Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/hmf92WiBFjmzN343WPL4dSXIFak.roa
File: hmf92WiBFjmzN343WPL4dSXIFak.roa (raw, json)
Hash identifier: tFUSfY/dpte4ljkINbzL+FeZDYPzvtaSG9KZ1d5SzXE=
Subject key identifier: 86:67:FD:D9:68:81:16:39:B3:37:7E:37:58:F2:F8:75:25:C8:15:A9
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019710FB02F355364AE209D395E930AA2E76
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/hmf92WiBFjmzN343WPL4dSXIFak.roa
Signing time: Tue 27 May 2025 09:02:55 +0000
ROA not before: Tue 27 May 2025 09:02:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29226
IP address blocks: 2a09:3b04::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:fb:02:f3:55:36:4a:e2:09:d3:95:e9:30:aa:2e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: May 27 09:02:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8667fdd968811639b3377e3758f2f87525c815a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:6d:5f:2e:d5:26:73:4a:00:5d:f5:75:1f:
14:40:ed:bf:2f:54:19:9d:d5:b2:aa:7f:6c:4d:58:
63:4c:f7:5c:e1:42:1a:f1:ed:1b:fe:a1:df:a7:2a:
f7:74:c2:4c:8d:aa:4b:fb:f3:e0:5b:39:b4:d5:e9:
ab:e8:64:5b:bf:6a:28:b6:83:ef:21:ea:69:3e:14:
71:32:15:76:36:58:cd:20:7a:70:53:8f:3e:da:f4:
40:51:9e:be:69:02:10:ce:00:7d:d3:78:35:f3:de:
5e:ca:0a:97:7d:5a:1c:af:c9:ff:dc:ba:7c:a2:42:
9a:71:d9:73:48:e8:fc:7f:88:4f:15:95:9c:53:e3:
e1:75:51:0e:16:a5:d6:5f:13:ff:b8:f3:74:a5:54:
9d:de:09:0e:0d:9f:18:be:ae:fb:59:bd:3b:50:ae:
85:4a:f6:ba:19:47:90:7a:a9:f1:95:eb:4f:f4:0c:
5c:79:e5:7e:1c:4d:30:22:44:37:ed:88:af:df:f7:
37:b8:ba:35:e2:67:14:3a:3f:b6:c0:d0:51:67:0c:
a5:c5:55:bc:11:63:2e:75:f8:25:1c:d1:b4:94:21:
d1:51:15:13:58:28:00:0a:4b:04:97:eb:cc:e6:a0:
ec:6c:04:51:99:d0:9e:9b:4e:af:15:75:43:27:54:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:67:FD:D9:68:81:16:39:B3:37:7E:37:58:F2:F8:75:25:C8:15:A9
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/hmf92WiBFjmzN343WPL4dSXIFak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3b04::/32
Signature Algorithm: sha256WithRSAEncryption
b1:00:66:f8:5f:6b:85:26:85:74:4d:0e:b5:2b:eb:6f:e3:79:
23:aa:2b:da:72:3f:24:80:3c:84:af:45:44:32:d0:47:ec:4b:
f8:b5:41:1d:25:b3:8b:c8:31:71:ca:63:11:9c:c0:d8:dd:a4:
52:8f:44:e4:e9:de:32:dc:47:b6:9f:dd:4b:77:e5:ba:72:de:
d6:30:9f:0e:ec:f7:a3:a2:43:7b:aa:5c:6e:19:dc:5b:c7:3a:
9a:c5:42:08:e3:2b:57:59:c5:cb:46:a1:a0:e5:38:c5:6f:fa:
64:62:ba:2a:a7:0a:08:94:1d:56:8d:c6:8a:a3:ea:90:a4:26:
50:05:7d:87:d6:c4:e5:10:dd:e3:28:20:2a:6b:49:4f:5b:90:
cc:08:f4:8b:75:8b:9d:6c:12:b9:0e:2e:0d:ab:c0:0a:3e:61:
07:51:27:e9:12:34:f3:cc:3f:42:0a:ee:3e:78:b3:62:f5:9d:
b8:f7:63:25:df:ff:fa:bf:66:66:72:98:a7:00:3c:71:bf:f4:
71:61:84:db:80:0f:4e:c6:4d:4a:83:87:1f:d2:aa:71:22:27:
c0:8b:24:2a:44:22:50:4d:41:b5:4b:56:8f:53:85:f7:29:bc:
7d:a8:6e:6b:d8:2c:7d:77:6b:ea:22:de:1c:12:0d:2e:e0:ae:
5d:b3:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:17:32 2025 by rpki-client