Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/1-HseKewNAhORGPeG0jLZJxBWBmA.roa
File: 1-HseKewNAhORGPeG0jLZJxBWBmA.roa (raw, json)
Hash identifier: Gx06jT5zWYtxqZ2ePMD9C4nr+agXJCFs/O2+a8Lk6RQ=
Subject key identifier: F8:7B:1E:29:EC:0D:02:13:91:18:F7:86:D2:32:D9:27:10:56:06:60
Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial: 01986265B3686221585498564E6815F87EEA
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/1-HseKewNAhORGPeG0jLZJxBWBmA.roa
Signing time: Thu 31 Jul 2025 21:31:28 +0000
ROA not before: Thu 31 Jul 2025 21:31:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56999
IP address blocks: 2a0a:7d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:62:65:b3:68:62:21:58:54:98:56:4e:68:15:f8:7e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Validity
Not Before: Jul 31 21:31:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f87b1e29ec0d02139118f786d232d92710560660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:9f:01:21:32:4c:aa:b4:a8:93:e8:e6:d4:
c8:1a:73:5d:2b:6b:2c:d4:20:52:e0:20:43:49:b5:
ec:10:ab:a6:ee:7e:ad:d0:47:e5:92:e8:2b:b6:1f:
d5:d3:64:c6:00:16:53:97:84:1b:5e:73:7b:7c:16:
d9:b8:2b:b2:e1:b3:08:b8:25:5b:7f:4c:ff:11:1e:
a3:3a:7d:b5:74:e1:2d:0a:78:d8:65:08:f4:e4:02:
ac:02:79:87:6c:5b:39:78:55:94:f7:4c:4c:9b:78:
da:cc:c3:b5:18:90:15:64:98:f5:98:e0:bb:c9:f8:
65:da:07:92:2f:2a:a8:41:00:ce:d6:70:c0:19:f1:
11:09:72:72:2c:99:cd:2f:dc:f2:4f:94:33:5c:a2:
30:a9:79:07:6a:c2:ef:7c:66:55:0a:a4:b5:45:5c:
8f:99:64:82:50:89:96:38:03:a2:6a:e8:35:5b:d4:
80:f7:88:88:05:ae:29:3e:8a:77:1a:34:fd:b7:9d:
43:b7:aa:8e:8a:4d:c6:b7:5a:79:92:f4:b9:1a:ac:
b8:48:be:2c:89:26:b7:89:25:d9:b9:e7:d4:01:49:
c1:c9:0e:10:8f:64:40:94:8e:24:07:64:f5:d5:b1:
61:ea:38:c4:f6:ee:d1:59:8a:1d:f1:49:94:36:a5:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:1E:29:EC:0D:02:13:91:18:F7:86:D2:32:D9:27:10:56:06:60
X509v3 Authority Key Identifier:
keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/1-HseKewNAhORGPeG0jLZJxBWBmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
09:0f:f4:e0:cc:12:9f:67:78:21:58:27:e1:02:2f:59:88:cb:
72:67:07:55:01:b3:84:a2:18:f6:32:2b:f1:03:20:49:79:49:
57:6c:61:89:39:ab:01:31:7a:bb:a1:79:5e:32:7c:e8:9a:88:
1f:8f:e2:cf:18:bc:46:50:ba:42:ab:da:f6:da:ff:7d:6e:56:
d0:ff:f6:bd:c5:5c:53:81:6b:8d:4d:25:c4:10:04:be:0c:e5:
ae:96:67:e7:43:92:21:c9:16:a9:11:0e:05:fb:50:d2:f2:e5:
5d:73:d8:a8:a9:f7:a8:99:87:14:3e:c3:ea:86:3b:26:90:35:
da:54:8a:22:0b:ef:33:7c:7c:7f:06:4d:00:91:e9:fa:ae:fb:
08:93:4d:c9:83:7e:cc:13:d2:42:93:69:0b:33:eb:b0:d5:53:
79:85:e8:00:0d:5a:aa:f5:6a:cb:9b:94:9b:97:ba:cf:ef:56:
bf:56:f2:cc:f8:a3:fe:08:ee:08:50:e8:55:f0:e4:41:76:18:
76:cc:07:69:f3:90:aa:4a:35:b0:48:cc:3b:81:b9:36:e4:e3:
a6:9a:20:09:4c:70:c9:e3:70:52:3a:de:bd:0e:67:ca:b0:62:
c9:a9:bd:7e:aa:d2:95:03:ad:ca:2e:fa:c2:0c:27:34:ba:f6:
af:55:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:34 2025 by rpki-client