Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/HmOKjoBfxJUN4kE_Bu7qPJi_h8I.roa
File: HmOKjoBfxJUN4kE_Bu7qPJi_h8I.roa (raw, json)
Hash identifier: xMeIAmhdmNH0ipQF5KySIP0BUnv65V1SHcF5McY8hrI=
Subject key identifier: 1E:63:8A:8E:80:5F:C4:95:0D:E2:41:3F:06:EE:EA:3C:98:BF:87:C2
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 019A2C0D572CC46478023A78620D4783BB9F
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/HmOKjoBfxJUN4kE_Bu7qPJi_h8I.roa
Signing time: Tue 28 Oct 2025 18:21:03 +0000
ROA not before: Tue 28 Oct 2025 18:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213191
IP address blocks: 31.40.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:0d:57:2c:c4:64:78:02:3a:78:62:0d:47:83:bb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Oct 28 18:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e638a8e805fc4950de2413f06eeea3c98bf87c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:c8:34:3e:03:c4:e1:44:5b:7e:52:dc:cb:
8b:e5:c8:1b:54:99:42:38:61:51:65:25:fc:6b:e3:
26:5e:9f:45:39:b3:d8:9f:92:b7:b4:53:20:a6:50:
06:89:06:ad:da:79:8d:0f:d9:06:3b:5c:2d:9a:f9:
ea:16:19:38:9a:a1:a3:50:ef:87:3e:ec:0b:e8:fa:
79:ec:a0:ae:72:1b:50:2b:fe:92:87:4c:bd:a8:a5:
f8:d7:3b:9b:23:2b:7c:ff:82:9d:26:ca:6f:b6:57:
97:c7:d6:19:25:36:27:2d:c0:dd:0b:74:35:ef:45:
63:4f:77:c8:54:4b:54:9b:bb:db:6e:29:2d:e3:52:
d1:ef:30:62:ec:0e:72:1f:93:58:d2:0a:2e:ed:48:
3b:41:0c:fd:0e:05:66:89:67:cf:81:84:ae:16:42:
ca:d3:de:1e:be:1b:68:12:61:2d:d2:ee:01:50:3c:
3f:d4:b9:93:84:04:60:5a:3f:46:9a:32:3f:d1:b0:
47:0e:95:28:7c:60:be:2a:ef:be:a4:9a:83:23:57:
58:bc:07:e6:81:5f:de:60:da:ec:dd:a8:e4:21:f2:
1c:3c:82:f7:dd:92:64:45:29:20:89:43:be:57:20:
3d:20:11:90:af:8d:33:cf:17:93:3f:03:9a:5f:2a:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:63:8A:8E:80:5F:C4:95:0D:E2:41:3F:06:EE:EA:3C:98:BF:87:C2
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/HmOKjoBfxJUN4kE_Bu7qPJi_h8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.156.0/24
Signature Algorithm: sha256WithRSAEncryption
65:82:c4:ea:1e:78:85:8a:4d:7a:b5:7c:89:ee:ab:7d:f9:89:
ab:11:d0:b3:82:2b:72:44:61:58:05:bf:d0:e7:f7:9f:63:69:
20:2e:47:f6:2f:6f:8b:21:54:fb:97:01:47:2c:09:5b:84:e7:
3a:66:e4:60:3c:26:95:36:ea:46:f0:d5:99:6d:a8:c6:c0:8c:
b5:17:0e:b6:38:5a:64:e9:a5:ea:f1:41:4e:c8:a4:63:ee:3a:
e8:1d:aa:72:ac:14:42:0f:e4:f9:20:6b:aa:bf:dd:4b:9e:80:
a2:4b:e1:05:d7:b1:9a:6e:60:a2:72:30:e4:a1:1a:12:0e:7c:
9d:ea:95:fb:06:55:aa:fa:86:81:36:08:6e:64:3a:63:ad:47:
68:2f:9c:fb:1f:49:2a:1a:75:b2:57:34:0e:c2:cf:95:f4:67:
7c:ae:66:12:b3:41:ee:a7:73:fc:4a:2a:50:9a:2a:89:53:a2:
67:80:e0:f8:de:32:a1:0e:ea:a8:51:9b:e6:82:e0:e2:52:ac:
30:5d:ad:31:a0:7b:5c:c2:a9:82:16:57:9c:1c:2a:9e:89:56:
4a:21:b2:31:b2:69:ef:2c:c3:2f:fb:f8:ec:fb:0e:95:b9:47:
97:ea:e6:93:c6:24:81:77:2c:49:7a:92:69:ec:72:fa:bc:bb:
38:02:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:01:54 2025 by rpki-client