Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/HW-47siDCDPzCMGr9TcmDzcG87s.roa
File: HW-47siDCDPzCMGr9TcmDzcG87s.roa (raw, json)
Hash identifier: lME65sDNYHQsI8+3yWq97uuN5oGTyvECfmIEC3YMFFo=
Subject key identifier: 1D:6F:B8:EE:C8:83:08:33:F3:08:C1:AB:F5:37:26:0F:37:06:F3:BB
Certificate issuer: /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial: 0199CD1177430FD3F2A270D95AF19026127B
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/HW-47siDCDPzCMGr9TcmDzcG87s.roa
Signing time: Fri 10 Oct 2025 07:41:37 +0000
ROA not before: Fri 10 Oct 2025 07:41:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24840
IP address blocks: 185.16.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:11:77:43:0f:d3:f2:a2:70:d9:5a:f1:90:26:12:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Validity
Not Before: Oct 10 07:41:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d6fb8eec8830833f308c1abf537260f3706f3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:a0:c5:99:53:1e:89:d8:f1:1e:1c:f9:4e:
3f:e4:2e:6f:0c:c3:73:65:dd:47:61:43:cc:4b:40:
ee:e4:39:19:d4:ce:b4:0f:d6:af:d7:84:23:e5:90:
be:6d:e5:6b:f7:9a:67:d0:14:1e:10:a9:94:c9:39:
77:60:54:0c:6f:ee:bd:f7:fa:00:d2:ec:81:0d:c7:
6d:bf:9b:dc:f5:e7:18:c7:34:95:5e:f2:a3:7a:ef:
91:f8:92:22:e1:50:e7:51:d6:3e:ab:5f:b1:79:26:
08:a1:6c:ae:b0:20:01:e5:9f:f4:ac:4b:66:27:8b:
d6:be:18:b2:2e:c2:fd:28:15:9c:0c:90:e8:18:b9:
d3:ce:e8:a4:26:08:21:bd:7d:4c:c0:39:46:1b:65:
1c:38:e6:98:3b:97:7f:07:8a:a8:f0:59:8c:98:a7:
0b:ef:50:46:b0:45:62:34:90:57:cc:d9:88:66:1e:
d9:fc:c4:ad:e7:2f:ee:cb:da:8e:b2:5d:b8:3b:b4:
5a:b8:96:e0:03:ec:27:c9:88:e5:8b:58:95:7b:05:
ca:04:34:1f:28:bc:51:24:9f:15:44:4d:53:df:9f:
b1:a8:19:61:40:71:89:e9:7e:98:c7:ea:93:e0:fc:
58:41:5b:39:52:f9:05:7f:48:ea:2e:32:f7:ff:04:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6F:B8:EE:C8:83:08:33:F3:08:C1:AB:F5:37:26:0F:37:06:F3:BB
X509v3 Authority Key Identifier:
keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/HW-47siDCDPzCMGr9TcmDzcG87s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:66:90:8f:90:53:02:36:9f:35:83:f0:f8:5e:32:9d:9d:2c:
0f:4d:f8:09:e6:45:f6:97:92:ed:1a:b1:9c:c1:5b:a4:db:b2:
1c:8e:fc:62:34:08:14:ff:9b:9c:9d:7f:5e:c2:c5:22:8e:16:
5f:0d:69:df:54:47:a9:7c:1b:f6:07:b8:14:c1:a7:78:49:e1:
75:f2:41:ca:c1:a0:c6:6b:65:d2:4d:88:a5:00:a0:e1:41:7e:
5d:bf:ea:10:3a:00:6a:20:4f:d6:41:17:9d:7b:89:6f:e0:22:
7e:52:5f:2b:e5:59:59:2d:f1:3f:50:78:77:1b:6f:95:8c:5f:
b4:b1:65:1a:7e:8a:49:39:ee:42:30:8a:6f:a2:6b:3f:6f:95:
9d:41:8f:9c:c9:86:d2:9c:3c:28:da:a5:fb:6d:cf:0a:5b:66:
21:62:6e:50:ae:83:3e:19:f5:7f:7a:9a:e2:6b:54:ef:b8:30:
3f:11:52:38:a7:49:4b:ee:10:8c:4c:f9:40:23:2d:43:f1:fa:
0b:96:0c:5b:a3:7a:e8:00:36:42:7d:82:d1:e5:7b:83:6c:8f:
bf:ca:6e:77:1f:02:34:ca:00:55:07:9b:77:a1:8e:36:9c:f6:
d1:ec:dd:73:d9:b2:98:0d:1c:85:90:fa:ba:f6:a4:29:2d:cf:
46:a0:9d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:14 2025 by rpki-client