Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/hiFWCOPGKEHEq8VF6PSULM9zArs.roa
File: hiFWCOPGKEHEq8VF6PSULM9zArs.roa (raw, json)
Hash identifier: mzwmSskFs1sYPh9GW82/FnRxj5gF5oQm2c7vAlUcGR0=
Subject key identifier: 86:21:56:08:E3:C6:28:41:C4:AB:C5:45:E8:F4:94:2C:CF:73:02:BB
Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial: 019832AA1BE13BCB8FFD558E2DD4F7A483CD
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/hiFWCOPGKEHEq8VF6PSULM9zArs.roa
Signing time: Tue 22 Jul 2025 15:04:25 +0000
ROA not before: Tue 22 Jul 2025 15:04:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216405
IP address blocks: 185.46.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:aa:1b:e1:3b:cb:8f:fd:55:8e:2d:d4:f7:a4:83:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Validity
Not Before: Jul 22 15:04:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86215608e3c62841c4abc545e8f4942ccf7302bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:db:c7:84:39:7b:d3:eb:d9:27:ec:b2:f5:
c5:70:da:aa:2a:f5:83:e4:69:ef:dc:59:b3:15:a3:
66:11:98:ba:a1:e3:49:fe:9b:95:d2:ed:ec:15:62:
a5:fb:9b:76:63:94:91:89:f0:27:fb:3d:d5:7b:f8:
fe:32:20:4b:ee:c2:2b:e9:63:9d:22:5e:50:5c:3a:
91:4f:21:c3:71:55:50:75:46:b1:5e:eb:e6:1e:39:
54:e8:b7:26:b3:b6:b6:a9:c8:04:1b:d6:d7:1b:22:
35:3a:57:95:b8:e4:c9:33:40:6a:1b:17:1e:42:4b:
cb:12:90:ce:0a:39:e0:58:4a:52:e4:d5:d9:fe:a8:
a9:c9:1c:99:a6:74:58:d4:1b:ed:49:15:cd:3d:1d:
d7:91:5c:68:e5:c5:d6:12:47:08:bc:7d:f1:96:ce:
67:3e:ba:93:5f:f1:86:76:0a:4c:8b:bb:3b:0e:52:
de:d6:61:23:b4:d2:0d:2d:a3:bd:8f:79:58:a1:f2:
11:65:4a:39:72:e6:e7:39:34:f7:45:85:b1:83:99:
c6:b0:9c:1b:5f:47:18:9d:7c:36:6a:83:15:f2:60:
58:86:49:dd:6d:b1:a0:d2:d5:34:90:54:e1:a5:fb:
b7:8e:09:3e:10:19:e0:93:a5:91:0f:86:00:33:29:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:21:56:08:E3:C6:28:41:C4:AB:C5:45:E8:F4:94:2C:CF:73:02:BB
X509v3 Authority Key Identifier:
keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/hiFWCOPGKEHEq8VF6PSULM9zArs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.115.0/24
Signature Algorithm: sha256WithRSAEncryption
10:32:1d:72:7a:32:0c:a1:bb:08:6b:eb:65:4f:66:02:77:7d:
8f:1d:eb:d6:11:ba:82:1c:ca:61:eb:d6:f1:1e:98:92:6c:be:
65:a6:97:51:f9:97:89:6f:02:a0:32:da:9c:c2:55:6d:64:ed:
54:9f:5c:d6:62:6e:b0:49:60:91:7a:3a:33:9b:d5:36:f8:09:
54:03:fe:ff:ba:66:f6:cb:f9:49:35:b0:ee:77:a3:20:59:2b:
ca:e2:60:dc:75:ff:2d:9f:ca:bf:5e:67:88:16:78:41:8e:3c:
f1:15:16:74:b1:05:fe:67:48:a9:66:60:2a:3e:87:88:e2:1e:
9c:f0:39:c0:0c:c3:3c:cf:91:5c:33:7e:88:84:a3:5d:d0:98:
a8:15:4c:04:de:4b:a6:19:b3:50:9c:4b:43:5a:7b:08:a5:9b:
d4:72:b6:cb:20:d6:78:8f:8f:17:09:02:bf:aa:40:96:b1:47:
5c:f8:5a:0e:f3:04:a1:16:04:a0:10:14:ec:36:18:f4:b0:92:
d7:9a:73:ab:d9:51:0b:48:c5:7c:d8:10:62:4c:b9:40:cd:cb:
43:dd:19:cb:01:ae:90:a9:8d:f7:d0:62:7a:d3:ca:c0:6c:e4:
4c:8d:c3:11:75:25:2f:a1:d7:21:f4:29:d5:87:21:17:24:b3:
84:39:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:00:15 2025 by rpki-client