Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/Hi1JfNmrlGgkq8LJThdNJ2H_9RU.roa
File: Hi1JfNmrlGgkq8LJThdNJ2H_9RU.roa (raw, json)
Hash identifier: nAKWDljPkM7VVe7jEP7DxUoFbACMfs6GDVOQi/f8q5s=
Subject key identifier: 1E:2D:49:7C:D9:AB:94:68:24:AB:C2:C9:4E:17:4D:27:61:FF:F5:15
Certificate issuer: /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial: 0197A705BCE2562AA2DE590FB4B632BAB6AD
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/Hi1JfNmrlGgkq8LJThdNJ2H_9RU.roa
Signing time: Wed 25 Jun 2025 12:17:40 +0000
ROA not before: Wed 25 Jun 2025 12:17:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50254
IP address blocks: 83.219.234.0/24 maxlen: 24
185.182.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:05:bc:e2:56:2a:a2:de:59:0f:b4:b6:32:ba:b6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Validity
Not Before: Jun 25 12:17:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e2d497cd9ab946824abc2c94e174d2761fff515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:ac:f5:05:30:a3:5c:ac:83:04:8d:b6:fd:
8f:47:e2:c1:da:d6:68:30:7e:78:d3:43:93:d2:a0:
eb:47:e7:a6:a6:83:ec:40:43:3a:0f:85:33:16:fd:
3f:49:c4:75:7a:70:59:98:e8:26:92:c6:32:28:23:
28:79:86:eb:57:33:b0:d6:3a:6e:f6:3e:c2:ec:6a:
32:0b:0f:0a:67:55:2f:12:d1:b5:fa:5b:b8:b6:34:
f5:bb:c8:c4:31:dd:ee:89:a3:9d:69:ac:ec:36:09:
d2:11:80:06:a4:15:e6:56:11:f2:4e:4e:b4:79:9d:
3a:19:da:f7:dd:a0:94:5b:56:40:e7:45:f9:6b:f4:
a6:93:ca:68:d5:79:08:39:0f:29:9d:55:02:29:7a:
39:89:0b:e6:3c:f0:f5:e1:b6:64:e1:73:92:36:80:
ff:a9:e0:e8:7f:09:5a:45:4f:84:5a:1e:d1:14:90:
ef:03:bc:5a:6f:f0:13:58:36:90:b8:35:cb:87:62:
8a:93:c1:fa:64:a2:16:e7:36:b8:50:ca:e8:81:ce:
3a:60:fa:63:21:53:ba:fa:f9:8d:3a:64:a3:36:e9:
55:ef:bc:d5:96:49:70:8f:f1:ff:14:46:23:e1:4d:
ed:ce:4d:b4:eb:c2:0b:34:4b:da:e5:8e:51:96:2c:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2D:49:7C:D9:AB:94:68:24:AB:C2:C9:4E:17:4D:27:61:FF:F5:15
X509v3 Authority Key Identifier:
keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/Hi1JfNmrlGgkq8LJThdNJ2H_9RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.234.0/24
185.182.16.0/22
Signature Algorithm: sha256WithRSAEncryption
31:1b:8f:54:4e:29:39:5a:51:3d:79:17:59:d7:3f:c2:b3:55:
5a:15:61:52:fa:ce:42:f3:e0:03:20:0f:2a:7a:29:62:5f:53:
15:b4:16:e9:6c:2c:90:ce:08:b3:cd:71:d6:49:70:12:f4:80:
d4:49:f8:43:52:c2:11:e0:41:3e:1a:2e:4f:81:bb:cf:55:0a:
5f:f4:60:52:0e:3d:a0:71:ab:d4:0c:22:7e:09:bc:04:53:75:
69:71:63:de:47:2d:a9:ea:79:6e:d6:a3:d9:80:02:ec:6a:cc:
86:7d:bf:19:3d:0b:fa:34:33:86:7e:d2:15:b4:e0:c5:07:2d:
92:50:21:19:31:30:6a:5a:f4:c0:c5:f1:9a:fc:63:d6:48:55:
81:20:94:5a:a7:e4:26:70:8b:68:50:c4:74:76:3d:e7:85:ab:
3c:42:7e:e6:9a:a0:e8:48:fb:44:f2:94:ea:ed:59:5f:12:83:
05:76:00:e8:a0:48:32:e8:db:99:9c:3d:38:b2:2c:61:8e:01:
bb:ef:b7:4d:0c:f3:75:d3:22:f8:e6:f3:f4:82:99:9f:d2:f3:
71:68:7c:35:cb:e4:43:0b:2c:2c:79:45:54:11:d8:7e:da:25:
5e:50:d5:a0:52:d4:9a:28:cb:bf:c9:d4:0c:11:4d:25:9d:9f:
c2:8e:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:22:41 2025 by rpki-client