Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/rIsYs00Wf7HbWx24CSUDr8qM3AA.roa
File: rIsYs00Wf7HbWx24CSUDr8qM3AA.roa (raw, json)
Hash identifier: Rm9hgt1r8vljNOunul0A1uzlnsmrlXuLijTx17itpBw=
Subject key identifier: AC:8B:18:B3:4D:16:7F:B1:DB:5B:1D:B8:09:25:03:AF:CA:8C:DC:00
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019975CBA218D96B42C8C90CC60E094564F5
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/rIsYs00Wf7HbWx24CSUDr8qM3AA.roa
Signing time: Tue 23 Sep 2025 08:58:23 +0000
ROA not before: Tue 23 Sep 2025 08:58:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39405
IP address blocks: 95.170.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:75:cb:a2:18:d9:6b:42:c8:c9:0c:c6:0e:09:45:64:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Sep 23 08:58:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac8b18b34d167fb1db5b1db8092503afca8cdc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:69:b4:53:4f:49:8e:42:df:dd:c8:5d:8f:
45:4a:e2:72:cc:9d:10:ab:4e:0c:e8:24:70:29:48:
1c:ac:6d:f8:a1:bd:0a:de:d6:f5:88:25:61:26:e7:
3b:77:7f:c4:a5:0a:02:fb:10:a0:c9:a5:3b:6b:7d:
a6:df:af:01:88:e9:61:7f:eb:4a:24:39:e9:5a:dd:
98:f0:8b:e5:38:70:e2:1c:af:d7:18:47:ad:fa:f4:
b7:7a:9e:65:66:aa:df:94:54:91:e3:c1:19:b7:c2:
51:7f:a9:25:c1:da:1f:c2:d7:2c:16:c6:ba:67:73:
7e:5c:bc:71:87:42:d4:91:48:8e:cf:56:94:54:a1:
4b:02:a0:6d:4f:dd:f6:b1:4b:cb:e8:a2:20:a3:c2:
0e:9f:39:33:08:34:3f:98:7b:96:98:8c:99:6a:6c:
f4:34:76:c7:04:aa:1e:37:1c:36:4c:4e:dd:ae:7e:
74:6c:d1:fe:48:25:ee:ea:dd:da:a2:48:bd:16:0b:
22:97:f9:43:7d:22:25:a6:90:5e:5f:62:1d:04:33:
ce:a5:39:fd:c8:74:ea:ab:52:d0:8d:11:63:f7:9f:
e9:f1:03:79:dd:4a:3e:f9:80:ed:94:c5:3c:0f:36:
f1:b8:f2:ed:48:f0:48:6d:bb:73:c4:7a:d3:64:1f:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8B:18:B3:4D:16:7F:B1:DB:5B:1D:B8:09:25:03:AF:CA:8C:DC:00
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/rIsYs00Wf7HbWx24CSUDr8qM3AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.4.0/24
Signature Algorithm: sha256WithRSAEncryption
64:eb:9c:0d:6d:b1:89:e8:5f:fe:0e:e4:8c:0c:9c:5d:b6:41:
6f:b7:b2:bf:fe:01:08:b1:56:d7:f0:f1:b2:03:2e:9a:52:35:
a8:1d:50:9c:d9:d2:0c:80:f9:4c:57:9d:12:86:c8:5c:9f:e1:
85:50:6d:34:da:fb:d0:9d:d6:be:bb:4d:49:8d:32:89:71:f6:
f4:8b:aa:58:91:cf:2f:a3:40:8d:ea:e0:40:7c:12:fb:ec:16:
36:95:84:40:cb:51:e4:e6:70:48:04:f9:2e:78:11:80:c6:84:
e6:32:07:f2:df:15:9a:33:9b:0f:e2:3d:d6:99:31:75:e3:a6:
fe:61:92:7e:aa:7f:aa:4a:7a:d5:51:f5:db:79:34:63:e3:4e:
aa:01:db:0f:49:30:ea:41:89:7b:5b:d5:71:a3:ea:67:e2:4a:
03:5d:53:ba:64:bf:90:9e:b8:aa:29:19:13:6e:40:dc:6c:2a:
70:3d:6b:f4:24:8d:cb:43:ea:d4:1d:34:c9:54:53:14:4d:f2:
6c:07:31:26:2b:7d:03:d8:58:1b:c8:ab:7d:58:c7:4b:02:da:
10:80:28:f7:f4:70:45:52:96:4e:c3:c0:eb:5a:ef:9f:5f:7a:
51:76:15:78:37:0b:0a:d7:d7:5a:5c:2b:b4:8f:98:11:56:56:
7b:f7:40:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:29 2025 by rpki-client