Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/h6iO8UxKDT-IVtEyA0eFJpuAcwk.roa
File: h6iO8UxKDT-IVtEyA0eFJpuAcwk.roa (raw, json)
Hash identifier: QDji/HILU7o7EJCVoA31iw52NhQO2ISN+f+1SQIXk6M=
Subject key identifier: 87:A8:8E:F1:4C:4A:0D:3F:88:56:D1:32:03:47:85:26:9B:80:73:09
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 0199C323F6A702413CD3149A0E93806881AD
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/h6iO8UxKDT-IVtEyA0eFJpuAcwk.roa
Signing time: Wed 08 Oct 2025 09:25:38 +0000
ROA not before: Wed 08 Oct 2025 09:25:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1897
IP address blocks: 88.157.0.0/16 maxlen: 16
88.157.64.0/18 maxlen: 18
88.157.128.0/17 maxlen: 17
193.126.0.0/16 maxlen: 16
194.79.64.0/19 maxlen: 19
195.23.0.0/16 maxlen: 16
212.0.160.0/19 maxlen: 19
213.205.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:23:f6:a7:02:41:3c:d3:14:9a:0e:93:80:68:81:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Oct 8 09:25:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87a88ef14c4a0d3f8856d132034785269b807309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:60:69:7a:3d:56:6e:ac:53:8e:11:ea:c1:
b7:29:b9:66:3f:8e:f7:6b:41:a1:ee:6b:34:fa:f8:
98:91:32:07:e9:f2:37:cd:1d:99:33:88:8f:d9:d4:
b9:50:e2:ac:85:47:ae:f6:df:1a:7d:ea:85:18:89:
4e:b2:08:5f:d3:16:ad:6e:63:37:88:40:68:c8:f3:
fa:fc:f8:06:ae:1d:5e:24:f3:9c:38:c0:4b:65:d7:
86:06:fc:22:56:3a:00:6c:a5:e7:fa:0f:3a:18:d7:
51:58:38:cb:dd:a1:d3:3a:ef:47:ae:94:5f:78:0d:
0e:13:63:83:1f:05:b8:0d:9b:f6:7a:59:9c:05:0a:
78:fe:9e:81:65:3b:90:e3:52:27:b6:6f:99:c2:bf:
8e:66:1b:66:93:90:c8:1f:44:87:1e:ca:c9:b2:a9:
06:8e:35:10:68:90:7f:1c:66:52:55:8a:79:6a:8a:
1b:f9:bc:8a:8b:68:0b:f9:6d:1d:08:29:b7:2e:8b:
a5:04:d5:ef:02:3c:c8:6a:26:4d:12:88:27:c8:e4:
1c:0b:4f:55:71:36:17:77:b2:95:f4:8a:d1:2c:ff:
d8:b9:07:53:e6:4c:4a:1c:36:9a:5e:9a:2b:9e:ac:
12:ca:d7:e9:c6:6f:1c:94:63:6c:fd:94:5d:ba:a9:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A8:8E:F1:4C:4A:0D:3F:88:56:D1:32:03:47:85:26:9B:80:73:09
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/h6iO8UxKDT-IVtEyA0eFJpuAcwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.157.0.0/16
193.126.0.0/16
194.79.64.0/19
195.23.0.0/16
212.0.160.0/19
213.205.64.0/19
Signature Algorithm: sha256WithRSAEncryption
29:c7:55:bf:5e:fc:a8:a0:cd:fd:c1:7b:a4:37:e7:ef:c1:97:
fb:e6:ea:2b:d4:39:03:51:ca:50:d0:8e:14:23:f5:fb:88:7b:
fa:34:cb:16:14:5b:71:e5:70:c6:74:c1:87:44:61:63:c6:f8:
64:e9:0a:4d:11:98:49:2c:b6:a8:a8:d6:75:78:86:f8:95:21:
01:83:35:ce:c0:80:74:9a:3d:00:3e:8c:02:5b:d4:67:8a:41:
8f:09:35:0e:83:2d:b2:09:af:fd:12:da:a7:81:3c:e4:b3:87:
42:98:15:ab:96:6e:ad:2b:eb:28:71:f9:aa:28:18:0c:af:fc:
46:0e:fd:95:24:4d:54:af:25:28:af:f0:59:a2:a4:e3:56:b7:
8e:96:de:00:5e:a4:ae:28:0f:38:da:10:1b:6c:e1:29:e1:9c:
9b:2d:b4:65:57:bc:39:17:6a:91:c4:6f:de:8d:59:63:d8:7f:
c1:3f:ef:d1:52:d4:eb:46:09:66:ce:2c:2b:7b:71:b5:c4:06:
02:d8:46:fb:fa:f8:39:87:65:4a:57:61:27:b6:f8:04:4c:7e:
af:e1:fd:fd:37:32:c9:28:61:41:ec:64:0b:f1:81:ec:89:08:
ce:6e:b4:da:b5:0b:b5:31:a7:10:74:98:10:93:ec:98:b4:ac:
63:47:22:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:12 2025 by rpki-client