Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/ph-_p4gT6KZB2Xgbs2zlGYIYtgU.roa
File: ph-_p4gT6KZB2Xgbs2zlGYIYtgU.roa (raw, json)
Hash identifier: 2iTmqWC/xN+Zadr2KJDlI5cxPwSqu9GxPi/bRx/hmlU=
Subject key identifier: A6:1F:BF:A7:88:13:E8:A6:41:D9:78:1B:B3:6C:E5:19:82:18:B6:05
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 0199E4CDD26D818C6F395CED463C83A48DE4
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/ph-_p4gT6KZB2Xgbs2zlGYIYtgU.roa
Signing time: Tue 14 Oct 2025 22:18:37 +0000
ROA not before: Tue 14 Oct 2025 22:18:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205889
IP address blocks: 185.203.52.0/24 maxlen: 24
185.203.53.0/24 maxlen: 24
185.203.54.0/24 maxlen: 24
185.203.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:cd:d2:6d:81:8c:6f:39:5c:ed:46:3c:83:a4:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Oct 14 22:18:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a61fbfa78813e8a641d9781bb36ce5198218b605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:34:2b:1c:d2:b3:69:87:ce:55:02:cb:20:
b5:67:f3:82:ef:d7:fa:bd:c7:04:8a:1d:1e:95:71:
bc:f1:26:c0:9d:e2:8f:9b:d5:da:d4:24:30:5c:7c:
d5:18:19:35:65:2a:82:54:eb:79:31:72:3f:09:04:
18:89:0d:10:f5:5e:ce:c3:99:5d:41:83:77:d8:a3:
56:1c:a4:6f:19:d6:76:90:ec:76:d4:1f:94:71:53:
89:f2:cf:17:f3:65:79:4d:0f:20:5e:af:db:44:03:
18:8a:0c:ca:31:bf:d9:93:5a:94:ac:ec:21:7d:dd:
5e:e4:bc:ce:e3:3e:be:69:14:10:80:9e:1a:24:b6:
87:69:1b:e4:79:d8:57:bf:72:67:53:ab:2f:19:dd:
24:e9:ec:ec:42:c9:61:e8:16:69:39:79:84:20:6d:
72:56:88:ca:0f:09:2a:bb:90:2b:bb:b7:ad:50:b1:
f3:74:04:fc:c8:01:5b:35:fa:85:6e:ed:a5:e7:f9:
7d:53:b2:13:79:21:86:a4:95:00:08:d0:f7:74:e9:
00:81:e1:01:4b:ee:64:62:41:fb:3f:d7:1b:ee:12:
06:72:73:74:d1:92:42:0b:7f:eb:08:19:9e:45:38:
98:1e:e4:d4:7c:8b:12:bd:fa:14:12:05:60:01:c4:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1F:BF:A7:88:13:E8:A6:41:D9:78:1B:B3:6C:E5:19:82:18:B6:05
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/ph-_p4gT6KZB2Xgbs2zlGYIYtgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:3b:ff:1f:75:be:d8:e4:ac:bd:4a:7a:85:f9:36:18:3b:63:
3b:3c:d3:23:17:02:84:37:5b:a4:d9:2b:e0:25:1e:90:4c:e2:
ea:ee:fb:c8:76:71:13:29:50:08:84:60:78:c2:f7:e0:08:12:
8f:e6:9f:db:73:19:48:39:05:ec:d0:43:6c:6d:65:72:a8:f6:
73:28:d1:72:23:ec:7e:f1:b7:56:19:5c:3e:f4:41:f1:40:49:
1c:46:5f:c9:9c:2a:54:cd:f2:ae:0f:d9:cc:7f:82:d9:b3:88:
a0:6c:88:74:5d:bb:d2:fc:fc:4a:41:da:5e:01:6d:33:ab:77:
5e:3b:2b:55:39:73:5e:91:c1:c4:9f:07:c1:a3:8c:05:c8:91:
64:87:54:c2:26:d2:53:d7:eb:25:3d:5f:d4:95:0f:ea:00:2f:
c1:cd:18:d2:09:1c:8a:19:3f:c8:62:97:8b:37:1f:b9:d3:be:
98:c4:16:5c:fe:7e:25:81:f7:57:c1:8e:1a:31:ad:21:ff:84:
a9:05:f4:12:59:1a:d0:cf:8c:69:7f:95:2d:ba:1b:61:db:36:
13:1c:33:cf:0f:15:a9:70:0b:93:58:f1:83:ac:4e:ae:b3:90:
8c:a8:c3:82:f1:c9:88:ae:ee:bd:ff:af:38:fd:84:99:5b:85:
4d:3a:23:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:23 2025 by rpki-client