Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/lE0Hn99x0fhwc2jXac5uga-vHXs.roa
File: lE0Hn99x0fhwc2jXac5uga-vHXs.roa (raw, json)
Hash identifier: iA0oHrpgL6CqGZiYUNOViB4cOKniJ8+iyJSulMgnLyM=
Subject key identifier: 94:4D:07:9F:DF:71:D1:F8:70:73:68:D7:69:CE:6E:81:AF:AF:1D:7B
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 019889EC0B3BAD692631B8E3BB14542A017A
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/lE0Hn99x0fhwc2jXac5uga-vHXs.roa
Signing time: Fri 08 Aug 2025 13:43:24 +0000
ROA not before: Fri 08 Aug 2025 13:43:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6837
IP address blocks: 193.5.178.0/24 maxlen: 24
2001:67c:1818::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:ec:0b:3b:ad:69:26:31:b8:e3:bb:14:54:2a:01:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Aug 8 13:43:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=944d079fdf71d1f8707368d769ce6e81afaf1d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:f3:ec:e9:ae:dd:53:28:e6:97:11:0a:4a:
de:89:b6:9c:9f:d5:f6:85:34:4d:ef:88:ed:ff:88:
47:30:b7:af:29:12:8b:1a:40:ec:0c:ea:a6:18:86:
4b:dc:6d:9c:72:33:a8:d1:3a:d7:96:89:88:4d:f2:
a9:9b:a2:d5:76:99:ca:5c:b8:8c:72:29:20:3d:1e:
1d:11:6a:a3:b1:f0:5f:29:d5:34:09:3b:b1:29:a8:
20:79:9f:a7:97:55:88:35:60:2e:d0:d8:64:f3:c3:
55:2f:bb:9e:8d:91:da:1d:81:b4:35:7c:54:2b:c0:
5e:e9:77:4e:0f:9b:06:1f:4e:29:8f:45:20:d5:d8:
87:05:4d:a3:cc:75:10:c6:09:f8:3c:45:8f:dd:e8:
ad:85:6c:ff:65:e1:8b:00:c9:e1:79:99:00:d1:da:
ac:45:04:af:c8:6f:79:ee:e4:fe:60:ae:d9:d4:d2:
c5:52:38:18:be:cd:84:38:dc:f7:17:b1:b6:7d:46:
e9:b4:3a:81:f1:36:c9:b8:a1:dd:01:df:ca:2a:60:
7b:30:d7:93:53:d2:06:ce:ad:a4:75:ce:bd:e4:a8:
8e:0a:ed:32:15:0b:88:c0:4a:50:0f:74:ec:d3:c7:
3c:64:5e:01:d8:56:bd:b2:ab:da:a9:1e:26:26:d9:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4D:07:9F:DF:71:D1:F8:70:73:68:D7:69:CE:6E:81:AF:AF:1D:7B
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/lE0Hn99x0fhwc2jXac5uga-vHXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.178.0/24
IPv6:
2001:67c:1818::/48
Signature Algorithm: sha256WithRSAEncryption
7d:4d:e7:0a:f0:63:ab:a1:07:44:da:17:a9:20:cc:af:db:eb:
be:5a:43:14:5a:af:13:9a:fe:ec:95:2e:30:67:e5:d3:5a:44:
77:c6:4b:7d:3f:cd:7f:20:0c:c1:5d:f6:9f:b2:64:bd:67:ec:
29:00:a0:38:ce:27:01:d0:2f:2c:83:ed:fb:f4:86:07:ee:f2:
dd:5b:c4:c2:72:52:15:8c:8f:c7:60:ae:8b:1f:c8:f7:ed:5b:
63:ed:d4:e9:59:ac:17:c2:30:8f:8a:b8:fb:db:e2:07:49:41:
ab:04:e3:7f:34:34:59:3e:3e:22:43:51:4a:c7:7d:63:03:cd:
5a:2f:04:d2:18:99:4c:d9:56:b0:d9:c1:e3:bd:8c:1e:db:20:
9c:17:13:ea:d1:c2:ed:09:ca:71:63:86:84:6c:c1:1e:e1:da:
b8:a0:77:07:12:55:ff:da:ca:ef:f3:8f:67:29:66:59:9e:1c:
80:82:b5:83:a1:6e:ba:ef:2c:ef:d6:9a:0f:af:7a:b2:49:24:
0f:06:be:19:31:d0:17:bc:58:ed:f7:f7:24:30:71:77:66:d8:
b3:f7:52:01:c4:8c:d4:9e:cc:67:8b:76:7c:ad:fc:59:28:09:
2f:1f:57:cf:fc:ac:17:76:d3:88:e4:f0:c0:29:0c:c8:63:0b:
92:c1:f3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:04 2025 by rpki-client