Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0hjBWjT-7qdT6ens0byJr363QBk.roa
File: 0hjBWjT-7qdT6ens0byJr363QBk.roa (raw, json)
Hash identifier: TYvqsdYp74IXbKth2Ax8snTPjUjUvx9X8nxneaHdAVw=
Subject key identifier: D2:18:C1:5A:34:FE:EE:A7:53:E9:E9:EC:D1:BC:89:AF:7E:B7:40:19
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0199A55CC03E1D712701C8BB4D8A2DDF38E0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0hjBWjT-7qdT6ens0byJr363QBk.roa
Signing time: Thu 02 Oct 2025 14:39:03 +0000
ROA not before: Thu 02 Oct 2025 14:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35004
IP address blocks: 93.170.116.0/22 maxlen: 24
95.46.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:5c:c0:3e:1d:71:27:01:c8:bb:4d:8a:2d:df:38:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 2 14:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d218c15a34feeea753e9e9ecd1bc89af7eb74019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:4a:9e:b6:a3:b5:db:d3:a1:6e:87:b2:e5:
59:0c:ea:36:36:04:30:49:28:3f:d1:91:8c:6b:74:
30:4c:0d:0e:6f:0c:27:90:50:82:99:fb:7f:8f:8b:
86:d1:52:c2:4f:ed:5e:2d:cc:6b:d4:dc:db:3c:68:
d7:67:b9:2a:e9:a1:5b:f7:8a:cd:68:dc:91:7f:61:
5d:4d:09:ef:f3:42:b0:a0:19:6d:20:c8:2e:b8:68:
69:42:1b:be:01:9c:68:da:aa:6b:3c:53:da:d9:1a:
f8:3e:c4:32:48:6e:58:30:56:04:2a:e1:62:7f:d2:
dd:4e:98:9f:35:98:8e:82:e3:c5:09:da:a7:33:16:
69:10:49:bc:15:16:6d:45:44:eb:42:d5:f0:9c:58:
d7:ce:20:19:ac:31:30:7e:6b:54:57:3b:01:01:55:
b6:c8:b7:df:60:15:c6:2f:7f:84:a8:90:c2:eb:45:
99:16:76:35:92:36:c3:44:91:82:de:c6:bd:44:58:
c9:a2:c9:37:0d:be:e7:20:30:9c:d4:1f:9e:f9:25:
ab:5a:08:3f:4b:2a:2c:56:73:5e:78:57:e6:83:75:
2f:42:45:29:36:80:55:e4:d9:6c:5d:de:3f:48:5d:
6e:16:ea:a8:37:12:c5:38:44:bf:12:49:a4:f1:ec:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:18:C1:5A:34:FE:EE:A7:53:E9:E9:EC:D1:BC:89:AF:7E:B7:40:19
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0hjBWjT-7qdT6ens0byJr363QBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.116.0/22
95.46.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:91:0f:d5:45:9a:1c:82:61:7c:1c:ae:2d:cd:9c:b8:7f:00:
1e:26:9a:ee:f2:53:e2:68:2d:32:6b:89:b2:d0:f4:ee:e1:6b:
a3:5b:c0:24:e6:19:ec:4c:88:46:65:ef:5c:1d:b0:97:58:16:
69:c1:b1:8f:5f:ec:7b:4a:fd:eb:6e:f5:90:a5:d4:44:98:77:
8d:01:b9:0f:72:9f:ef:8a:43:ee:83:95:3e:e8:e0:a6:99:30:
65:e4:dd:2f:dc:9d:da:61:87:f7:a1:fb:ef:c4:5f:08:5b:7b:
13:53:6f:5d:68:d8:2f:6c:4f:88:be:5b:e3:0b:fd:b6:3b:41:
cf:f0:9e:22:17:70:0d:ab:97:0f:51:3a:05:cc:48:53:80:ee:
3a:82:48:6a:1b:01:37:8b:24:0e:14:2c:9b:ad:df:bb:40:73:
3a:a3:d3:3f:b8:e4:8f:1b:e1:08:ae:a4:51:1f:15:6e:f5:0a:
d0:eb:63:6f:61:0d:c2:9c:83:0a:3a:83:29:d3:ee:69:98:b8:
0a:af:c4:99:ca:5e:9e:2f:10:3e:5b:af:c1:54:ce:c2:0d:b9:
59:4b:9d:64:51:62:81:00:be:8b:e1:8e:58:5e:c5:09:e3:72:
06:2d:c2:42:a4:0e:ae:94:48:a4:14:3f:ec:62:60:9f:d9:53:
5a:2e:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:29:58 2025 by rpki-client