Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/hhgRHJVnB3DztK66fHImmHJUfiY.roa
File: hhgRHJVnB3DztK66fHImmHJUfiY.roa (raw, json)
Hash identifier: ywnZNCltyc1wn94Hs8Pg9jk2EOzb5fqb+j6rupGe/7s=
Subject key identifier: 86:18:11:1C:95:67:07:70:F3:B4:AE:BA:7C:72:26:98:72:54:7E:26
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 01987ED7CE0833827E8D508C6CBA6B118F75
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/hhgRHJVnB3DztK66fHImmHJUfiY.roa
Signing time: Wed 06 Aug 2025 10:05:28 +0000
ROA not before: Wed 06 Aug 2025 10:05:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215423
IP address blocks: 193.176.36.0/24 maxlen: 24
2a14:bc0::/29 maxlen: 29
2a14:bc0::/48 maxlen: 48
2a14:bc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d7:ce:08:33:82:7e:8d:50:8c:6c:ba:6b:11:8f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Aug 6 10:05:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8618111c95670770f3b4aeba7c72269872547e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:fc:b9:80:a9:d4:fd:51:80:6a:fc:3f:7e:
4d:15:dc:80:9d:f4:79:5c:e1:37:ec:2a:01:b5:9b:
23:ee:4f:85:30:19:0a:f7:8f:a6:cc:f3:c2:d4:6d:
2f:df:dd:81:8b:d1:be:c3:0e:3a:cf:a6:fa:64:50:
02:4e:d8:ff:ba:f0:3e:fd:6d:f2:9b:e1:dd:e6:76:
df:1f:25:00:c1:3f:85:4b:b8:9a:0e:a0:38:74:43:
02:0a:58:7d:35:ed:71:90:34:bb:82:03:d2:9c:f5:
06:9f:95:54:93:be:93:bc:97:21:71:03:57:64:e1:
24:88:d1:4b:9a:f8:7e:d2:11:0f:a2:39:63:c2:43:
25:23:87:ca:27:dd:bf:09:30:d2:27:16:d9:53:73:
10:90:de:d2:ed:52:d8:fb:60:2c:a2:ad:fe:42:de:
c6:59:f8:a8:83:da:4d:67:85:0f:f9:50:e5:d3:52:
95:c1:46:85:62:e7:54:b2:fd:b2:7c:6d:39:57:44:
c5:e9:12:28:1d:c6:3f:c9:75:5a:f0:f2:91:26:59:
2c:c9:2f:66:fe:d2:ad:3c:6b:a3:2c:d2:8b:88:b0:
32:15:88:98:07:24:bd:06:6c:68:fc:61:88:58:be:
41:6b:be:4e:a0:be:2f:3d:a7:87:61:1e:69:6e:e5:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:18:11:1C:95:67:07:70:F3:B4:AE:BA:7C:72:26:98:72:54:7E:26
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/hhgRHJVnB3DztK66fHImmHJUfiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.36.0/24
IPv6:
2a14:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
41:f7:0c:59:1d:85:28:91:c1:a3:21:be:70:da:5b:b9:50:3d:
cf:6c:26:39:1f:9f:a7:d2:38:0f:77:e3:ed:5b:59:5c:90:27:
ed:02:5e:02:97:c1:d9:be:75:a3:27:d4:d6:af:96:e5:ad:87:
e1:18:fd:d8:01:44:ee:8c:85:69:6e:4a:d5:74:3e:41:db:a9:
d3:a0:1a:0a:aa:10:be:53:44:cb:85:04:98:b6:9e:d0:2a:1e:
9b:22:d8:2c:63:93:74:d5:cb:22:c2:99:16:cd:6b:d2:e1:2c:
62:89:11:99:78:b3:91:40:7e:c2:8f:5b:01:fc:75:65:08:dc:
d6:75:35:c6:c7:ad:da:30:19:6c:5e:70:99:ab:87:68:58:7b:
46:e9:75:d8:7f:f3:2b:00:63:51:fe:38:55:98:03:f2:79:49:
68:d0:78:b9:9b:71:54:35:a9:8d:6b:b1:4b:e4:66:e3:76:79:
07:e2:4a:2f:44:3a:65:90:90:fc:81:9c:90:03:31:9a:27:18:
e1:84:b1:40:5d:ab:f2:c7:38:70:74:4a:76:15:7e:72:e6:2c:
1c:ae:94:49:19:97:b7:47:ae:13:e5:1b:b1:96:89:3d:a3:88:
d8:2c:6b:5b:2a:88:ca:73:27:02:87:f6:d0:9d:bf:fa:63:f0:
28:3f:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:41 2025 by rpki-client