Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HIV5U5KoOXuiUpdG5uXTngzgADQ.roa
File: HIV5U5KoOXuiUpdG5uXTngzgADQ.roa (raw, json)
Hash identifier: F3Gru4KSMtX6ecFEjf2nl+5Bijp0sttqlbZFSCiseA0=
Subject key identifier: 1C:85:79:53:92:A8:39:7B:A2:52:97:46:E6:E5:D3:9E:0C:E0:00:34
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A49168294A0494005A56EF7C21A99C0E6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HIV5U5KoOXuiUpdG5uXTngzgADQ.roa
Signing time: Mon 03 Nov 2025 09:40:03 +0000
ROA not before: Mon 03 Nov 2025 09:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205770
IP address blocks: 2a06:1187::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:16:82:94:a0:49:40:05:a5:6e:f7:c2:1a:99:c0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 3 09:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c85795392a8397ba2529746e6e5d39e0ce00034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:c5:5d:bb:bd:07:26:d0:4e:b7:37:0a:f6:
63:32:d6:a8:ea:7a:8a:b1:3f:4e:05:f2:b5:e6:dd:
c1:67:ef:de:e1:76:cf:a5:41:04:f7:72:eb:22:f8:
e3:9f:53:bd:0c:09:b9:1f:6a:63:e7:e8:2d:8a:51:
a4:8a:96:5d:2d:d6:65:a1:4d:04:af:8b:01:0d:bc:
27:1f:db:8e:e4:bc:c3:61:11:f8:3d:55:e2:dc:fd:
40:3e:46:7e:63:41:3b:80:66:d6:7d:53:c8:f0:ae:
cf:d6:22:24:d6:45:00:26:72:bf:d7:90:fc:c9:30:
01:f9:e6:0c:4e:d8:6a:00:08:fe:5d:86:47:de:6e:
a3:b3:7e:36:4a:3e:41:6d:5d:63:2a:a7:4a:29:d7:
1d:19:b3:73:b2:94:25:2c:76:32:d6:7e:d9:21:db:
c1:f6:cc:5d:a4:97:a5:f8:b3:f7:b0:d0:25:1e:38:
ac:c0:58:d5:97:ee:1c:1a:83:42:75:41:00:a7:a7:
4e:36:7a:52:a9:34:a9:09:87:75:82:43:89:93:9b:
42:f9:7b:3c:9c:56:1e:36:20:fe:7e:8e:06:57:4a:
50:8f:db:e5:5c:ab:82:68:cd:9e:46:04:4f:a5:20:
a4:33:1e:03:d3:bf:93:80:6f:26:c9:26:53:ed:30:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:85:79:53:92:A8:39:7B:A2:52:97:46:E6:E5:D3:9E:0C:E0:00:34
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HIV5U5KoOXuiUpdG5uXTngzgADQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1187::/32
Signature Algorithm: sha256WithRSAEncryption
a4:26:09:0f:f9:ff:18:4f:5b:80:38:94:76:3e:ed:d4:b9:13:
d7:35:06:91:2b:30:17:4e:45:49:30:8b:c1:1b:a9:e2:ce:79:
c1:1c:10:64:4b:85:49:4d:99:ab:b9:f2:51:07:12:75:4c:02:
35:1e:70:31:cf:64:34:17:0a:ee:db:9a:7b:27:97:af:1e:12:
9a:4f:82:66:5c:07:da:60:c6:eb:b3:4b:20:ef:b9:39:07:11:
0e:44:58:da:86:5a:58:2e:be:61:ba:a0:00:56:66:26:a5:a4:
24:ea:d8:8d:e1:0d:26:b7:dd:ca:ae:04:62:d8:76:c0:37:9d:
27:f0:2a:af:10:e9:6c:72:87:0f:f0:1a:32:ac:34:75:ac:0e:
4a:af:4e:b7:08:85:51:fa:13:32:cb:db:6d:21:fd:d1:1a:e3:
c2:20:c9:59:e3:40:a2:5b:e7:9a:6a:bf:31:7c:b1:d7:c0:f9:
6b:9b:92:2d:ab:33:e7:b4:9f:2e:2e:8e:30:24:93:69:30:6f:
e1:4b:89:c4:78:a8:fc:c0:a5:39:69:62:f8:bf:53:7a:1a:46:
13:bf:96:45:0a:4f:aa:f3:39:eb:a9:a5:c6:24:55:2d:61:33:
6f:5d:94:ad:2b:ac:ed:28:9d:d5:36:10:40:83:c3:70:6e:31:
66:5d:3b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:07 2025 by rpki-client