Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/h4LBRXlaL-oC3DBkosImeYIzlhM.roa
File: h4LBRXlaL-oC3DBkosImeYIzlhM.roa (raw, json)
Hash identifier: fcJ0091j9gyLpmNM62v9sM4sdOjqt1S8YmfKAgde0r4=
Subject key identifier: 87:82:C1:45:79:5A:2F:EA:02:DC:30:64:A2:C2:26:79:82:33:96:13
Certificate issuer: /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Certificate serial: 019A3E7B0DB53DD14B8414D533D054D33717
Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/h4LBRXlaL-oC3DBkosImeYIzlhM.roa
Signing time: Sat 01 Nov 2025 08:14:02 +0000
ROA not before: Sat 01 Nov 2025 08:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48758
IP address blocks: 193.32.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:7b:0d:b5:3d:d1:4b:84:14:d5:33:d0:54:d3:37:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Validity
Not Before: Nov 1 08:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8782c145795a2fea02dc3064a2c2267982339613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:c2:82:85:5b:70:7b:28:72:8e:ee:a9:f7:
f2:9f:0d:b3:af:ff:61:8c:9c:cb:5e:d6:56:15:a3:
37:97:27:64:df:04:bd:00:94:2c:5c:09:c1:b7:c8:
e7:ea:5b:4f:46:94:ba:2b:2c:48:74:ff:cd:fc:86:
e9:42:f1:94:bd:1a:3a:39:db:35:41:d9:39:30:ea:
4f:3d:44:0c:14:f3:7c:37:2c:5e:b7:02:21:f0:ec:
c7:5f:1f:7e:9b:2b:82:e7:0f:61:4d:c1:7a:e9:4e:
36:f1:eb:4e:bf:84:28:53:45:53:43:06:a9:5d:70:
96:16:f5:4d:07:82:63:d6:e2:dc:10:a4:6e:f3:32:
e8:a5:a3:c4:dd:79:bc:fd:88:42:8c:47:20:7e:d7:
7c:35:5c:15:53:86:4f:14:10:24:fb:f9:f7:7b:46:
d2:4e:5c:4a:44:7d:dd:a4:4a:66:36:49:94:5f:ff:
f6:53:95:b3:60:05:ec:54:5e:8d:bc:66:91:ea:17:
7b:bd:ee:eb:d5:9a:2b:e0:83:3f:91:d2:92:94:e1:
61:b7:82:9e:c3:84:22:b1:b1:63:b6:9c:52:3f:f0:
0f:c7:a5:aa:59:14:62:bf:30:86:3a:93:00:c0:95:
28:31:8a:ad:b1:96:d8:96:5d:93:60:8d:14:8b:98:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:82:C1:45:79:5A:2F:EA:02:DC:30:64:A2:C2:26:79:82:33:96:13
X509v3 Authority Key Identifier:
keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/h4LBRXlaL-oC3DBkosImeYIzlhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.54.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:4a:ff:67:45:27:9e:f2:16:14:f5:2f:36:5a:92:51:87:e9:
72:08:cf:d3:a5:ce:c2:35:0f:7e:e8:bc:f5:a1:6f:70:01:42:
0a:da:34:f4:7e:72:ac:26:c1:e5:87:cf:97:b4:f3:09:f9:af:
09:74:8c:5e:ce:f7:97:8c:f5:61:d1:f8:95:a6:22:a5:6f:db:
28:eb:34:0e:2d:f0:11:52:56:f3:1d:1e:04:08:1a:2f:88:30:
cf:17:dc:0c:fb:0c:18:50:c5:4a:1d:7b:ec:8b:24:d5:7c:4a:
63:7d:88:d3:be:8c:7f:f2:0b:4b:bb:10:90:5d:3b:40:36:d8:
74:75:55:ba:d7:6c:9a:04:f7:f7:83:51:de:1d:29:75:c1:5f:
7c:23:7d:0b:bb:f5:2e:85:e6:c6:4f:9c:68:22:d2:bb:2a:ee:
05:4e:5c:6b:21:6c:b6:52:8d:2b:34:38:01:b2:86:ae:f4:df:
2c:92:50:9a:9b:35:e2:a7:68:b5:78:7b:5a:6a:0b:05:d3:10:
c1:85:43:68:cb:97:9c:0d:2e:72:73:63:ff:4f:93:f2:84:c5:
e4:0e:1f:5a:85:82:2a:31:e2:73:29:07:5a:89:68:ee:f3:a3:
05:cb:91:81:31:46:f3:84:58:88:c7:52:ca:bb:bb:57:e9:b2:
e8:a3:27:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZo+ew21PdFLhBTVM9BU0zcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWMxNmY1YmUzN2ZmNmM1ZDQyMDVmMmFiYTI1ZmNlMzU4
OTAzMzUwHhcNMjUxMTAxMDgxNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzgyYzE0NTc5NWEyZmVhMDJkYzMwNjRhMmMyMjY3OTgyMzM5NjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRrCgoVbcHsoco7uqffynw2zr/9h
jJzLXtZWFaM3lydk3wS9AJQsXAnBt8jn6ltPRpS6KyxIdP/N/IbpQvGUvRo6Ods1
Qdk5MOpPPUQMFPN8NyxetwIh8OzHXx9+myuC5w9hTcF66U428etOv4QoU0VTQwap
XXCWFvVNB4Jj1uLcEKRu8zLopaPE3Xm8/YhCjEcgftd8NVwVU4ZPFBAk+/n3e0bS
TlxKRH3dpEpmNkmUX//2U5WzYAXsVF6NvGaR6hd7ve7r1Zor4IM/kdKSlOFht4Ke
w4QisbFjtpxSP/APx6WqWRRivzCGOpMAwJUoMYqtsZbYll2TYI0Ui5gX8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIeCwUV5Wi/qAtwwZKLCJnmCM5YTMB8GA1UdIwQY
MBaAFLwcFvW+N/9sXUIF8quiX841iQM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYt
YWJkNmYyYjM0MTBiLzEvaDRMQlJYbGFMLW9DM0RCa29zSW1lWUl6bGhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYtYWJkNmYyYjM0MTBi
LzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSA2MA0G
CSqGSIb3DQEBCwUAA4IBAQDHSv9nRSee8hYU9S82WpJRh+lyCM/Tpc7CNQ9+6Lz1
oW9wAUIK2jT0fnKsJsHlh8+XtPMJ+a8JdIxezveXjPVh0fiVpiKlb9so6zQOLfAR
UlbzHR4ECBoviDDPF9wM+wwYUMVKHXvsiyTVfEpjfYjTvox/8gtLuxCQXTtANth0
dVW612yaBPf3g1HeHSl1wV98I30Lu/UuhebGT5xoItK7Ku4FTlxrIWy2Uo0rNDgB
soau9N8sklCamzXip2i1eHtaagsF0xDBhUNoy5ecDS5yc2P/T5PyhMXkDh9ahYIq
MeJzKQdaiWju86MFy5GBMUbzhFiIx1LKu7tX6bLooyce
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:22 2025 by rpki-client