Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Hwqj86OyZwv6zumPMOdDEHh1OVU.roa
File: Hwqj86OyZwv6zumPMOdDEHh1OVU.roa (raw, json)
Hash identifier: BeyVonGRSiJplCz1koR2l3WRSO3lLoBYCWhiCNd1pi0=
Subject key identifier: 1F:0A:A3:F3:A3:B2:67:0B:FA:CE:E9:8F:30:E7:43:10:78:75:39:55
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0199BA13727D3543C94B09D8390E18729B3F
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Hwqj86OyZwv6zumPMOdDEHh1OVU.roa
Signing time: Mon 06 Oct 2025 15:11:00 +0000
ROA not before: Mon 06 Oct 2025 15:11:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42905
IP address blocks: 141.105.128.0/24 maxlen: 24
141.105.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ba:13:72:7d:35:43:c9:4b:09:d8:39:0e:18:72:9b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Oct 6 15:11:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f0aa3f3a3b2670bfacee98f30e7431078753955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:a5:d2:28:ef:a6:89:30:f5:e0:4a:71:fe:
d1:9a:0b:bf:a4:20:80:b6:49:31:e9:81:e8:b8:a4:
a5:be:71:0f:47:e8:c2:2a:be:0d:db:4d:7c:5d:70:
b4:f3:ff:96:32:f7:4d:42:8b:8b:d4:e1:73:a1:02:
95:b2:c7:6c:1f:a8:b3:ed:e3:f9:0b:1d:a1:a6:16:
86:72:bb:a6:46:15:ac:a3:47:0d:ec:e6:6b:a9:8b:
a1:4a:8d:ae:49:23:8b:aa:6d:a9:fe:9e:c9:d4:25:
db:6c:87:10:9d:2f:2d:4f:5d:f2:62:4e:87:96:a1:
ee:9c:23:84:fa:58:df:b1:2d:4d:54:86:5b:e6:34:
44:f5:2c:02:57:97:a3:55:f5:79:ca:3f:cf:f3:aa:
df:e1:a0:de:67:44:18:02:3b:8f:fe:b9:2c:25:9b:
71:8a:e5:3d:12:98:f6:38:25:e9:16:9f:01:62:b1:
62:f4:2a:ad:92:82:bc:81:a7:0c:35:9a:ea:56:9e:
5d:3d:03:3b:83:59:f5:29:7f:6a:6f:16:6e:81:d2:
03:7f:03:fd:b7:3c:de:67:53:0a:8a:ce:11:79:b9:
4b:03:8d:f8:1e:91:60:8e:1d:63:aa:5f:53:6e:b4:
60:3e:a4:e0:65:dc:59:b2:9e:5a:7a:81:8b:de:9f:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:A3:F3:A3:B2:67:0B:FA:CE:E9:8F:30:E7:43:10:78:75:39:55
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Hwqj86OyZwv6zumPMOdDEHh1OVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.128.0/24
141.105.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:8a:1b:8a:02:88:3f:64:62:47:04:b1:2b:02:bd:5f:67:fc:
a1:56:b5:19:d3:ee:66:08:2f:97:f1:77:af:5e:f3:e1:3e:1d:
ab:3d:e0:51:5a:27:d5:9f:1b:03:b8:7a:09:6c:68:ff:e6:d0:
f8:76:da:97:aa:7a:ee:51:0a:84:5a:b8:1a:36:98:e6:f7:16:
f5:8d:4b:73:47:f7:f3:ab:08:20:75:b6:49:94:fe:38:40:85:
65:73:d1:42:5b:60:1b:d6:a7:3a:80:43:20:0c:8e:d8:7c:61:
19:fe:e9:09:3a:e6:17:37:ff:35:44:43:c0:b6:75:07:e8:f0:
40:f9:19:91:ec:0e:85:56:e4:5c:82:24:fe:2a:7e:10:25:7c:
48:cf:af:5d:86:5c:7e:e3:97:72:be:d3:82:f0:e3:a9:6f:28:
b2:81:32:01:a0:d8:44:95:2d:bf:85:7b:cc:f3:60:49:39:db:
97:ac:77:07:f3:d1:a7:4a:d0:a5:90:67:b8:d7:56:3b:6f:1d:
b1:0c:99:f8:cc:79:6b:e9:86:60:07:15:8d:b3:5d:54:66:ee:
ce:2c:a6:29:1e:7c:03:91:5a:1f:fb:ca:ba:70:9d:d1:cd:44:
8d:4c:2b:05:0d:69:4c:0f:d4:a3:00:e3:84:ba:7e:26:a9:9f:
02:4f:b6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:42 2025 by rpki-client