Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/H01ntKK0r8APxCOVN-CK85R5ZWE.roa
File: H01ntKK0r8APxCOVN-CK85R5ZWE.roa (raw, json)
Hash identifier: oVsMYFAHfuRHFJ8dBLy1BmqZhlpZjkZZOD+7Y4uxLr4=
Subject key identifier: 1F:4D:67:B4:A2:B4:AF:C0:0F:C4:23:95:37:E0:8A:F3:94:79:65:61
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 0199D8E8C78BC11090752AA88DDC0FC6FE44
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/H01ntKK0r8APxCOVN-CK85R5ZWE.roa
Signing time: Sun 12 Oct 2025 14:52:38 +0000
ROA not before: Sun 12 Oct 2025 14:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215185
IP address blocks: 45.140.181.0/24 maxlen: 24
2a0e:c5c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d8:e8:c7:8b:c1:10:90:75:2a:a8:8d:dc:0f:c6:fe:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Oct 12 14:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f4d67b4a2b4afc00fc4239537e08af394796561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:4d:58:79:e6:43:61:dc:0c:ed:6a:2f:be:
cc:43:04:05:b4:bb:08:ec:ef:af:fe:f8:a4:e1:21:
80:70:9c:df:54:16:22:63:d9:44:cd:77:4a:19:9a:
ba:43:fb:94:16:6f:48:7e:71:e5:32:d3:79:75:2d:
8e:16:ad:7d:b2:b6:d4:d0:a7:b9:8e:c0:3b:d0:b7:
ab:29:3f:db:fc:93:71:2d:4f:07:fa:55:55:14:e9:
27:85:89:5d:c1:97:e2:59:f1:24:7f:e8:52:f1:d4:
27:99:f6:04:72:1d:fd:ae:70:e7:22:17:31:cd:04:
ad:5c:99:05:bf:a4:4c:f1:0e:3f:81:04:d9:63:9b:
8d:6c:b9:9c:de:5c:a5:c7:d1:5b:68:fb:17:a9:da:
87:1d:22:2e:e4:cb:e1:8f:14:83:a9:da:49:98:74:
a7:83:b2:a1:d9:b1:82:3c:af:b1:da:0f:cf:1a:09:
9f:75:07:21:b9:07:d7:82:69:7b:fc:05:3a:97:37:
12:df:c1:e3:fe:25:aa:b8:3a:14:77:8b:c2:5c:0d:
3b:80:ab:70:03:0b:af:2d:18:8a:e8:72:21:db:a8:
20:92:ed:7d:f5:6b:34:02:64:01:bd:97:92:0b:49:
60:44:71:f4:4a:d7:e6:24:f5:4e:94:08:b0:c7:bd:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:67:B4:A2:B4:AF:C0:0F:C4:23:95:37:E0:8A:F3:94:79:65:61
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/H01ntKK0r8APxCOVN-CK85R5ZWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.181.0/24
IPv6:
2a0e:c5c1::/48
Signature Algorithm: sha256WithRSAEncryption
04:65:e7:63:e4:99:06:d7:92:28:89:89:18:f4:87:6f:39:68:
e2:66:19:92:23:63:76:1a:c1:fa:e8:16:20:aa:45:5b:8a:f7:
c0:33:b1:e9:45:5e:41:0f:bb:11:1b:1a:c6:fe:03:63:c3:b6:
06:ed:75:d9:e2:76:3f:7c:f5:9b:08:cf:6f:49:38:a4:b1:95:
fb:6f:01:75:be:19:56:34:3c:f3:d5:ed:70:90:fb:e4:71:e7:
65:87:cd:34:ec:b3:af:f3:88:bb:0e:82:be:69:5f:48:b7:13:
c3:75:09:de:1f:d3:f2:ac:e0:23:bb:cf:40:10:dd:66:04:3a:
ef:de:03:4f:8d:45:12:7b:a7:b9:31:e6:be:c8:c9:d3:bb:0f:
d1:15:2c:19:49:d3:d7:db:e2:3f:37:7e:bf:4b:ca:14:bd:5a:
e1:5e:27:ed:d1:80:4c:e4:c2:64:7f:a1:38:c3:f4:62:54:46:
b1:8b:f4:00:91:4b:1a:a5:ed:85:1f:94:ae:63:42:17:44:4c:
cd:2c:46:42:a0:d1:3c:be:76:59:01:d8:ab:a6:e9:6a:fb:56:
f1:be:a3:2c:35:a2:06:78:25:4e:55:5e:44:da:06:c2:81:d8:
53:be:82:ce:cc:1c:14:90:37:6e:b3:fe:ad:7d:1f:1d:5b:cd:
d0:b1:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:02 2025 by rpki-client