Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hEmKFvwMiMg-vWp7IZsn96EkzVE.roa
File: hEmKFvwMiMg-vWp7IZsn96EkzVE.roa (raw, json)
Hash identifier: GAhHlga0Tlrm/iKtCjxjYEdjEuFHe2FzepGHDimItms=
Subject key identifier: 84:49:8A:16:FC:0C:88:C8:3E:BD:6A:7B:21:9B:27:F7:A1:24:CD:51
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199BECF43583BC0F996E97DC580BF9B753E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hEmKFvwMiMg-vWp7IZsn96EkzVE.roa
Signing time: Tue 07 Oct 2025 13:14:38 +0000
ROA not before: Tue 07 Oct 2025 13:14:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205964
IP address blocks: 135.196.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:be:cf:43:58:3b:c0:f9:96:e9:7d:c5:80:bf:9b:75:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 7 13:14:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84498a16fc0c88c83ebd6a7b219b27f7a124cd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:48:15:36:35:79:a1:7a:3a:ec:0e:f2:bb:
24:87:9c:36:d2:7f:98:47:88:71:b7:d4:1c:28:4e:
39:cc:fc:65:1e:b6:0e:fe:4f:49:65:11:b2:cd:4b:
2b:79:eb:5b:dd:68:a2:b1:3b:69:90:63:58:26:9e:
1d:fb:5a:3f:c7:51:67:df:51:1f:2c:08:6b:47:58:
5b:a6:fa:46:07:e7:ab:77:00:1f:ba:4f:b3:3c:98:
15:fb:db:9e:01:73:0b:4c:13:51:02:e3:d9:06:54:
e9:40:df:8f:d3:1e:b3:9d:9c:4f:de:5d:3d:7a:55:
8b:27:aa:d7:1a:17:12:b5:2b:45:16:d9:54:09:85:
04:e2:56:0e:93:e7:0c:f0:8c:1b:6f:a5:1a:84:1c:
35:59:1f:eb:cc:ec:c7:14:e5:c0:dc:31:7c:85:9e:
97:be:85:ba:04:97:77:12:b8:d7:d1:d6:dd:3e:7d:
78:74:2b:ed:18:0b:9d:53:90:0e:77:8d:a6:0f:3b:
1b:b6:c9:7c:d9:89:d3:31:97:c1:e5:4b:c2:5c:4e:
71:9c:0f:7c:b9:18:b5:d6:df:2a:f7:6e:4e:db:95:
7a:6f:46:5b:66:84:86:13:83:93:2f:7d:e4:6e:59:
b7:73:13:26:c5:64:bb:87:c6:bd:5b:d3:f9:d6:91:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:49:8A:16:FC:0C:88:C8:3E:BD:6A:7B:21:9B:27:F7:A1:24:CD:51
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hEmKFvwMiMg-vWp7IZsn96EkzVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.196.48.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:84:a5:ed:66:4f:2a:5b:79:91:c9:87:95:e9:9d:7c:2e:ab:
bd:c2:d0:07:6f:74:4d:b9:0f:53:61:0e:1f:a6:6d:39:3c:c9:
0e:b4:41:38:7e:ff:2e:f3:ef:3a:eb:4e:a8:e5:83:dc:b4:f6:
36:11:43:66:45:5e:99:70:56:39:59:0d:f2:df:85:f2:bc:ad:
5e:5c:99:cf:ac:62:d4:88:8e:0c:18:ff:62:01:c6:4d:09:d1:
58:00:01:e6:8c:0d:3b:45:b5:d7:a7:36:54:5d:5d:0f:27:57:
d8:74:b8:bf:19:d5:ff:30:a5:f7:95:ac:d7:46:93:29:a7:b3:
66:50:42:93:6c:ad:9d:98:4e:cd:67:3a:22:4b:6d:b7:5b:30:
75:4d:c2:89:7a:3e:89:63:7d:a7:a1:3e:ab:e8:3f:30:cf:a9:
b8:3a:15:03:46:55:ed:db:0a:84:f6:ce:9d:08:47:87:f2:57:
f8:e7:46:0e:9a:0d:cb:99:b7:e6:81:d6:b8:6e:1d:8f:63:06:
79:f3:3b:f4:f9:03:7f:69:c2:52:dd:5e:0c:b2:c7:e0:d7:a7:
5e:54:05:65:1a:34:10:df:f8:de:1a:b3:dc:78:cf:25:6d:b5:
0c:d8:b7:b9:3e:68:ab:b0:26:54:d5:12:45:8f:b9:0a:3c:5f:
c0:ac:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:04 2025 by rpki-client