Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/fImxldtEe3i_XS4-KxZuO-LAgYs.roa
File: fImxldtEe3i_XS4-KxZuO-LAgYs.roa (raw, json)
Hash identifier: y0/Y4Oas1pqWDy9av0sFDF2hXjn1ElLUDcx131DTb88=
Subject key identifier: 7C:89:B1:95:DB:44:7B:78:BF:5D:2E:3E:2B:16:6E:3B:E2:C0:81:8B
Certificate issuer: /CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Certificate serial: 0198C0CAAB14870224030CA18CA6B77E1573
Authority key identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/fImxldtEe3i_XS4-KxZuO-LAgYs.roa
Signing time: Tue 19 Aug 2025 05:26:04 +0000
ROA not before: Tue 19 Aug 2025 05:26:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43684
IP address blocks: 185.85.160.0/22 maxlen: 22
185.85.160.0/24 maxlen: 24
185.85.161.0/24 maxlen: 24
185.85.162.0/24 maxlen: 24
185.85.163.0/24 maxlen: 24
2a0b:1380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c0:ca:ab:14:87:02:24:03:0c:a1:8c:a6:b7:7e:15:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Validity
Not Before: Aug 19 05:26:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c89b195db447b78bf5d2e3e2b166e3be2c0818b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:a8:97:07:b1:69:8f:04:37:04:15:35:1f:
4a:3a:bd:94:fe:e8:d5:6f:85:9e:ed:24:85:93:7a:
1e:dd:2e:73:bc:8f:84:e8:2e:5f:0b:3b:47:e0:34:
7f:2d:ae:e8:1f:f9:7e:55:5b:00:91:45:16:e1:d8:
da:b3:3c:39:7b:f4:07:e0:9d:14:ef:f5:92:ba:e7:
8c:e6:9a:e9:66:e0:1f:93:4d:c5:21:5b:2e:f0:4d:
d7:6c:51:20:5a:14:68:4a:f0:27:3a:71:32:68:50:
67:ef:19:4d:5e:a3:68:95:bb:3d:5b:20:56:96:dd:
97:93:72:55:6a:46:1a:9d:ca:8c:38:82:e6:4f:c4:
ca:bf:19:76:19:d0:d4:19:86:ed:a0:0b:69:e2:94:
4a:7a:f1:8b:1e:bf:b1:84:c8:c7:99:6c:f6:30:20:
f7:49:85:af:9c:57:95:7e:f2:7c:e7:f9:e3:46:93:
e2:30:25:15:89:c0:71:63:fa:d1:30:fc:ec:53:92:
aa:e5:3c:fc:61:5e:7d:52:af:fc:27:ac:19:3e:a9:
83:87:7f:38:b4:fd:df:04:f6:dd:29:1a:51:e0:a7:
1f:2d:94:8a:21:39:e5:67:b2:cb:ed:f5:0f:61:cb:
a1:e6:57:79:8f:8a:50:2b:1f:fe:62:f6:79:2d:98:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:89:B1:95:DB:44:7B:78:BF:5D:2E:3E:2B:16:6E:3B:E2:C0:81:8B
X509v3 Authority Key Identifier:
keyid:5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/fImxldtEe3i_XS4-KxZuO-LAgYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.160.0/22
IPv6:
2a0b:1380::/29
Signature Algorithm: sha256WithRSAEncryption
4a:4d:56:0e:55:27:5a:c2:16:dd:68:cd:e4:b1:92:a6:fe:cb:
01:f9:39:66:e5:74:20:e9:dd:bc:08:2f:33:df:4a:7c:8e:b8:
6d:2a:34:43:9e:92:c3:bc:cf:be:2e:4c:bd:02:d1:97:1f:67:
97:40:40:14:7f:12:e3:95:5d:2f:5b:5b:2d:72:46:9f:25:38:
68:61:97:d3:2b:aa:d2:4f:56:ae:a6:5d:bd:d3:94:c3:04:d7:
55:83:9c:c7:0c:7d:3f:19:37:a1:2b:2e:bf:63:86:21:32:91:
70:e9:79:13:cb:10:4f:de:8e:41:9e:30:0d:33:bb:32:f9:47:
62:9c:ce:73:ef:a4:2b:12:e0:48:80:a7:d3:d0:7f:b6:d0:bb:
e5:00:eb:7c:1c:a6:db:69:ff:f0:4c:4d:df:cc:81:f3:2f:11:
48:59:78:5a:fd:ba:92:f3:92:fd:3c:a1:9b:12:d0:5d:52:91:
3e:65:95:3f:2c:37:a4:16:28:dc:c6:d9:78:70:13:85:52:c1:
5a:cf:11:a6:bc:6a:d9:89:34:e6:cc:8e:41:d4:83:6a:98:c8:
af:23:0d:5e:32:1b:ea:a1:16:5f:4c:9a:5f:93:1b:3d:e6:61:
66:0d:a2:68:fe:69:90:39:98:73:c8:a4:2a:7b:80:43:d1:c8:
1a:d5:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:41 2025 by rpki-client