Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/iwhh8GSlF2JcI8LIv2St2ufYmZ8.roa
File: iwhh8GSlF2JcI8LIv2St2ufYmZ8.roa (raw, json)
Hash identifier: acSdiw8UPrSts52xoexQSZiCm3ONDAs/Am57KnXckbs=
Subject key identifier: 8B:08:61:F0:64:A5:17:62:5C:23:C2:C8:BF:64:AD:DA:E7:D8:99:9F
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0197622B049E01E419CB41A51006D97E5FC3
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/iwhh8GSlF2JcI8LIv2St2ufYmZ8.roa
Signing time: Thu 12 Jun 2025 03:24:35 +0000
ROA not before: Thu 12 Jun 2025 03:24:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 185.232.19.0/24 maxlen: 24
185.246.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:2b:04:9e:01:e4:19:cb:41:a5:10:06:d9:7e:5f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jun 12 03:24:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b0861f064a517625c23c2c8bf64addae7d8999f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:e5:53:7f:5e:8c:fc:ca:33:62:43:66:3c:
0e:3f:c5:94:37:d7:8b:74:e5:2d:94:54:9b:32:90:
32:e5:04:ed:8c:d1:b7:c5:ea:c8:9e:a7:a5:d1:69:
be:1c:92:98:9a:10:5d:ae:f0:c0:da:76:0e:0a:75:
05:71:bf:24:3d:d1:b5:e8:72:42:15:77:ed:39:cb:
7f:00:53:e1:1e:8c:a1:ef:e2:0e:84:5f:29:5d:47:
c6:0c:18:ce:51:23:40:a6:ac:2d:65:46:d6:b4:87:
e9:b4:b8:79:8f:23:b2:57:be:df:aa:34:ea:43:85:
ae:a4:69:c9:83:85:fb:bf:6d:95:5c:45:5f:52:70:
b5:75:58:fb:a2:b6:68:cd:6a:8a:2d:ca:56:b8:77:
ae:a0:40:49:73:a9:5d:4a:30:5f:da:c6:ac:39:cd:
76:aa:e7:5f:5f:71:da:0e:49:54:19:46:2e:f1:55:
59:52:50:7d:f2:47:bf:6f:a1:84:49:32:2c:d2:bb:
aa:05:d2:61:e9:97:68:cd:81:d2:40:85:d3:81:82:
77:dd:22:5c:83:9d:0b:29:7d:73:e2:20:0b:bf:6a:
70:d7:bf:c1:59:51:ed:c3:b3:4c:0a:76:cd:0f:6e:
70:40:a3:c4:7c:2b:67:14:d1:27:b2:4f:06:b8:24:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:61:F0:64:A5:17:62:5C:23:C2:C8:BF:64:AD:DA:E7:D8:99:9F
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/iwhh8GSlF2JcI8LIv2St2ufYmZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.19.0/24
185.246.216.0/24
Signature Algorithm: sha256WithRSAEncryption
30:95:1f:92:93:1c:a8:94:f8:f7:88:95:b5:39:1e:ee:36:72:
fe:a9:3b:76:7a:9f:9d:0d:d4:de:d0:c0:6d:43:be:07:b8:22:
ee:f4:f8:e1:cb:61:59:41:1c:ce:e8:f5:4d:30:b1:cf:69:5c:
5b:89:54:8b:a8:8c:91:99:7c:0b:e8:ee:7b:2d:d5:7a:0a:27:
79:04:f1:f4:32:89:24:a5:84:dc:19:73:d3:10:33:84:56:92:
19:82:72:34:a0:b3:60:16:80:c0:72:65:f6:3e:f6:25:24:5d:
0e:1c:cf:ad:41:f6:37:77:d7:90:38:d8:e1:a3:20:c5:42:88:
b8:14:32:09:0d:31:83:e5:e2:e2:96:e9:5c:6b:06:d3:75:fd:
78:ac:45:0b:0d:3d:6b:74:ea:3c:f4:de:ce:36:49:e5:4e:18:
f8:ec:f5:f7:34:08:c7:81:d8:65:72:ab:9f:c0:69:83:51:9a:
7d:f6:95:a1:fd:9b:66:d0:17:c0:db:a2:08:25:00:43:22:e7:
df:e3:ef:42:77:14:16:8a:fd:b7:e7:d7:2f:c5:40:1f:d0:7e:
bd:35:c4:b2:65:94:6a:1a:9f:be:2b:37:f7:f5:1e:5c:9a:95:
f3:a3:10:c3:58:24:25:e2:7c:e3:1f:1b:92:35:fc:6b:38:ff:
a9:26:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:04:13 2025 by rpki-client