Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/H9X8h-Jo2ED93QCRffXvwdj9Wvo.roa
File: H9X8h-Jo2ED93QCRffXvwdj9Wvo.roa (raw, json)
Hash identifier: 12jQO6dfQb4ZiHwe3922CE3yIwiEA5iTvy+mpgxA/Kk=
Subject key identifier: 1F:D5:FC:87:E2:68:D8:40:FD:DD:00:91:7D:F5:EF:C1:D8:FD:5A:FA
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 01988B0087A0BA325853CDF40B8F9FF2C5EE
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/H9X8h-Jo2ED93QCRffXvwdj9Wvo.roa
Signing time: Fri 08 Aug 2025 18:45:24 +0000
ROA not before: Fri 08 Aug 2025 18:45:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29574
IP address blocks: 194.146.140.0/22 maxlen: 22
194.146.140.0/24 maxlen: 24
194.146.141.0/24 maxlen: 24
194.146.142.0/24 maxlen: 24
194.146.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:00:87:a0:ba:32:58:53:cd:f4:0b:8f:9f:f2:c5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Aug 8 18:45:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd5fc87e268d840fddd00917df5efc1d8fd5afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:1c:3e:37:dc:11:b2:bb:b4:7d:c0:a0:b1:
b9:6d:70:51:70:23:32:5f:8a:f6:da:50:e9:f8:50:
8d:de:52:fc:05:f7:5b:47:cd:2c:1f:01:d3:d8:48:
8d:ab:b7:8b:32:35:b0:c6:50:49:29:e7:79:ae:ff:
db:a7:54:6a:53:58:f3:17:5f:b1:ff:59:18:ed:e3:
20:d9:5f:98:6a:04:38:26:71:6e:e9:76:4b:6f:f3:
cc:a7:ea:3c:6b:f2:9e:28:5e:bc:48:20:56:ee:5a:
55:e4:08:2e:35:ab:67:aa:57:49:f9:6a:5a:c6:8f:
eb:b7:7c:40:ad:a0:48:c9:ac:dc:cf:ee:cf:d0:f2:
54:0c:23:2b:c3:46:79:cf:2f:35:3a:7a:ab:13:10:
df:16:1f:f7:86:a4:9d:10:2a:f2:32:16:4c:99:52:
3b:84:fa:a7:49:28:c6:f4:b9:b9:7c:3f:e1:f0:9c:
f8:fd:04:f4:2d:2d:cf:84:7e:5d:0e:28:78:72:85:
cb:eb:95:b4:73:f7:bc:ec:a7:75:55:62:87:21:1a:
a0:72:27:29:cc:23:61:e1:f8:cf:e7:75:be:fb:15:
08:2d:d4:96:e2:07:30:6d:5f:3e:a4:13:fc:11:f1:
38:bf:14:64:64:66:48:e2:a1:5f:25:f3:1b:ac:be:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D5:FC:87:E2:68:D8:40:FD:DD:00:91:7D:F5:EF:C1:D8:FD:5A:FA
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/H9X8h-Jo2ED93QCRffXvwdj9Wvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.140.0/22
Signature Algorithm: sha256WithRSAEncryption
57:ab:63:b3:6d:19:2c:c5:9f:7d:5b:20:f7:35:09:38:16:71:
d6:08:bf:1c:ec:24:59:ae:d9:53:f7:89:e2:55:16:fb:67:bc:
80:19:bd:ad:8c:db:bd:6a:99:cd:40:dc:a4:bb:30:8f:06:37:
1b:72:b3:60:87:d5:d3:5c:5e:03:70:3e:e7:0a:2a:d7:82:36:
c7:b1:d9:10:9f:26:80:e9:af:5c:ff:3a:ad:d9:0a:74:03:ae:
a5:95:9d:c4:d8:d7:43:ba:ae:53:60:8e:12:6e:4d:58:70:c2:
9b:b1:84:9e:86:f9:d1:55:08:24:67:b2:b1:46:87:0f:0a:4b:
98:db:af:9a:8e:70:e1:c0:60:43:76:1e:bb:5b:a9:25:9f:e9:
3a:5d:e9:16:4d:c1:7a:e9:e4:81:28:bd:43:a7:be:57:ed:21:
40:9e:bf:0f:5d:a9:eb:ce:28:08:38:de:b3:f8:e9:21:25:da:
11:a3:ba:d1:b0:66:63:15:10:a1:d5:29:29:77:4f:47:35:fd:
2d:bb:ee:6c:6b:7e:13:07:5d:f4:02:e0:55:e6:6c:17:09:31:
23:7e:3e:03:22:8c:eb:e7:ea:aa:bf:24:05:dc:fb:7a:a4:66:
78:b8:e4:e5:4c:7d:d4:97:2d:ce:0d:1d:20:79:26:41:74:5c:
79:37:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:31:09 2025 by rpki-client