:e3:22:e8:84:ed:53:f8:e9:
f7:d3:dc:16:07:8b:c1:8b:1a:f9:b2:e1:e6:c8:c6:
44:7c:4f:00:ee:cb:bc:5d:d8:7d:48:d4:5c:55:da:
80:9a:57:27:c7:11:4f:75:bb:f2:d0:cd:ff:ca:89:
9f:a8:59:d0:26:20:2b:bf:8f:6e:ca:f2:45:5d:69:
86:6d:4e:31:24:6c:06:1f:0c:3b:e1:a7:fc:70:97:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:C7:6C:F5:47:F9:F7:52:AB:3D:07:63:3B:6F:50:0D:14:13:82
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/ey_HbPVH-fdSqz0HYztvUA0UE4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.161.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d0:4c:ba:01:80:53:2d:03:a1:5d:bd:6a:16:d7:6c:cd:2f:
96:c9:17:22:64:a0:52:ef:a0:59:56:f6:bc:f9:60:11:be:d8:
3e:4a:52:a1:7d:46:16:6a:c6:3b:70:62:3e:42:99:2a:f8:46:
1f:16:fa:cd:41:50:10:f6:11:eb:b9:e2:52:ae:47:7a:5c:5c:
a8:f6:33:7e:24:e2:d8:b9:15:ba:b6:41:3e:39:fd:24:02:e4:
46:04:b7:65:70:0a:fd:7b:b4:d0:ef:d9:00:1e:8b:f2:70:11:
17:90:a2:dd:6c:c3:b7:3d:42:10:8b:ed:31:c0:c2:74:09:f3:
d0:ce:86:bb:f1:50:38:e7:a5:95:13:a2:6e:4a:9d:6f:75:0d:
f3:e6:9f:88:b7:3d:3f:1c:c9:92:db:80:33:ac:03:83:bc:e6:
75:05:b7:11:05:0d:18:ce:0b:94:c2:a3:28:2d:6f:3c:90:db:
67:31:80:01:59:60:cb:ac:e7:03:5f:d8:44:e1:b4:88:2b:fd:
64:6b:0e:98:8d:1c:9d:ed:0a:b9:ff:92:6c:d1:71:ef:5e:ae:
d3:7b:5b:59:3a:db:be:41:0f:13:98:1d:a4:78:f4:83:e8:d8:
8e:2d:60:77:8b:74:8d:5c:de:15:66:ce:fb:d3:dd:06:fb:b9:
67:3b:9d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:12:28 2025 by rpki-client