Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/hSJJJLX1bbRMPmoNrrWn8zYZMto.roa
File: hSJJJLX1bbRMPmoNrrWn8zYZMto.roa (raw, json)
Hash identifier: aa1oDb6YRIE01C1w01q2mp/wGqazzcsUr+aqCOejQMg=
Subject key identifier: 85:22:49:24:B5:F5:6D:B4:4C:3E:6A:0D:AE:B5:A7:F3:36:19:32:DA
Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial: 0198FCCE9F9F0CC3D7139ED3F5D5CE3C08B8
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/hSJJJLX1bbRMPmoNrrWn8zYZMto.roa
Signing time: Sat 30 Aug 2025 21:07:36 +0000
ROA not before: Sat 30 Aug 2025 21:07:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 95.128.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fc:ce:9f:9f:0c:c3:d7:13:9e:d3:f5:d5:ce:3c:08:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
Validity
Not Before: Aug 30 21:07:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85224924b5f56db44c3e6a0daeb5a7f3361932da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:e9:12:47:d9:fa:bd:a5:60:4a:2e:9a:17:
f7:8c:2c:0b:00:b8:4a:07:e0:e1:cd:b7:a8:c7:71:
e5:dc:4a:50:d8:55:89:bf:e9:82:9b:f9:86:76:0d:
c3:71:ac:b8:ff:b0:04:66:da:04:01:0a:52:f5:ea:
98:80:e8:29:e6:5a:65:e6:5b:de:9b:85:6d:be:5b:
e2:37:a2:ea:b2:e2:b1:5d:8f:fd:ad:c8:2f:4d:eb:
68:12:39:65:cc:9a:9e:54:d2:15:92:66:a7:71:ed:
ad:5f:97:85:d3:3f:f5:d5:71:c3:6e:0c:ae:39:18:
15:16:d9:33:be:79:1b:49:6a:5a:27:9e:65:e3:68:
46:91:b0:0b:e5:f0:31:a8:1e:f7:3e:1d:00:03:16:
07:f3:70:c5:9a:7d:85:3e:6b:c1:f7:19:21:96:08:
d0:bb:fc:f5:6c:4f:f3:4a:c7:b7:9c:b6:44:51:d4:
b3:b9:2c:f2:be:93:cc:61:5b:68:a3:82:cb:69:6a:
21:bc:0e:dc:fc:fc:66:15:bb:91:ed:d6:be:6b:85:
69:00:c1:6c:63:5b:0f:fc:0d:03:d7:5d:c0:cc:81:
6b:3a:49:44:2d:94:b7:88:6c:10:93:54:c4:1d:7e:
06:a0:8f:fb:12:dc:ad:f3:aa:33:af:e3:bb:27:ac:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:22:49:24:B5:F5:6D:B4:4C:3E:6A:0D:AE:B5:A7:F3:36:19:32:DA
X509v3 Authority Key Identifier:
keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/hSJJJLX1bbRMPmoNrrWn8zYZMto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.158.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cd:9d:71:8b:ff:71:08:b2:57:cb:d2:f3:ed:fc:27:71:7e:
72:1e:df:51:a5:bf:f8:20:bd:9f:dd:5b:86:5a:e5:30:f1:c6:
33:14:05:0b:94:f2:26:23:71:0e:f1:a4:d9:82:5b:57:a5:84:
79:fd:2b:de:0e:20:49:4f:f1:6c:4f:62:ac:7a:63:68:df:33:
fe:98:88:82:f3:ac:9a:a1:fe:59:9f:91:c4:b8:85:19:41:e6:
c7:e9:c0:da:3d:2a:1d:74:44:3d:7a:c6:82:3c:c7:f8:08:49:
e5:05:b4:59:7e:91:ad:86:42:28:50:7d:d5:d5:c3:16:c2:7c:
ad:52:c8:73:63:8c:1f:63:77:24:93:ae:33:9d:b9:90:29:8d:
f6:96:3d:94:f2:70:35:b3:39:4a:b8:a2:a8:db:84:10:1c:2f:
4a:13:5a:9a:a2:fd:be:01:74:20:13:f6:f2:86:91:6e:84:82:
94:79:cb:73:43:07:6f:90:5f:67:08:01:64:ad:f0:d7:e5:91:
14:98:e0:56:b9:4e:17:03:26:37:a0:a5:36:01:dd:7d:ef:36:
4a:a0:47:40:a1:2b:27:79:d4:29:5f:76:71:fd:f2:4a:6c:2a:
80:7f:8e:a3:88:d6:f3:99:e0:10:06:9e:4b:72:01:85:40:b7:
87:9f:4f:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZj8zp+fDMPXE57T9dXOPAi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTg0OTEwMTI0YWY3NzZlMzBlNWFjZjA1NWQ2YmFlMTc2
MWE1MzYwHhcNMjUwODMwMjEwNzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTIyNDkyNGI1ZjU2ZGI0NGMzZTZhMGRhZWI1YTdmMzM2MTkzMmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdHpEkfZ+r2lYEoumhf3jCwLALhK
B+Dhzbeox3Hl3EpQ2FWJv+mCm/mGdg3Dcay4/7AEZtoEAQpS9eqYgOgp5lpl5lve
m4VtvlviN6LqsuKxXY/9rcgvTetoEjllzJqeVNIVkmance2tX5eF0z/11XHDbgyu
ORgVFtkzvnkbSWpaJ55l42hGkbAL5fAxqB73Ph0AAxYH83DFmn2FPmvB9xkhlgjQ
u/z1bE/zSse3nLZEUdSzuSzyvpPMYVtoo4LLaWohvA7c/PxmFbuR7da+a4VpAMFs
Y1sP/A0D113AzIFrOklELZS3iGwQk1TEHX4GoI/7Etyt86ozr+O7J6yJXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIUiSSS19W20TD5qDa61p/M2GTLaMB8GA1UdIwQY
MBaAFOFYSRASSvd24w5azwVda64XYaU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUt
MzFhYjMyZmY3YzY4LzEvaFNKSkpMWDFiYlJNUG1vTnJyV244ellaTXRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUtMzFhYjMyZmY3YzY4
LzEvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4CeMA0G
CSqGSIb3DQEBCwUAA4IBAQBtzZ1xi/9xCLJXy9Lz7fwncX5yHt9Rpb/4IL2f3VuG
WuUw8cYzFAULlPImI3EO8aTZgltXpYR5/SveDiBJT/FsT2KsemNo3zP+mIiC86ya
of5Zn5HEuIUZQebH6cDaPSoddEQ9esaCPMf4CEnlBbRZfpGthkIoUH3V1cMWwnyt
UshzY4wfY3ckk64znbmQKY32lj2U8nA1szlKuKKo24QQHC9KE1qaov2+AXQgE/by
hpFuhIKUectzQwdvkF9nCAFkrfDX5ZEUmOBWuU4XAyY3oKU2Ad197zZKoEdAoSsn
edQpX3Zx/fJKbCqAf46jiNbzmeAQBp5LcgGFQLeHn0/n
-----END CERTIFICATE-----
Generated at Tue Sep 9 05:26:20 2025 by rpki-client