Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/HUuEhM0s6vtmAYifFr2lzsJ1MQg.roa
File: HUuEhM0s6vtmAYifFr2lzsJ1MQg.roa (raw, json)
Hash identifier: zjG1+pb3vedtJUzUhZUa3U7vpl6rJzZYBSltaRWkYmA=
Subject key identifier: 1D:4B:84:84:CD:2C:EA:FB:66:01:88:9F:16:BD:A5:CE:C2:75:31:08
Certificate issuer: /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial: 019999D3405642A5ADA06876A33B0A167313
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/HUuEhM0s6vtmAYifFr2lzsJ1MQg.roa
Signing time: Tue 30 Sep 2025 08:53:02 +0000
ROA not before: Tue 30 Sep 2025 08:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205031
IP address blocks: 2001:67c:490::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:d3:40:56:42:a5:ad:a0:68:76:a3:3b:0a:16:73:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Validity
Not Before: Sep 30 08:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d4b8484cd2ceafb6601889f16bda5cec2753108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:38:1b:82:53:1f:48:55:47:f0:c3:0e:b3:
3d:fa:d1:ad:a7:15:8c:81:3e:06:a3:61:a8:eb:37:
bf:ec:cf:39:6f:b2:fa:7a:8f:96:5e:8b:03:e5:a0:
cc:4c:dd:2e:f9:2b:cf:1c:d1:d8:18:f0:60:6a:75:
cc:01:f1:fa:04:fa:1b:7f:20:9b:d0:bc:26:ae:21:
47:b2:67:f5:8c:20:e9:84:4d:46:ce:10:56:ef:2b:
a5:bc:cc:1e:1b:30:65:30:fa:06:13:93:ac:24:85:
d1:51:f6:89:15:dc:df:51:81:4d:3a:de:11:3f:74:
63:68:27:9b:2d:12:bd:41:1d:4e:ef:9b:a6:81:02:
0f:4c:32:c9:ba:61:f3:70:0f:d6:8a:a6:0e:21:49:
52:40:4e:54:84:41:78:4d:ca:6f:2b:5b:58:31:f8:
86:36:b7:4b:3b:35:4e:e7:4c:90:ee:8d:55:eb:64:
d4:c7:de:ab:ff:24:04:9e:76:3a:62:55:a1:28:1e:
98:32:be:7f:88:e7:08:cd:03:ad:10:9e:31:87:72:
7b:00:96:40:dc:98:ce:c3:f0:e5:95:a7:88:a1:d0:
55:47:40:65:be:16:4d:37:5c:b0:66:c2:0e:f7:9e:
3e:c3:b1:1f:9c:86:c8:2b:29:25:4a:9b:2b:11:c4:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4B:84:84:CD:2C:EA:FB:66:01:88:9F:16:BD:A5:CE:C2:75:31:08
X509v3 Authority Key Identifier:
keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/HUuEhM0s6vtmAYifFr2lzsJ1MQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:490::/48
Signature Algorithm: sha256WithRSAEncryption
50:e4:3f:0f:77:01:cd:7e:a9:11:83:84:c2:7f:e8:52:ae:56:
5c:78:a2:d5:f6:f9:46:88:6d:4b:5f:d0:bb:f4:2c:d4:5c:2c:
43:60:f3:56:82:03:66:f9:6f:fa:62:80:d9:90:85:b2:c7:f5:
69:8f:c9:64:89:69:02:db:fe:6a:64:4d:08:57:1f:ef:b0:ae:
8a:0b:b5:2c:b0:38:ba:20:57:01:61:63:a1:9c:2b:8a:b7:75:
0c:b3:f2:ef:9a:92:ba:0b:f9:b2:e2:d2:a6:a9:38:90:27:55:
b2:a3:fe:02:63:83:2f:f9:92:2e:dd:7c:18:73:63:4f:9f:bd:
a2:20:aa:68:d6:6e:a9:71:ef:45:40:95:cd:ae:27:3b:c1:14:
0f:1b:24:2d:f5:b1:8e:7c:fc:0d:c3:10:94:3a:44:b8:8d:11:
2a:bc:a7:30:fc:fb:d4:23:aa:69:72:f5:05:18:03:67:b4:25:
ce:a3:02:f7:3b:ff:1f:41:79:70:95:b2:92:2c:ab:e3:bb:89:
0c:53:26:63:2c:2e:8f:6a:19:66:4a:4a:db:89:43:73:87:8a:
3f:26:51:79:00:56:26:4f:a6:d8:19:92:a5:72:4b:ad:01:2d:
35:6b:0c:47:06:89:54:22:93:fa:e7:bc:b2:1e:5e:5d:fe:58:
2b:c1:4d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:14 2025 by rpki-client