Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/iystaYSJXuGKhhCiyAWE4u7UEyk.roa
File: iystaYSJXuGKhhCiyAWE4u7UEyk.roa (raw, json)
Hash identifier: XXypNZES5+tt8lWlXBej3/0Gq3tgIRPeDyU4cGhm/qQ=
Subject key identifier: 8B:2B:2D:69:84:89:5E:E1:8A:86:10:A2:C8:05:84:E2:EE:D4:13:29
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01988D2F010B546BF266A30DE359EC826619
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/iystaYSJXuGKhhCiyAWE4u7UEyk.roa
Signing time: Sat 09 Aug 2025 04:55:24 +0000
ROA not before: Sat 09 Aug 2025 04:55:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214923
IP address blocks: 94.184.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:2f:01:0b:54:6b:f2:66:a3:0d:e3:59:ec:82:66:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Aug 9 04:55:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b2b2d6984895ee18a8610a2c80584e2eed41329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:9d:18:c2:8e:c7:15:03:bd:89:d3:d2:c6:
d9:b8:44:07:3c:1f:ce:9b:6e:57:c3:0b:1a:e6:39:
10:64:b0:60:42:dd:5e:d2:95:67:9d:b0:46:32:c4:
12:1c:17:e1:48:30:a8:22:3d:d0:db:32:77:40:14:
db:f4:96:76:28:75:23:f3:e2:37:27:4e:c5:cd:38:
f4:b4:fe:7a:10:5c:b6:06:c0:71:3e:e6:34:1c:fa:
26:c4:01:f6:16:2b:ea:9f:20:c4:c8:f8:d4:b9:c2:
84:66:71:22:bb:2c:8f:30:f2:03:6c:19:56:51:cc:
6d:63:9d:7f:86:a2:44:bc:93:25:11:15:6f:94:a1:
4a:93:d0:1a:cb:2e:56:3f:5a:4d:d9:25:03:a3:18:
09:19:b3:b0:a8:2c:77:54:66:8d:2e:57:72:25:fb:
38:c3:6b:99:b8:15:5f:4e:27:c2:d2:51:15:f6:94:
1b:41:2c:06:19:f6:36:85:16:85:5f:77:46:6a:50:
b4:98:49:1a:72:79:45:37:e1:3d:68:91:ad:4a:71:
ed:6f:6b:d1:50:22:5d:f2:1d:03:b6:aa:76:80:b6:
10:ca:5f:e6:b7:81:47:26:bc:b4:cd:1c:4c:f6:a0:
ed:7f:7f:14:b8:1c:c2:ad:0c:57:32:52:f8:79:6c:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2B:2D:69:84:89:5E:E1:8A:86:10:A2:C8:05:84:E2:EE:D4:13:29
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/iystaYSJXuGKhhCiyAWE4u7UEyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.22.0/24
Signature Algorithm: sha256WithRSAEncryption
06:13:a9:e5:1d:3a:08:91:53:63:94:85:4c:3d:d0:94:5d:10:
fa:98:ad:e1:c6:b3:a8:db:28:45:36:76:ff:44:13:06:d5:ac:
8e:2f:ed:cb:a1:25:e0:d9:ae:54:84:d5:31:ce:62:07:52:29:
5e:13:c6:20:e2:05:c2:b2:fa:7e:0c:9a:55:a9:ef:ba:a1:aa:
23:82:e7:7b:75:77:0a:a5:88:b9:17:84:ea:dc:0c:12:b1:d7:
d7:6b:a5:79:0a:c9:a3:ce:3e:31:8f:11:f6:31:7d:9f:20:93:
16:0f:ca:4a:23:f0:95:a8:69:f1:59:4b:f0:45:44:d1:69:2f:
90:8c:c7:70:fe:a5:33:29:e8:3e:20:f1:4a:9e:0e:1f:fe:17:
49:d1:20:ae:a8:f7:03:f7:97:60:63:63:eb:77:58:e0:74:56:
81:12:f6:ae:81:2a:b3:86:6b:f2:72:31:0c:47:9d:c4:b0:2e:
e1:ce:6b:c6:65:46:0c:48:9b:ba:38:64:99:61:bb:01:9b:2e:
77:8d:a7:9e:be:63:64:dc:ed:56:93:a0:81:c9:97:e6:09:e1:
74:73:71:82:79:49:8f:0c:a3:81:52:2e:49:81:55:8b:9c:19:
3b:2d:06:7f:c1:f8:95:47:df:b3:71:d2:9e:d9:49:dd:14:47:
70:0e:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:20:01 2025 by rpki-client