Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/HS0o75LHBm7unTvkxSvYhKKCqOg.roa
File: HS0o75LHBm7unTvkxSvYhKKCqOg.roa (raw, json)
Hash identifier: LFboYZcKhi2PcYZ1VtUF+QlXoMKEVErQ5pYjshCCFZM=
Subject key identifier: 1D:2D:28:EF:92:C7:06:6E:EE:9D:3B:E4:C5:2B:D8:84:A2:82:A8:E8
Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36
Certificate serial: 0199697C8B75A678C37EC46C8EC8D6D7D0C4
Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/HS0o75LHBm7unTvkxSvYhKKCqOg.roa
Signing time: Sat 20 Sep 2025 23:36:33 +0000
ROA not before: Sat 20 Sep 2025 23:36:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216078
IP address blocks: 2a14:9e00:800::/40 maxlen: 40
2a14:9e00:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:69:7c:8b:75:a6:78:c3:7e:c4:6c:8e:c8:d6:d7:d0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36
Validity
Not Before: Sep 20 23:36:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d2d28ef92c7066eee9d3be4c52bd884a282a8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:c4:f0:0a:00:bc:fd:f8:04:29:fa:f5:bc:
5c:55:9a:1c:1c:93:6e:ef:e0:4c:66:48:e4:44:34:
5f:d1:7c:0b:80:70:36:4f:a1:69:10:bc:d4:f6:3b:
74:e0:e1:f5:db:99:fe:19:20:b8:58:98:31:d9:43:
b3:a4:f4:61:9f:e0:69:50:d7:d0:8b:e4:7f:68:b6:
cc:e4:5d:04:2b:3c:ab:ab:6a:19:ef:02:76:69:4b:
bf:1a:22:71:35:0e:94:54:26:59:82:8d:f4:e5:5a:
2e:08:b3:d4:83:86:19:fa:00:3e:89:d1:a7:cf:f8:
b3:3d:81:b7:66:fa:07:47:81:19:77:28:22:30:c9:
48:60:81:78:81:63:67:cf:76:14:a0:85:c1:44:bf:
e8:91:79:60:78:d3:7d:5e:fc:20:00:b6:18:8b:d5:
ee:53:83:45:5c:e8:58:25:52:57:bf:1b:c3:92:97:
9c:ba:e0:b1:67:0a:42:15:05:7e:a6:f8:ea:4b:29:
24:c4:cc:8c:d4:47:04:34:41:41:c2:a2:b6:d9:c4:
a6:d6:59:88:1f:70:f6:65:c0:94:30:9c:11:6c:b1:
80:f8:2b:06:92:84:9c:e8:c5:c1:dd:c1:4e:2a:33:
5a:f7:d7:14:21:04:80:25:18:5d:f5:92:dd:4f:28:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2D:28:EF:92:C7:06:6E:EE:9D:3B:E4:C5:2B:D8:84:A2:82:A8:E8
X509v3 Authority Key Identifier:
keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/HS0o75LHBm7unTvkxSvYhKKCqOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9e00:800::/39
Signature Algorithm: sha256WithRSAEncryption
5d:2b:a1:12:5e:04:b3:2a:99:16:9d:ee:9c:c6:1a:e8:3a:04:
f5:b9:17:60:a7:38:49:54:81:d5:45:20:c8:8e:68:82:27:52:
f1:c0:4e:74:5b:b3:f6:0b:fe:b9:e0:80:de:9a:5a:4f:4e:03:
2e:c2:c0:f8:c8:0f:31:41:d5:89:25:f6:39:78:66:0e:12:62:
21:0c:7a:c7:5b:97:f4:01:b8:a7:15:d1:7d:6b:b7:57:37:8c:
fe:04:a0:34:d0:8b:c8:ec:ef:d5:4d:6a:0b:c3:ff:cb:a0:66:
4a:5d:77:16:24:83:b0:ba:84:b3:92:1f:cd:06:1e:81:7f:47:
78:42:18:b2:d6:a3:ec:ba:f4:43:1d:6d:6e:3d:3a:82:9f:06:
1f:b5:79:10:6b:75:cc:23:9d:e4:cd:ba:32:53:a7:73:c4:81:
1d:0c:6d:12:17:5a:38:29:fd:d5:60:66:4e:e4:48:e0:7f:e8:
1b:0e:f5:ee:63:d9:c7:93:8c:2c:d1:bd:bf:a1:d9:96:d0:e6:
6f:ec:74:19:37:aa:43:62:dc:78:79:b3:d7:65:37:46:ba:fd:
c5:df:d8:bc:30:ae:6e:3d:78:ea:15:98:16:56:6b:62:f3:86:
92:bd:ad:1c:5c:37:4e:cc:4b:01:1d:92:ba:6a:b5:1a:5d:44:
f1:e1:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:07 2025 by rpki-client