Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wZWY9Cagp8RE_40mzn3S2rFmgfw.roa
File: wZWY9Cagp8RE_40mzn3S2rFmgfw.roa (raw, json)
Hash identifier: 7STO7jvEOUG/KEkL+PJKhWh7yTbb0clM40MqnD5PXJo=
Subject key identifier: C1:95:98:F4:26:A0:A7:C4:44:FF:8D:26:CE:7D:D2:DA:B1:66:81:FC
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01989D9689D5FFD1B7AEE476BFFF9B14C1D6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wZWY9Cagp8RE_40mzn3S2rFmgfw.roa
Signing time: Tue 12 Aug 2025 09:22:25 +0000
ROA not before: Tue 12 Aug 2025 09:22:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41496
IP address blocks: 85.122.56.0/23 maxlen: 23
85.122.88.0/21 maxlen: 21
85.122.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:96:89:d5:ff:d1:b7:ae:e4:76:bf:ff:9b:14:c1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 12 09:22:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c19598f426a0a7c444ff8d26ce7dd2dab16681fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:2d:73:b2:4b:f9:b0:9b:bc:1d:76:f3:c1:
36:c8:3f:a1:5d:39:99:cd:40:8a:8c:a3:ce:74:65:
64:98:c3:04:5e:c5:47:11:5a:5d:eb:db:6c:2e:27:
cf:ed:5b:c3:86:33:4c:6e:2a:81:9c:41:9c:dd:81:
16:8c:cd:eb:ab:4a:2d:30:ca:d5:45:d5:ce:28:72:
80:ae:95:a3:08:6a:fb:dd:ce:e0:6a:2e:5a:a4:85:
d2:47:ba:51:e3:76:9c:0e:be:d2:45:64:5f:2a:a2:
4b:c7:20:59:01:ce:5a:a9:92:da:bf:57:3f:15:52:
66:48:8d:94:44:35:97:1a:f1:88:cd:60:5e:c7:e6:
e7:4d:2f:d8:4d:11:dd:5d:e0:a9:25:84:7e:46:67:
ae:1c:f3:ef:fd:ee:49:29:84:76:13:05:b6:9f:d9:
92:aa:a8:83:64:04:4d:6c:a2:d7:a6:22:a4:7b:76:
d8:d3:a2:13:9c:b5:08:48:8c:69:60:46:93:00:f1:
5d:65:38:e7:ed:10:76:28:ef:77:ac:cb:ef:83:5d:
3f:23:39:12:e3:cf:c5:52:e3:94:de:f8:e0:9f:c4:
a5:71:90:60:fe:a8:6e:11:03:07:d0:a5:5a:d1:a7:
7b:58:48:84:30:91:7f:30:e3:14:9b:11:d5:39:98:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:95:98:F4:26:A0:A7:C4:44:FF:8D:26:CE:7D:D2:DA:B1:66:81:FC
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wZWY9Cagp8RE_40mzn3S2rFmgfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.56.0/23
85.122.88.0/21
85.122.136.0/21
Signature Algorithm: sha256WithRSAEncryption
02:d7:57:7a:ae:39:bf:88:22:2c:8e:04:86:a3:f5:8d:d3:5b:
28:1c:2c:d2:c3:76:d4:91:25:04:62:8c:a9:6b:74:88:73:93:
1d:25:2d:aa:f6:cd:93:f5:54:b8:3b:e6:e5:6a:39:97:58:a0:
c3:58:12:34:d6:ac:d9:b2:ab:de:4c:47:91:32:74:d1:84:46:
b3:54:c0:fe:f0:22:41:75:86:e9:fc:27:32:f4:ab:92:f4:08:
7d:03:29:46:b5:b6:22:0f:64:2b:2e:c7:93:94:55:ca:7a:70:
5e:c1:c8:b1:d6:25:73:df:c8:a8:7a:0f:26:0a:73:48:8f:24:
2c:da:8a:f5:77:d1:c3:3f:f3:0b:e5:22:5b:c4:2c:88:6e:b9:
4f:a7:93:5f:ea:9a:0e:e4:bb:7d:ac:05:83:62:20:c8:ed:9e:
7c:f2:23:0c:d1:1b:b8:b0:bf:44:2c:92:c4:db:56:7e:6e:41:
26:e1:f7:a0:9c:a7:72:b6:4e:8b:d4:05:8e:40:13:9a:d4:56:
b1:aa:15:f2:0c:9f:44:7c:4f:b2:3a:ca:8f:5f:a0:ec:0b:0f:
11:cb:49:42:11:74:b4:c4:6c:4a:7b:c4:d9:70:d1:05:0d:32:
5b:b6:38:ec:45:ed:8c:21:5c:9e:53:31:5d:8f:a7:92:1d:70:
ef:9e:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:15:46 2025 by rpki-client