Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/HUiOUvyplsrzIsUh4UgSd2IMV84.roa
File: HUiOUvyplsrzIsUh4UgSd2IMV84.roa (raw, json)
Hash identifier: fUIzYBdLEb/Dk4ve84hQXEi69xJeZ1X9uOezqIELufY=
Subject key identifier: 1D:48:8E:52:FC:A9:96:CA:F3:22:C5:21:E1:48:12:77:62:0C:57:CE
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0198CCA112E1152FC4B84686E8AD415F56AE
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/HUiOUvyplsrzIsUh4UgSd2IMV84.roa
Signing time: Thu 21 Aug 2025 12:36:04 +0000
ROA not before: Thu 21 Aug 2025 12:36:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215645
IP address blocks: 185.243.181.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
193.35.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:a1:12:e1:15:2f:c4:b8:46:86:e8:ad:41:5f:56:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 21 12:36:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d488e52fca996caf322c521e1481277620c57ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:ee:82:a3:43:94:bb:3e:62:93:1f:ae:dc:
93:04:fe:40:b1:c0:48:f2:54:af:06:41:87:a9:66:
b4:3e:db:e0:89:fd:e3:31:9e:c2:f6:29:52:ae:c9:
64:db:82:33:9e:44:3e:45:28:73:30:83:41:50:81:
6d:bd:6d:36:61:2c:ff:8f:ab:30:47:2c:43:73:f4:
3d:a1:4d:d7:47:19:fe:91:6f:1b:1b:5d:48:ae:5b:
be:b2:07:b8:11:da:42:5c:d9:07:51:27:7a:3e:78:
b4:0d:07:aa:6f:28:d4:61:b9:2e:a0:48:db:eb:61:
13:03:5d:2e:a6:da:64:ee:e1:ea:a8:3f:d1:d0:fe:
89:1d:c5:74:8a:38:d8:75:02:aa:17:88:0b:51:2e:
1c:88:75:4f:5c:1a:dd:38:e8:7c:d9:72:00:56:ed:
db:70:40:12:91:f2:85:71:76:cb:03:8a:5e:79:68:
74:8e:e6:92:6f:70:d7:f1:d9:10:5d:ee:86:5e:cd:
9d:27:cc:b3:da:83:b8:31:97:26:9b:9f:84:4a:c3:
ca:cb:85:06:96:b6:b3:b8:62:65:8a:97:88:4d:e8:
9f:fa:66:b5:24:33:0d:9a:80:a9:4c:bf:35:47:dc:
17:bb:b7:93:9f:73:2e:b6:a4:2d:8f:fe:e3:2a:ec:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:8E:52:FC:A9:96:CA:F3:22:C5:21:E1:48:12:77:62:0C:57:CE
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/HUiOUvyplsrzIsUh4UgSd2IMV84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.181.0/24
185.254.28.0/24
193.35.153.0/24
Signature Algorithm: sha256WithRSAEncryption
91:62:bd:40:ba:8d:17:bc:d6:1f:8f:95:3b:b8:9e:6f:b9:07:
c4:b4:1a:bd:7d:6d:68:d0:b6:41:91:bc:80:37:f2:24:8d:43:
c1:35:aa:ec:81:02:48:c6:f5:7c:d6:73:6a:e0:68:d4:ef:f4:
65:5b:ba:3d:4e:d7:cd:2f:7c:5f:9a:c4:2a:85:0e:00:e7:1b:
a3:27:ee:e6:3b:c8:ed:e3:6b:d1:d4:27:cc:15:60:c5:90:d0:
5d:60:43:d9:07:9e:e3:c1:7b:bf:ba:bb:94:87:79:23:fc:5d:
5c:5f:0b:2c:33:d7:78:b8:30:28:32:5d:40:11:c7:78:9e:f8:
01:55:82:6d:23:da:35:5d:b0:7a:03:9b:77:51:72:cc:b9:4a:
2d:35:35:4c:4e:12:c7:22:95:37:f1:06:3a:3e:90:e6:66:32:
e5:aa:fd:38:ed:35:0f:74:2a:b7:33:2a:f4:49:b9:99:4c:d9:
59:24:00:ba:0d:8c:2f:7e:4d:7c:c9:7d:fe:00:46:78:8c:b0:
f1:80:8b:c3:06:4e:ff:38:82:a2:07:19:53:ee:0c:69:dd:87:
7c:e5:72:b9:99:d6:b1:85:a4:f8:ce:47:76:d6:17:db:49:53:
89:91:20:bf:77:61:ac:61:57:9f:1f:bf:5c:00:77:3e:17:13:
61:4c:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:35:56 2025 by rpki-client