Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/hnPMD0kJyESSkpzLaNH091YhR5k.roa
File: hnPMD0kJyESSkpzLaNH091YhR5k.roa (raw, json)
Hash identifier: reehn+NC4fwGIk+sTumI22RgUJ8t2cZVaMoj+4y8WfY=
Subject key identifier: 86:73:CC:0F:49:09:C8:44:92:92:9C:CB:68:D1:F4:F7:56:21:47:99
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01987E5977119247C688D47504071C8B88DE
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/hnPMD0kJyESSkpzLaNH091YhR5k.roa
Signing time: Wed 06 Aug 2025 07:47:28 +0000
ROA not before: Wed 06 Aug 2025 07:47:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206259
IP address blocks: 94.154.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:59:77:11:92:47:c6:88:d4:75:04:07:1c:8b:88:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Aug 6 07:47:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8673cc0f4909c84492929ccb68d1f4f756214799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:74:73:c3:ab:d0:79:65:9e:00:03:57:15:
09:89:1f:1d:75:3b:e7:7f:de:10:05:17:db:35:b1:
77:30:11:80:23:4b:50:10:af:64:60:c3:c4:d9:db:
ba:e2:87:6f:df:86:f7:6d:ec:68:23:92:32:fc:6c:
b7:68:d0:f1:a4:33:92:89:fe:7e:5a:59:86:5e:10:
5e:72:de:33:e9:c9:03:8f:4d:5f:65:20:50:08:29:
db:3c:d7:da:e6:e9:9e:1e:95:55:b6:4a:4e:12:c3:
e7:bf:84:e7:37:ac:4d:7f:24:da:62:2d:3d:ef:d6:
76:3e:3d:1b:a5:ff:b7:e5:06:04:7a:7d:45:b6:eb:
5e:80:80:e7:e8:6e:14:56:0b:45:14:c0:ac:37:13:
56:5d:b0:dd:11:8f:5b:84:b8:2e:89:82:7f:1b:7d:
4c:c1:d3:1f:88:97:d2:c2:97:d9:4b:3a:03:7c:91:
6e:8c:14:2f:b7:a2:09:e0:dd:0c:11:c1:c2:83:75:
b5:ab:91:2c:0d:2c:91:e4:df:9c:9f:79:ed:8c:6f:
26:13:9d:0d:5f:1c:1e:a2:1e:29:6f:50:38:d4:07:
f3:f1:28:fb:79:3b:4c:0e:59:b7:5d:00:46:ed:3e:
c8:12:47:f4:ee:c1:a5:fe:a5:b7:51:00:26:d3:c8:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:73:CC:0F:49:09:C8:44:92:92:9C:CB:68:D1:F4:F7:56:21:47:99
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/hnPMD0kJyESSkpzLaNH091YhR5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4d:ba:e4:cc:46:18:41:cc:1b:c2:e3:41:ed:d6:73:ff:da:
25:d6:2d:d2:9f:a0:86:72:6c:65:c4:a9:25:d8:cb:a2:8e:1f:
b6:9a:d6:4c:c1:66:1c:22:ba:89:39:76:f9:60:68:b6:fc:54:
2a:8e:ae:d7:27:cd:a3:bf:f5:cf:b7:01:86:34:d8:a5:32:60:
3a:36:ff:64:cc:9a:61:e7:af:02:30:a6:db:f7:a5:87:32:81:
f7:08:80:29:9c:a7:d5:d4:ca:0a:b6:a4:d0:45:1c:0a:f5:6c:
b4:74:e0:69:fa:60:6c:eb:32:da:c7:95:ca:b7:63:f4:73:78:
32:dc:78:2c:c6:f0:a2:bd:db:b6:36:38:25:0e:23:ac:23:9d:
20:f7:87:bd:1f:83:55:fb:86:92:9a:f9:4f:40:05:39:89:4a:
1d:03:98:ba:1c:73:19:7d:ed:1d:52:da:8c:30:06:f5:de:cc:
01:cc:4d:87:cd:d1:aa:a4:7f:d3:fc:c1:cc:12:a2:0d:33:8c:
12:4e:ed:38:22:1b:e7:60:32:57:33:31:b5:68:80:c1:7d:c6:
80:73:4b:51:7f:c0:3e:bd:b4:0a:c8:78:b2:a7:f5:cf:a5:c6:
c2:0c:3c:13:ab:0e:eb:cc:14:d4:71:97:6e:9c:b9:e1:48:f3:
ae:46:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:36 2025 by rpki-client