Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/HWqSqY616k_MxnxWWXrz-F7oaUY.roa
File: HWqSqY616k_MxnxWWXrz-F7oaUY.roa (raw, json)
Hash identifier: ughEkO9c0ao80SC1dna2XMUSyH1lSHlaqzc5hraWMtM=
Subject key identifier: 1D:6A:92:A9:8E:B5:EA:4F:CC:C6:7C:56:59:7A:F3:F8:5E:E8:69:46
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 01987A38081EF5966079C5C78BC2738B45C6
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/HWqSqY616k_MxnxWWXrz-F7oaUY.roa
Signing time: Tue 05 Aug 2025 12:32:29 +0000
ROA not before: Tue 05 Aug 2025 12:32:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57797
IP address blocks: 2a12:8ac0::/29 maxlen: 48
2a12:8ac0::/40 maxlen: 48
2a12:8ac1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:38:08:1e:f5:96:60:79:c5:c7:8b:c2:73:8b:45:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Aug 5 12:32:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d6a92a98eb5ea4fccc67c56597af3f85ee86946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:bf:de:0f:3f:9b:86:7a:db:72:d4:b0:75:
da:95:ff:d3:e0:14:06:eb:70:11:ed:a7:0f:14:8b:
7e:17:c4:5e:e2:3b:48:6c:7b:5e:d4:ed:1c:ea:8d:
f2:da:4e:bc:30:d1:06:de:07:6d:77:0d:0c:b7:31:
ba:48:70:22:bb:52:b8:7c:5b:0a:23:b1:b1:c6:37:
17:ae:d4:7e:00:2c:ab:bf:20:b9:32:49:bf:ad:08:
a6:7e:11:97:55:b6:93:22:5a:b1:61:21:55:6d:83:
5a:d2:da:d7:d8:8a:19:b6:5c:78:0d:17:db:d4:3e:
1b:16:24:f8:aa:59:cd:9d:4a:3a:9b:33:98:c7:5e:
60:70:e2:01:4c:01:88:6d:17:5c:4c:2c:e8:18:6b:
12:7b:4a:5a:e1:37:25:54:3c:1c:cc:b1:99:a5:23:
6e:77:17:9f:13:d3:e6:44:26:80:c0:65:9e:3f:50:
b8:01:9b:1a:63:40:36:bc:84:97:15:fe:db:a6:0d:
84:c2:f5:83:4f:1c:a8:d6:62:0e:73:54:fb:b7:fd:
9f:f2:04:10:6d:47:10:4e:df:7d:ee:00:ee:15:86:
6a:3b:f3:b8:ee:01:ea:47:7b:ff:8d:2a:03:43:3f:
c6:78:87:4c:bf:5a:02:8c:3e:5c:3f:58:1f:5f:6e:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6A:92:A9:8E:B5:EA:4F:CC:C6:7C:56:59:7A:F3:F8:5E:E8:69:46
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/HWqSqY616k_MxnxWWXrz-F7oaUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:1e:82:03:4b:a2:ed:3e:eb:fb:c6:d2:33:49:f7:81:1e:23:
d3:68:7f:d9:5e:8a:4a:8a:a6:65:ad:28:51:6a:d1:e7:26:95:
72:f6:cd:dd:ea:08:77:81:cd:e8:42:e4:0b:e5:68:0c:5e:24:
7b:7d:70:3d:83:37:1c:d7:8e:cd:24:0f:c2:51:40:4a:38:d0:
13:5c:72:72:51:4e:18:c0:10:55:5d:95:97:fe:13:fd:ea:bf:
35:a1:04:a0:e0:b6:d5:77:36:11:44:8a:63:94:3e:78:9a:0f:
71:f5:63:51:12:22:01:24:20:1a:35:f5:c3:4a:db:cc:07:82:
75:f1:04:36:2f:f3:ab:37:7c:93:39:70:fb:1a:97:9a:7c:fc:
2a:2b:d9:9b:e3:a2:4b:82:5f:7b:ac:b6:f8:b6:5b:40:b4:3d:
03:fb:c0:15:c4:28:a3:eb:bd:9a:eb:61:5c:04:68:3d:ec:c6:
a2:72:95:c6:a6:c9:ef:3c:7b:14:b0:a8:d7:26:63:5c:78:37:
c4:ca:0d:ed:9b:77:c7:4f:f8:3d:2f:66:03:b6:5a:e0:b9:7f:
0d:8c:82:77:69:fc:f9:20:ed:52:d4:a9:74:19:ac:5c:f1:b7:
b7:c2:43:3c:d2:0a:ff:0d:2f:8c:72:8d:89:a0:f0:00:c9:45:
ed:9b:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:24 2025 by rpki-client