Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/Ha6B96NNdRYOdZinwD0K4FfFvZU.roa
File: Ha6B96NNdRYOdZinwD0K4FfFvZU.roa (raw, json)
Hash identifier: rPSvBQM3yuUs9wJEKKxibaAsnl3o3tzJWi7VDh3ziS0=
Subject key identifier: 1D:AE:81:F7:A3:4D:75:16:0E:75:98:A7:C0:3D:0A:E0:57:C5:BD:95
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 0199EC755E87A897B548796C81704C7CFD6F
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/Ha6B96NNdRYOdZinwD0K4FfFvZU.roa
Signing time: Thu 16 Oct 2025 09:58:58 +0000
ROA not before: Thu 16 Oct 2025 09:58:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204829
IP address blocks: 45.66.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:75:5e:87:a8:97:b5:48:79:6c:81:70:4c:7c:fd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Oct 16 09:58:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dae81f7a34d75160e7598a7c03d0ae057c5bd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:c2:2c:b8:99:ce:b5:b9:88:25:81:42:fc:
9b:e4:c1:a8:3d:6a:04:25:9d:04:a3:53:5b:21:cb:
85:70:51:0c:7e:c6:50:92:a5:3b:5d:73:c9:70:64:
04:94:1d:9a:77:ea:3d:60:f1:68:95:a9:d9:a2:80:
e6:55:e4:f8:90:f8:92:85:bc:da:72:9a:86:dc:c2:
a3:3c:5b:ca:4b:fb:86:d6:6f:83:0c:8e:c1:d1:77:
2a:cd:14:fe:85:11:72:63:c9:97:43:d6:8c:98:57:
0f:03:02:16:75:7d:a1:2a:f8:f1:c6:54:a2:c5:aa:
ca:a1:87:6c:c9:21:eb:a7:13:c5:ca:9d:7f:d4:04:
b9:b3:65:84:77:ee:1a:c9:5b:e6:6c:62:23:16:61:
42:5a:f6:66:6f:06:8d:6b:78:f7:5f:e6:20:4b:c2:
e8:9e:d8:2c:2c:01:74:6f:20:33:f9:69:90:d9:72:
37:d8:e6:bb:f2:db:f2:c3:a1:88:dd:8f:29:80:f9:
c6:4a:e9:1a:f8:24:b4:5f:87:a2:cb:89:d7:31:aa:
aa:67:33:82:1e:9f:5c:e4:c5:a6:d2:09:93:4e:df:
22:5f:81:09:d1:c2:cc:a7:9a:b2:12:3a:39:30:6c:
cc:6b:da:a7:04:ed:4f:54:ab:ac:15:58:d7:fe:9c:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:81:F7:A3:4D:75:16:0E:75:98:A7:C0:3D:0A:E0:57:C5:BD:95
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/Ha6B96NNdRYOdZinwD0K4FfFvZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0f:15:df:4a:25:4e:ba:6f:c5:14:db:e3:b9:ee:cd:1a:6d:
cc:8c:8d:9e:71:1a:16:04:42:fd:d4:66:43:ec:31:2a:56:82:
f0:b4:08:37:55:e8:0e:31:c8:e3:32:13:32:5c:2a:87:20:79:
5c:e5:f2:cb:74:48:01:27:fb:ff:77:76:8f:c1:80:89:ef:c5:
63:29:5e:cc:e1:71:6b:56:bb:0a:e8:13:d4:22:75:86:b8:e1:
a1:63:48:a5:9f:34:d7:a4:5e:26:fb:90:96:7d:7f:1e:ab:7b:
cd:6c:e2:c1:51:2c:73:ae:25:dc:79:f1:fd:07:94:21:da:ca:
19:ce:ba:8f:90:7b:16:db:23:6f:1e:b3:03:9d:ac:7b:65:7b:
47:1b:c3:31:22:c5:3f:61:f1:f2:c6:a1:e0:56:e5:71:a0:02:
2a:63:18:98:03:9b:c6:d5:17:85:14:b9:92:d6:57:0d:86:88:
37:ee:0f:09:3c:61:60:9e:c9:6a:0d:82:9d:51:fc:36:bf:1c:
e4:d3:1d:d3:59:29:a0:68:25:a8:3c:aa:4a:f7:31:4b:eb:47:
9d:a6:bb:ed:d6:14:fb:2a:64:9c:4f:d8:d1:a2:0d:bb:12:f0:
66:46:6f:dd:f9:08:f2:43:3e:15:ab:91:7c:76:1e:8c:ce:da:
34:ef:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:45 2025 by rpki-client