Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/HOv1nncZc-pz3AlCtaOxZY_9ySg.roa
File: HOv1nncZc-pz3AlCtaOxZY_9ySg.roa (raw, json)
Hash identifier: BfS/uTbVy58x9l8iF/wkLVEhdKf178ib7yupva8UZZQ=
Subject key identifier: 1C:EB:F5:9E:77:19:73:EA:73:DC:09:42:B5:A3:B1:65:8F:FD:C9:28
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 0199ED28D15885D39D62FE2D297F76BA54A1
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/HOv1nncZc-pz3AlCtaOxZY_9ySg.roa
Signing time: Thu 16 Oct 2025 13:14:59 +0000
ROA not before: Thu 16 Oct 2025 13:14:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 80.208.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:28:d1:58:85:d3:9d:62:fe:2d:29:7f:76:ba:54:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Oct 16 13:14:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cebf59e771973ea73dc0942b5a3b1658ffdc928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:d6:aa:45:5e:84:16:54:b3:f9:8e:31:b2:
6b:08:17:f5:1f:5e:ac:49:cb:5e:dd:c5:3f:8e:50:
8e:2e:88:98:5b:6f:50:22:87:27:16:28:17:8a:e1:
f1:f3:99:c0:50:10:11:d6:8b:64:53:4f:60:93:a0:
81:56:90:41:ab:3d:4c:dc:f3:eb:e1:03:24:ce:65:
49:87:82:e2:9a:6a:d9:88:e4:29:b6:9a:f0:82:9a:
59:cb:b6:6b:ce:e5:87:0d:44:ed:40:e8:9a:77:92:
5c:74:fc:a4:96:24:e2:2b:92:26:e2:79:ef:b8:86:
0a:8c:44:ef:5a:a1:0a:66:ea:bf:76:f6:c6:9a:ca:
0d:67:3b:a9:dd:37:6f:89:b4:1f:49:a0:a2:38:13:
27:aa:ce:86:fa:71:f4:da:75:85:83:ae:69:ba:e9:
3b:6a:1c:5b:fd:bd:d9:65:36:2e:6a:be:00:94:50:
cb:96:43:41:7d:4b:f7:28:31:8e:78:94:11:33:28:
07:a1:be:42:f6:c6:a4:d8:c6:f8:60:2e:61:c6:36:
64:1e:19:74:dd:08:f4:6f:53:bb:7b:38:b2:b6:f6:
52:5c:41:f6:aa:c4:8e:43:fa:51:87:40:e3:18:97:
cc:41:fc:7a:36:e6:b5:6d:d9:99:4b:a5:52:57:69:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EB:F5:9E:77:19:73:EA:73:DC:09:42:B5:A3:B1:65:8F:FD:C9:28
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/HOv1nncZc-pz3AlCtaOxZY_9ySg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.208.221.0/24
Signature Algorithm: sha256WithRSAEncryption
54:15:12:13:00:54:34:ed:fb:d1:25:8e:b3:ab:31:73:4f:f9:
0d:f6:5b:df:bf:a6:5e:59:bf:53:c4:a3:f8:f3:ff:27:0f:82:
19:a4:0b:82:96:c4:f2:eb:e1:fc:90:86:72:b4:ef:11:09:81:
4b:23:e7:a7:68:8d:c2:f2:e9:9b:58:31:7c:c9:e2:62:15:20:
e8:74:06:71:8a:93:e9:bf:70:1b:ee:7a:0a:88:3b:3d:db:b9:
15:94:19:3a:52:ac:e7:09:18:60:dd:fc:14:6f:7d:10:a8:3a:
00:04:3a:9c:7f:f1:72:ed:0e:5a:73:76:0e:72:0d:c4:ed:ed:
3d:ba:29:c4:16:76:ad:b5:5e:37:b7:fb:c5:20:31:f2:ba:a0:
37:0d:eb:9f:3b:9b:f7:99:5e:63:02:4c:5e:0d:3c:4b:33:e1:
f3:fe:67:f0:db:ef:70:27:1e:96:61:1d:8f:2d:b3:a0:bd:79:
2d:6e:1b:20:a5:2e:4f:a9:98:bf:09:ce:fb:b7:c1:94:98:34:
90:d7:c9:55:eb:ac:e3:a0:e0:40:e2:55:08:99:2d:21:78:de:
ad:d2:0b:c7:de:8d:7d:70:fd:fa:86:a4:37:05:87:ea:ba:66:
17:d3:43:05:93:db:41:72:00:3f:57:9f:3f:1f:b6:a5:92:0c:
46:3b:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:20 2025 by rpki-client