Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/AEoJBTXGdbNGEHCG2xrZYkY-m48.roa
File: AEoJBTXGdbNGEHCG2xrZYkY-m48.roa (raw, json)
Hash identifier: wcifUjqJ1L+wv580+2agiHMA4f6pyHuaF1nnabsyT3o=
Subject key identifier: 00:4A:09:05:35:C6:75:B3:46:10:70:86:DB:1A:D9:62:46:3E:9B:8F
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 0199561CDAB79BF5F4630F1DE1EDD4B71EEF
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/AEoJBTXGdbNGEHCG2xrZYkY-m48.roa
Signing time: Wed 17 Sep 2025 05:19:15 +0000
ROA not before: Wed 17 Sep 2025 05:19:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 85.28.61.0/24 maxlen: 24
85.28.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:1c:da:b7:9b:f5:f4:63:0f:1d:e1:ed:d4:b7:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Sep 17 05:19:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=004a090535c675b346107086db1ad962463e9b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:74:87:c0:43:67:8e:9f:9b:05:e5:62:0e:
d7:c6:c5:ca:40:3b:b8:dd:19:a7:d0:bc:61:11:8c:
d2:d4:ed:e8:86:fb:1e:91:22:fb:59:d4:c5:f6:ca:
ae:98:e3:72:29:10:fd:f4:2d:8d:dc:91:e0:4b:75:
67:33:1c:70:3f:b1:73:4e:6d:e4:ab:8c:21:cf:ec:
cb:e0:30:ac:f0:bb:34:c4:38:15:95:5e:06:99:e2:
06:44:c0:1f:9b:1d:2d:9e:85:88:79:5b:71:51:1e:
cd:e2:57:5a:d9:7f:08:12:b9:36:af:c2:1d:c9:7e:
67:13:86:c1:65:c3:ba:74:3b:51:2a:d6:24:4a:f0:
25:35:85:15:de:89:27:e4:85:a3:4a:23:2d:ea:11:
88:a7:50:fa:c0:4c:a0:7a:15:77:d8:9f:fb:5d:6e:
88:c1:a3:df:d9:b8:69:cb:0d:8c:26:88:11:cf:fa:
b5:19:26:87:a0:8f:e3:6a:67:d5:84:bd:62:65:9c:
b6:93:da:2d:8e:c8:0e:e5:ea:9f:f1:2d:5d:5d:8b:
86:0f:91:07:39:62:32:7c:0c:e9:e8:e4:7c:83:4c:
61:e2:6e:6b:ca:d5:b1:ad:cd:8a:0b:0a:1a:ba:04:
7c:dd:c2:ec:7e:ab:ab:35:fb:ea:3b:8d:ce:1e:5f:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4A:09:05:35:C6:75:B3:46:10:70:86:DB:1A:D9:62:46:3E:9B:8F
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/AEoJBTXGdbNGEHCG2xrZYkY-m48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.61.0/24
85.28.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d4:49:bb:1d:c4:05:08:2d:a8:96:5a:c2:1c:d9:c0:8d:88:
93:7e:63:ff:3e:fe:27:0e:b7:38:d8:fb:8b:8b:c4:bb:1c:90:
02:55:e8:44:fc:ca:3f:76:58:f6:b0:29:7c:66:8f:61:28:4c:
ba:3d:b7:e5:a4:7d:91:eb:48:bc:61:05:d5:72:ef:2e:d4:7d:
83:1c:d6:a7:1e:01:4c:fb:d0:33:60:3b:79:5a:11:36:a7:ad:
e7:05:44:4b:14:e2:8f:91:1c:bd:9c:45:b8:1d:76:43:71:ff:
54:de:61:c4:6c:4a:32:60:88:6f:39:ab:16:3b:d2:19:41:f3:
dc:03:5f:40:08:c4:93:7d:7e:cf:10:fe:5f:00:ce:92:bf:5b:
06:99:f5:ed:77:49:b6:cb:f7:bd:64:4e:5e:a9:ab:84:32:f8:
d0:27:a7:15:6a:a1:47:a7:93:c7:1a:3e:de:6d:d3:a8:a1:4b:
2d:00:0a:78:6a:b1:cb:9e:b8:49:ae:aa:75:14:79:64:93:8b:
a4:66:cd:0e:ac:fd:57:fe:81:17:da:b5:bd:c5:c9:a8:46:7d:
f1:58:f2:f5:29:7f:79:02:f8:2a:27:55:36:ed:9b:82:d9:cb:
90:e7:02:84:20:57:3c:9e:5a:27:10:51:dc:1f:ad:5a:cc:6e:
65:43:71:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:46 2025 by rpki-client