Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/H06BbJyNlAXeT08Nn4bdJB41xCo.roa
File: H06BbJyNlAXeT08Nn4bdJB41xCo.roa (raw, json)
Hash identifier: Wq9Dn1EkBtDctGuDuDoxtK4x2zafJvfVPsDyoqHd97U=
Subject key identifier: 1F:4E:81:6C:9C:8D:94:05:DE:4F:4F:0D:9F:86:DD:24:1E:35:C4:2A
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0199CDA79E15314E53BEBD02C4BFF47E16C1
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/H06BbJyNlAXeT08Nn4bdJB41xCo.roa
Signing time: Fri 10 Oct 2025 10:25:38 +0000
ROA not before: Fri 10 Oct 2025 10:25:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 84.232.39.0/24 maxlen: 24
84.236.132.0/24 maxlen: 24
85.204.142.0/24 maxlen: 24
86.105.159.0/24 maxlen: 24
88.148.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:a7:9e:15:31:4e:53:be:bd:02:c4:bf:f4:7e:16:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Oct 10 10:25:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f4e816c9c8d9405de4f4f0d9f86dd241e35c42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:58:f8:39:02:f2:dd:1b:e7:49:03:92:8d:
7e:33:eb:59:6d:a4:31:ce:37:eb:92:83:50:5c:f4:
41:99:79:7a:9a:a9:a7:cd:9b:fe:f3:54:f2:b0:b8:
c0:e3:c6:af:9c:ed:65:de:9b:27:3c:cd:02:2d:56:
d5:4f:fb:16:3f:37:f4:17:fb:04:93:b8:bf:64:18:
79:c0:56:ad:39:60:84:17:50:bb:09:c1:ab:c2:36:
ca:ae:45:ce:14:38:6b:f8:8c:04:35:fd:16:c6:5e:
6e:c2:9d:86:28:0f:a4:c6:74:ed:0c:65:59:9d:01:
de:7b:c8:05:77:d8:9c:8a:bc:94:b4:a0:f5:d7:af:
af:2b:0a:45:aa:84:80:32:ee:70:3d:69:d6:1c:1d:
2a:7a:1d:c4:79:05:b1:c5:26:c3:50:0f:7a:d1:c3:
67:b5:5b:6d:1d:ae:c5:7c:b2:da:e9:cf:be:f1:82:
e2:65:fd:fd:71:9e:d7:20:17:a4:f9:5f:c7:63:10:
80:98:98:8b:57:2b:b9:0f:90:bc:10:fd:de:9f:9c:
28:4b:8b:db:5b:cb:8d:8f:9f:65:93:64:fb:51:e5:
2a:b3:83:15:00:0b:9a:a6:9b:19:0d:6d:8e:00:43:
dc:12:4f:bb:f8:20:d9:94:f9:f7:a4:b5:c2:50:64:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4E:81:6C:9C:8D:94:05:DE:4F:4F:0D:9F:86:DD:24:1E:35:C4:2A
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/H06BbJyNlAXeT08Nn4bdJB41xCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.39.0/24
84.236.132.0/24
85.204.142.0/24
86.105.159.0/24
88.148.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3e:0f:98:f3:4a:50:9b:ad:75:4f:cc:57:1c:6d:d0:ef:ba:
c6:32:e6:4d:1f:7e:5d:fd:9f:ca:6b:44:63:8b:d8:f3:9f:b3:
4d:20:9e:7d:74:2a:61:17:3d:25:45:29:95:93:83:27:7d:1e:
3c:55:96:0b:87:5c:3a:57:bc:97:e2:cd:13:d4:61:1b:bc:61:
3b:80:2e:e0:08:31:1c:92:ff:42:87:6b:23:26:25:b4:0b:9b:
ef:d1:d8:29:16:2a:66:f5:f4:f6:25:c5:c5:d9:8c:98:36:60:
2b:de:75:e8:75:e0:77:ee:09:1d:48:3f:a7:80:e7:02:6e:0c:
2c:53:61:9a:91:46:03:6e:5b:fd:40:3b:16:44:51:f4:59:aa:
ef:1b:5b:51:af:68:f3:32:eb:c1:c8:70:de:cc:2d:5f:ba:ab:
e7:63:b1:bb:63:b5:b5:ef:0a:19:c0:93:db:9a:da:47:85:e1:
ec:5f:88:13:08:ca:4f:3d:09:e6:dd:64:78:f9:99:66:5e:11:
40:36:ed:14:fe:5a:53:fd:86:ba:79:3d:b3:e6:1e:65:af:f5:
3d:8c:b9:1b:28:0a:16:5a:13:d3:c1:11:63:ae:f6:c5:e7:bb:
d1:c6:a7:16:83:de:e9:72:50:b8:bc:1c:0b:36:76:5c:d8:73:
de:c8:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:52:55 2025 by rpki-client