Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/hZEvfmZNH48o6ZxWGpbpksMa5nk.roa
File: hZEvfmZNH48o6ZxWGpbpksMa5nk.roa (raw, json)
Hash identifier: HHzEpVFljtqXAUOR29p6mAYzd1SFI9T67Olu5rbtf4Y=
Subject key identifier: 85:91:2F:7E:66:4D:1F:8F:28:E9:9C:56:1A:96:E9:92:C3:1A:E6:79
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 0199C31F64AABE424B46A48C0A03FF5B0C9C
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/hZEvfmZNH48o6ZxWGpbpksMa5nk.roa
Signing time: Wed 08 Oct 2025 09:20:38 +0000
ROA not before: Wed 08 Oct 2025 09:20:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48434
IP address blocks: 94.184.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:1f:64:aa:be:42:4b:46:a4:8c:0a:03:ff:5b:0c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Oct 8 09:20:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85912f7e664d1f8f28e99c561a96e992c31ae679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:11:dc:6a:90:47:2d:3e:13:d1:d3:62:f8:
58:e2:9b:d8:c7:34:82:b8:27:71:10:3a:43:74:98:
0a:77:3f:55:7f:1b:31:16:c5:bf:8a:b2:33:3b:8b:
91:52:c8:19:39:53:c1:64:f7:e2:8f:be:38:63:c0:
39:9d:80:09:2e:03:88:24:c9:f0:da:18:9b:0a:e3:
5e:84:8c:12:dc:a5:f5:b6:0c:de:61:e8:92:16:76:
13:7c:dd:fa:bf:0b:37:af:53:b6:56:43:50:ef:5f:
37:30:68:c4:ba:97:76:0b:91:3c:b5:22:8f:c6:cf:
ff:2b:a6:c6:6c:22:ee:71:fd:cc:41:32:70:50:1f:
eb:eb:6e:fc:f8:88:f0:e3:74:e4:bb:e0:48:00:96:
c0:1f:11:ac:f6:6c:4c:9f:48:4a:56:78:f7:6f:bb:
6c:ad:70:95:08:a3:12:46:91:89:07:e6:2a:55:f0:
86:49:18:70:79:5b:2a:4f:ef:b3:35:e8:12:7e:4a:
7a:9b:c4:b6:27:b8:aa:9e:8b:e9:cf:90:61:0b:74:
ed:7f:3a:3e:c3:87:50:de:ff:e2:68:5a:5d:6e:78:
7b:80:88:ce:ed:1e:3c:47:93:2d:9e:47:7c:fb:98:
9d:6b:7f:58:7c:88:fd:db:27:93:f8:98:6c:1e:d8:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:2F:7E:66:4D:1F:8F:28:E9:9C:56:1A:96:E9:92:C3:1A:E6:79
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/hZEvfmZNH48o6ZxWGpbpksMa5nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.92.0/23
Signature Algorithm: sha256WithRSAEncryption
73:a8:b0:e3:ce:ce:51:bf:12:04:62:b0:c7:59:53:01:c2:73:
fa:5b:9a:d8:9a:ed:2e:e2:c2:91:b7:a9:0e:0d:d9:27:eb:2b:
d8:6d:13:d1:7b:ae:a6:94:f7:ba:00:f1:ab:88:11:26:79:ae:
a5:e6:5c:19:ce:eb:8c:ae:76:e9:cd:bc:89:db:c1:3a:78:7f:
df:6e:dc:c7:1c:35:be:ae:2c:11:89:12:cc:e4:4c:93:93:17:
21:ce:15:97:ce:a3:6f:4a:df:c7:a0:23:b8:e1:73:41:74:ed:
3c:11:2d:f5:e9:63:2b:b9:37:88:fa:43:63:d3:c1:71:53:ae:
a5:eb:b5:c7:a1:15:4f:41:e6:86:b9:71:52:6e:d8:99:36:ae:
5e:c3:f7:cd:63:39:00:a3:37:b8:7e:28:a5:2d:8a:11:64:71:
65:9f:cf:41:dc:b3:5d:4c:21:a9:a1:40:29:f6:5e:d0:29:8a:
9c:58:f4:33:60:ce:bb:2e:a8:64:e2:f8:50:ff:a9:f6:4b:e2:
91:f4:99:0c:81:c3:b5:23:12:17:ff:d7:e0:19:a2:87:4d:51:
2b:f4:35:d5:b7:6d:7e:06:c8:15:31:72:b9:3a:2f:1a:3e:93:
5c:57:66:7d:c3:1c:0d:83:1b:3a:03:40:81:fe:9f:10:f6:e8:
25:17:94:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:33:18 2025 by rpki-client