Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/1-hUsPlIzEtJhCC0pbHHDrhKCahk.roa
File: 1-hUsPlIzEtJhCC0pbHHDrhKCahk.roa (raw, json)
Hash identifier: nnKWEvog8nqly+4eih/kCBgt7z2zMVviplbUKLh27tw=
Subject key identifier: FA:15:2C:3E:52:33:12:D2:61:08:2D:29:6C:71:C3:AE:12:82:6A:19
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019A4ABBA6CA4DC2FBBED2545E262C6CA5F5
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/1-hUsPlIzEtJhCC0pbHHDrhKCahk.roa
Signing time: Mon 03 Nov 2025 17:20:03 +0000
ROA not before: Mon 03 Nov 2025 17:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214354
IP address blocks: 109.205.193.0/24 maxlen: 24
158.94.220.0/23 maxlen: 24
158.94.220.0/24 maxlen: 24
158.94.221.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 32
2a01:fb02:8000::/34 maxlen: 34
2a01:fb05:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:bb:a6:ca:4d:c2:fb:be:d2:54:5e:26:2c:6c:a5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Nov 3 17:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa152c3e523312d261082d296c71c3ae12826a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:97:e5:55:60:33:54:0b:7e:26:35:93:4d:
78:fa:61:4e:3b:68:15:92:89:73:78:0a:1d:ee:f7:
4b:dd:ff:43:38:d6:cc:68:9b:cc:95:d9:c7:bf:49:
dc:5d:9c:c7:67:36:5d:17:59:3f:47:37:b3:06:3d:
7e:3e:48:eb:59:85:14:0f:8c:27:de:f4:ae:3c:89:
85:9e:15:ad:1c:cc:0c:b9:3a:6b:11:42:f5:9f:31:
7d:19:40:5f:2d:fb:89:c2:80:72:48:7f:fa:3d:2f:
7e:ba:cf:bf:b5:88:8b:db:f8:29:e1:42:90:8e:cc:
a2:ea:21:ef:f2:c1:62:c4:7a:20:95:e6:91:46:6e:
0c:a4:ee:98:53:3b:8e:e5:44:92:fe:b6:78:45:07:
29:25:a3:dc:bd:8d:6f:13:a4:c9:a9:57:73:2f:fc:
f3:9d:a3:4e:50:53:a9:e0:06:a2:8a:3e:c8:7a:33:
d1:c5:a8:c2:6a:e8:58:d4:c5:98:43:7e:e7:0d:87:
43:e2:6c:12:fa:69:e7:e1:87:e8:53:75:80:62:f8:
e8:35:19:e9:f4:fc:15:33:76:cb:9e:b3:74:cd:6e:
31:27:cf:01:ed:79:d7:72:8f:4d:f7:4a:a3:ae:15:
10:46:d8:9a:13:ae:c2:e8:89:a4:91:e7:07:ad:e8:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:15:2C:3E:52:33:12:D2:61:08:2D:29:6C:71:C3:AE:12:82:6A:19
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/1-hUsPlIzEtJhCC0pbHHDrhKCahk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
158.94.220.0/23
IPv6:
2a01:fb01::/32
2a01:fb02:8000::/34
2a01:fb05:6000::/36
Signature Algorithm: sha256WithRSAEncryption
21:c2:00:ad:a8:b9:1b:c4:5e:72:c7:dc:eb:da:ac:27:8c:1f:
d3:7c:c5:67:cd:ec:57:35:f4:0f:cb:f5:05:9e:c2:a5:09:a6:
71:03:30:0d:2b:a2:36:58:0d:53:48:37:b4:a9:35:67:ff:9e:
61:aa:61:d6:51:a4:98:0c:5f:b8:73:ec:58:a8:44:41:43:fd:
e4:fe:eb:8a:36:85:98:0b:c5:e3:84:cf:13:83:8a:72:ac:68:
29:72:16:24:74:7a:68:00:62:89:6a:18:fd:97:49:0f:fb:83:
61:6b:f6:8c:93:1f:e0:9c:6b:75:b3:26:b0:6f:f2:60:f5:ec:
15:23:4c:80:a6:eb:73:3c:89:00:d3:11:0b:e2:14:d8:e2:b0:
62:54:f1:ab:5e:86:21:23:c6:2d:61:27:f0:37:13:4f:a1:75:
31:86:36:76:62:dc:0a:a4:53:37:be:e2:0e:28:b1:2a:be:2e:
3b:44:12:26:d6:68:31:01:cb:0a:1e:9a:b4:d3:64:27:d1:03:
c9:89:54:77:b0:4f:0d:92:80:16:32:5b:88:58:d6:3a:52:66:
60:63:86:4e:ca:8e:40:19:7e:59:d8:f1:86:ba:94:6d:1a:a1:
5b:77:b6:18:19:b6:af:a5:41:4a:b0:27:e9:c4:be:9f:9f:84:
a6:fa:f7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:09:20 2025 by rpki-client