Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/hQB2r9gTIbHW15huYRlUIXpesE0.roa
File: hQB2r9gTIbHW15huYRlUIXpesE0.roa (raw, json)
Hash identifier: csnzwT6/c2mdObYLNEDgkBjX2FKvNM2ZYq0WnVUdcOk=
Subject key identifier: 85:00:76:AF:D8:13:21:B1:D6:D7:98:6E:61:19:54:21:7A:5E:B0:4D
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 0199DFFAC8441F26162A473BE8AB7D2E7370
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/hQB2r9gTIbHW15huYRlUIXpesE0.roa
Signing time: Mon 13 Oct 2025 23:49:38 +0000
ROA not before: Mon 13 Oct 2025 23:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33651
IP address blocks: 9.142.32.0/19 maxlen: 19
9.142.96.0/19 maxlen: 19
9.142.192.0/19 maxlen: 19
138.226.48.0/21 maxlen: 21
138.226.64.0/20 maxlen: 20
138.226.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:df:fa:c8:44:1f:26:16:2a:47:3b:e8:ab:7d:2e:73:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Oct 13 23:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=850076afd81321b1d6d7986e611954217a5eb04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:b1:66:98:cc:c6:2d:0c:d7:43:ae:aa:88:
4d:25:8d:4f:4b:4d:13:da:bd:fe:fe:ac:e1:05:61:
4f:22:aa:38:36:9e:f6:54:fd:8b:67:28:eb:9b:d6:
f6:b6:ae:f9:a3:c3:7b:f6:5c:bf:46:bd:97:dd:8b:
44:8e:5d:59:43:9a:44:c9:f4:0d:8c:9e:95:a7:02:
5f:f1:0d:83:20:fd:b3:fb:df:a3:33:e3:85:cc:20:
4a:fa:6f:4e:e0:39:88:fd:a7:ed:b2:0d:ad:08:90:
aa:9c:0d:7c:b2:2e:5b:de:d1:18:b8:46:da:6d:c2:
ad:12:1a:a6:66:ea:23:b1:0e:b2:6a:01:11:c7:88:
a7:15:a6:4d:61:af:9a:5b:63:7f:b5:0d:be:7f:40:
0a:7f:cb:b0:1b:7b:a8:bc:b6:60:60:f3:2c:40:3d:
c6:ea:c2:2b:8d:88:b4:b4:01:eb:0f:db:dd:46:31:
17:4a:84:8f:2b:57:dd:35:24:91:e5:bf:f6:6d:1b:
58:1f:af:94:05:83:17:ce:ad:23:ca:2b:f0:82:17:
cf:f2:e6:89:3e:dc:cd:a0:f4:ed:70:a6:e9:c4:88:
30:f3:93:c8:46:ed:6a:ce:9a:3f:07:57:6e:58:53:
3e:db:b0:54:c8:6d:3e:62:34:a3:df:b5:94:4f:b6:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:76:AF:D8:13:21:B1:D6:D7:98:6E:61:19:54:21:7A:5E:B0:4D
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/hQB2r9gTIbHW15huYRlUIXpesE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.32.0/19
9.142.96.0/19
9.142.192.0/19
138.226.48.0/21
138.226.64.0/20
138.226.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:5b:ca:b4:3c:a6:14:e1:9e:24:25:da:c3:1d:5b:ea:69:ea:
ad:4e:4e:f0:40:d8:50:6b:ab:42:5d:65:fe:58:6e:ef:4a:42:
d8:dc:4a:2e:f0:91:c4:ab:c1:66:d5:61:b6:0c:50:51:b2:87:
6f:15:fa:f3:f6:2f:fd:c7:8e:5a:cc:15:4b:59:2c:a9:21:da:
f8:b0:b9:00:e0:c6:98:4b:b6:41:0a:72:4a:38:64:c8:e5:3f:
1b:1f:46:11:67:b8:db:f2:55:ba:1a:35:90:75:d4:d9:f9:e4:
ff:37:c5:e1:56:57:1b:80:2e:d1:43:22:6d:34:1f:d3:65:8e:
c3:be:45:56:e5:bf:b9:09:83:87:2f:6b:13:f0:fd:75:6d:f1:
18:43:fc:29:ab:7a:55:ba:43:bb:e2:7d:7a:10:ff:14:e9:cb:
c7:a6:cc:d0:78:5e:de:cf:d2:a4:c1:01:82:64:80:7a:86:58:
eb:3b:c8:03:41:5b:97:56:2c:dc:1a:0b:df:0c:8c:00:bc:bd:
1d:80:82:09:42:31:d4:e2:3d:66:72:c7:6e:04:90:af:02:53:
84:cf:cc:58:08:8c:8d:ef:3e:88:43:a9:60:20:88:e4:79:a2:
78:3f:82:57:4a:89:1e:ee:0b:ea:f7:b0:7f:f5:69:6a:ab:49:
e2:74:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:31 2025 by rpki-client