
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/Ip8huaIK21qXcV1uFM12bMRhsAc.roa
File: Ip8huaIK21qXcV1uFM12bMRhsAc.roa (raw, json)
Hash identifier: +deXUeKbtAB4FcOD/Fpx9fIrQPH8oKg+/d89Ce9TGGY=
Subject key identifier: 22:9F:21:B9:A2:0A:DB:5A:97:71:5D:6E:14:CD:76:6C:C4:61:B0:07
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 01999538F8CD6FC3B4A701C7E486ECAACE3A
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/Ip8huaIK21qXcV1uFM12bMRhsAc.roa
Signing time: Mon 29 Sep 2025 11:26:02 +0000
ROA not before: Mon 29 Sep 2025 11:26:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204964
IP address blocks: 185.233.156.0/22 maxlen: 22
185.233.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:38:f8:cd:6f:c3:b4:a7:01:c7:e4:86:ec:aa:ce:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Sep 29 11:26:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=229f21b9a20adb5a97715d6e14cd766cc461b007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:e9:e1:18:77:0e:a3:95:c2:aa:fd:be:d4:
98:6b:01:85:84:f1:96:01:38:97:2b:f5:b1:5b:36:
23:69:3f:7d:f7:bf:8b:5e:de:a9:31:31:e0:19:c5:
12:f9:3a:21:42:f1:ee:65:10:2b:7a:ce:7b:31:09:
be:4d:3e:b4:c3:bb:c4:f2:06:98:d9:1f:50:a3:f9:
20:c0:7a:ce:e2:96:04:f0:8f:f5:b4:96:dd:b0:4b:
b0:cb:65:57:eb:b3:d4:c5:64:2b:ba:54:61:ab:78:
2d:0f:61:34:5f:fe:7b:35:e5:7a:8e:89:f5:15:1f:
de:26:b1:31:76:d2:91:fe:27:a4:4b:14:a6:ab:98:
49:28:f7:db:4c:94:cd:e7:ab:3f:ce:eb:46:91:42:
e5:4a:be:de:e8:ec:a1:d8:1c:79:ee:d4:b3:98:f3:
58:a7:1d:b4:8f:c5:9c:95:a7:74:d0:a8:1b:55:41:
51:6e:8e:af:19:e9:f9:d9:b5:cc:8e:cf:e4:ea:1c:
d9:9c:6a:59:9c:40:82:12:22:a3:79:49:ea:86:55:
85:f3:e7:0a:f5:38:5c:18:2d:30:70:12:82:a4:71:
f3:a6:95:6a:bf:d6:1f:60:30:68:bd:29:d9:ff:60:
c5:9e:72:60:75:b5:6c:a2:fd:fc:ac:de:4e:e2:ec:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9F:21:B9:A2:0A:DB:5A:97:71:5D:6E:14:CD:76:6C:C4:61:B0:07
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/Ip8huaIK21qXcV1uFM12bMRhsAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.156.0-185.233.163.255
Signature Algorithm: sha256WithRSAEncryption
6e:83:80:c2:e2:85:e6:3c:c9:d5:86:f5:fe:eb:8a:0c:31:a0:
2c:a5:1b:a7:44:68:d3:34:45:a4:88:b9:a2:90:5a:45:bf:cf:
8f:87:80:82:8e:fe:62:72:6a:2d:47:60:e7:f7:d9:b3:61:6f:
ca:b7:cf:41:a2:e6:27:dc:fa:94:7d:3a:56:90:80:a2:ac:78:
94:76:fb:cc:83:a6:70:ae:1f:f1:6d:e3:72:a0:7c:a0:db:30:
09:ee:ad:32:e0:05:2e:fd:3c:55:79:c8:43:b7:6e:8e:5e:2f:
c7:42:ab:80:b7:d8:b5:f1:36:ae:cd:60:77:cd:8f:d3:48:c2:
a2:0d:86:d0:c7:df:8d:46:7e:86:9a:40:67:47:87:18:8e:d7:
53:3c:f8:3b:25:2f:4f:99:21:72:ee:b0:59:bb:46:fd:5c:fa:
5e:b4:63:ce:f4:c7:49:36:12:92:42:3f:d1:dc:78:64:d8:dd:
ba:7f:9a:6e:ab:78:60:e1:81:49:1a:e9:e0:e7:23:ed:37:6f:
91:b9:40:d9:7a:20:a9:af:42:81:df:61:e0:b1:1b:fd:15:d5:
37:84:11:19:b8:18:74:02:e4:16:7c:87:5c:50:7d:af:30:bc:
c2:3c:bc:78:d3:f4:fa:21:49:c9:ec:d3:94:83:eb:22:6a:d8:
26:21:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:58 2025 by rpki-client