Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bHobHz3lDTPHjPnQnpY8GRsKkn8.roa
File: bHobHz3lDTPHjPnQnpY8GRsKkn8.roa (raw, json)
Hash identifier: 1Jxc1LpdpfR+AOGwzDpJYBpwdLUKt9a8nk5fQopInoQ=
Subject key identifier: 6C:7A:1B:1F:3D:E5:0D:33:C7:8C:F9:D0:9E:96:3C:19:1B:0A:92:7F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01986061800836F4AA3BA790015BAC42C2AC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bHobHz3lDTPHjPnQnpY8GRsKkn8.roa
Signing time: Thu 31 Jul 2025 12:07:39 +0000
ROA not before: Thu 31 Jul 2025 12:07:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 194.62.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:61:80:08:36:f4:aa:3b:a7:90:01:5b:ac:42:c2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 31 12:07:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c7a1b1f3de50d33c78cf9d09e963c191b0a927f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:72:8f:e3:b4:3d:8f:2c:b1:0d:f0:2d:4e:
6e:47:27:a3:5e:6a:d1:19:a0:f0:c7:af:5f:2d:ee:
eb:a3:9b:a4:8e:02:58:c2:69:86:5f:6a:a3:ad:e2:
b2:a1:66:46:1c:97:d4:52:62:bd:df:78:8b:c2:a2:
e5:c3:23:c3:64:f1:e4:e3:a3:de:a7:bb:37:04:84:
1a:c5:64:7b:1d:e9:ac:6d:82:49:de:bf:b9:4e:1f:
45:cf:e5:66:41:76:9b:a9:8c:a3:e8:9b:60:5e:44:
ec:59:54:f6:d2:98:21:46:07:ba:50:9e:f9:22:db:
30:8e:e8:8a:fa:fd:d1:fc:2a:31:09:01:be:f4:d0:
d0:9a:d6:38:3e:ae:b3:6c:c4:8c:0b:b7:08:0c:91:
82:53:bf:61:c6:47:47:e7:e4:5a:38:3a:99:bb:a4:
aa:91:28:ca:44:21:18:30:42:52:ea:f5:48:82:0e:
5e:d0:dc:2f:67:ad:a0:80:25:18:35:1a:ac:e1:ab:
e0:81:62:af:ca:c0:a1:6d:ad:41:0f:77:0e:b5:57:
3d:51:da:59:92:82:d2:6c:07:e5:b2:e9:f7:c2:0e:
aa:55:0b:c5:ae:05:3d:bf:6b:f6:82:22:48:97:b0:
55:86:a2:4c:03:7b:54:26:2e:a4:27:01:ca:d3:85:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7A:1B:1F:3D:E5:0D:33:C7:8C:F9:D0:9E:96:3C:19:1B:0A:92:7F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bHobHz3lDTPHjPnQnpY8GRsKkn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.122.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1e:a9:e4:6f:32:ac:e8:45:9f:8f:1d:39:f2:94:60:70:ac:
c0:64:04:13:39:8f:64:82:d1:e9:33:1c:ba:c0:97:f1:a7:0f:
45:4b:72:19:22:3f:ae:93:31:d1:15:91:de:c3:3b:de:e9:8c:
d7:3f:86:17:bc:a3:54:cf:b9:ed:2c:7c:26:26:4f:fa:7c:76:
9b:c0:ee:65:a8:29:e2:42:0d:40:7b:9c:59:69:0b:66:73:40:
57:5c:0a:5e:a2:9b:ae:d7:a5:73:b7:99:30:5d:6f:d8:9a:c5:
4d:bb:3c:a3:0e:84:97:57:31:dc:a4:f7:3c:d2:70:fd:e1:5a:
90:02:af:80:20:e9:ea:dd:69:c3:2d:db:23:27:3b:31:1a:b8:
26:5b:71:56:3d:2e:d1:d0:a5:93:e2:b7:e4:d3:8b:9f:f6:0c:
c4:7b:0c:88:bb:ef:d1:91:7a:eb:76:cc:04:14:08:b0:e4:a8:
7f:fa:20:99:d5:f2:42:fd:ea:d3:41:cf:77:d7:8e:2d:50:3b:
b4:88:42:00:86:e2:10:ce:6d:a4:02:a6:e9:92:c4:b0:1c:7a:
9d:bc:51:a2:2b:63:16:f8:d9:36:f9:6f:2e:02:a9:8a:2d:1f:
cd:20:7c:3e:bd:ab:66:f2:94:0b:49:cb:bb:35:30:5a:7d:b0:
56:49:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:20 2025 by rpki-client