Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H60oi_OsfpwifbJU7RHAfKQv2wA.roa
File: H60oi_OsfpwifbJU7RHAfKQv2wA.roa (raw, json)
Hash identifier: imbzlTgwNExDZIhZX26ZS7mg4HEouvzfr+tjkwCLKFU=
Subject key identifier: 1F:AD:28:8B:F3:AC:7E:9C:22:7D:B2:54:ED:11:C0:7C:A4:2F:DB:00
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019999F34C495C320570535917C1E7A5F2A7
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H60oi_OsfpwifbJU7RHAfKQv2wA.roa
Signing time: Tue 30 Sep 2025 09:28:02 +0000
ROA not before: Tue 30 Sep 2025 09:28:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401776
IP address blocks: 194.231.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:f3:4c:49:5c:32:05:70:53:59:17:c1:e7:a5:f2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 30 09:28:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fad288bf3ac7e9c227db254ed11c07ca42fdb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:e3:8c:2c:33:51:1c:d3:e5:61:74:a9:d4:
de:b2:ae:f9:aa:07:51:fc:02:c0:0e:3c:9d:84:ca:
4e:46:9a:81:9c:d6:82:d2:b6:d0:d4:bd:98:71:7a:
a1:14:d3:4d:19:2d:72:66:eb:d5:35:23:7e:14:28:
0f:9b:29:d3:2e:0b:fd:46:64:3f:d0:44:24:b1:8c:
bf:e9:6a:b4:51:78:ad:5e:ea:41:2f:da:3f:61:26:
62:eb:3e:21:26:69:bf:79:56:71:3d:9a:9a:a1:02:
9e:58:d6:22:f3:85:79:1e:87:fc:2f:2e:f4:7e:16:
d5:99:02:53:3c:4e:80:af:89:aa:78:ca:f4:87:21:
47:98:c1:7a:8a:8b:96:70:00:31:56:d0:1e:92:26:
df:df:58:e3:56:e4:d9:10:c8:6a:d8:fe:63:8e:ef:
ca:e2:bc:a0:c8:0e:17:9f:c0:ad:23:ef:0b:66:3a:
fd:3d:20:90:91:15:a7:96:b3:b0:8d:15:8b:ef:76:
19:22:ae:4b:71:ba:7a:ea:d7:85:7d:18:46:05:00:
75:c8:74:96:04:76:51:45:8c:7c:5c:d0:11:eb:98:
64:ba:77:f5:33:39:79:8a:55:02:c3:42:48:d8:d6:
fc:41:63:d7:2b:c2:92:e6:9d:1d:4f:43:32:d1:c0:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AD:28:8B:F3:AC:7E:9C:22:7D:B2:54:ED:11:C0:7C:A4:2F:DB:00
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H60oi_OsfpwifbJU7RHAfKQv2wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:26:a7:5d:8a:d9:b1:b3:c6:c9:a3:22:3e:96:17:35:79:be:
67:13:d2:76:be:63:7a:82:a9:20:4a:cd:33:87:87:a9:5e:90:
94:0c:f3:7c:f1:0c:70:41:da:a9:2a:ef:ba:19:c7:06:58:40:
02:09:7d:3c:e8:99:47:0d:ba:3f:ca:50:b1:e4:9a:7d:8a:06:
56:52:d1:75:f1:16:95:45:03:ad:ac:ec:21:48:d1:f5:12:b6:
48:c4:32:bf:b2:f2:b1:a9:66:33:14:0f:66:69:e4:7d:80:fb:
0c:5d:d6:5a:0e:b8:1d:bf:f9:f8:87:fe:4c:06:8e:4c:78:92:
5a:27:a8:7b:ef:35:99:3a:b2:a2:98:02:1c:c4:4d:f7:11:42:
79:c2:13:2d:71:95:74:17:15:c8:f0:ec:e3:51:88:d0:ea:08:
73:76:dc:28:cd:38:01:41:44:be:71:8c:a4:81:f0:8c:42:78:
f1:fe:9d:42:3e:12:fc:83:96:75:29:eb:4f:b0:2a:08:64:39:
89:28:40:4b:f5:b1:02:7a:98:ee:9d:36:d0:63:32:bf:0b:81:
a4:64:77:59:bc:98:36:ad:20:a1:05:50:fd:63:8a:b8:76:75:
ee:e6:82:ef:88:85:2e:9b:69:76:a3:77:a2:a3:02:3c:5e:e1:
d7:66:a0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:07 2025 by rpki-client