Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/hhw3YGh9hj5EXsYGITOMmguWnZI.roa
File: hhw3YGh9hj5EXsYGITOMmguWnZI.roa (raw, json)
Hash identifier: lOqAFxuQMKrwrH35fD7pMORI4B3PaDsxF3qCyiO96nc=
Subject key identifier: 86:1C:37:60:68:7D:86:3E:44:5E:C6:06:21:33:8C:9A:0B:96:9D:92
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0199BE500076171F0179208697BB74E77573
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/hhw3YGh9hj5EXsYGITOMmguWnZI.roa
Signing time: Tue 07 Oct 2025 10:55:38 +0000
ROA not before: Tue 07 Oct 2025 10:55:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47445
IP address blocks: 193.232.139.0/24 maxlen: 24
2001:67c:1213::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:be:50:00:76:17:1f:01:79:20:86:97:bb:74:e7:75:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Oct 7 10:55:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=861c3760687d863e445ec60621338c9a0b969d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:18:45:99:91:80:b1:e3:fe:b5:b1:64:ef:
54:8f:34:84:78:ba:38:01:ca:eb:fb:1c:45:10:38:
76:d2:0f:7a:86:d8:30:60:33:f5:d1:ea:6c:c0:1a:
50:67:d5:d7:d3:3b:53:f8:79:d3:db:0d:bf:fd:62:
23:12:5a:4d:ae:0a:80:af:bd:c0:f9:66:f2:56:e4:
ce:5b:79:97:c7:ad:ac:94:25:7b:bc:04:1b:c0:a7:
fe:9b:c6:4e:77:8e:aa:75:0f:15:d7:32:0a:b1:8f:
03:6e:1f:ed:45:56:53:5e:88:39:c8:32:7f:ad:d1:
7b:a6:4d:61:26:11:b1:e3:79:60:52:f9:99:61:d5:
bd:d8:ea:2e:cf:06:0f:0a:ad:f4:79:27:dd:ec:38:
8e:23:d2:1c:01:0f:48:d1:7d:38:71:25:32:6a:39:
a3:c7:05:b7:bd:36:b4:92:70:93:fb:4d:f1:44:f5:
d3:8a:fd:22:13:b3:82:7b:93:8e:61:e6:bc:98:b9:
f1:a1:30:84:38:a5:56:1f:59:b9:12:0b:53:e5:7c:
8d:39:d2:7a:30:d5:44:cb:53:62:83:e6:43:4a:e5:
ff:52:c2:5d:bb:32:9f:83:8a:79:63:28:f9:2c:4c:
b3:a9:b6:d2:ea:16:05:74:5a:55:4b:12:e8:d7:1a:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:37:60:68:7D:86:3E:44:5E:C6:06:21:33:8C:9A:0B:96:9D:92
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/hhw3YGh9hj5EXsYGITOMmguWnZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.139.0/24
IPv6:
2001:67c:1213::/48
Signature Algorithm: sha256WithRSAEncryption
0f:b9:37:56:e8:17:1b:5b:e5:32:d2:21:bc:c6:83:88:8c:ff:
ed:54:12:e9:25:51:97:8a:d3:3c:68:b1:d9:ef:a1:b8:19:ef:
e1:85:fb:54:6c:8b:b4:b4:39:59:13:1c:5e:d7:f1:37:70:f6:
0e:68:fb:09:39:64:38:60:69:0b:be:cb:5c:f3:ef:8e:2a:44:
44:87:46:36:54:f2:53:99:90:58:27:63:01:44:aa:a4:2e:83:
20:6e:8d:c6:fc:dd:c1:02:e3:84:16:d0:3f:6f:c1:26:f6:b1:
da:84:d0:51:df:d2:8f:68:ab:de:62:20:16:ae:62:ff:02:41:
70:73:7b:93:76:76:69:a4:c6:4c:3a:ed:5c:41:d4:43:23:c2:
d6:7b:80:69:03:74:9e:eb:43:2d:87:21:06:c5:57:51:22:03:
49:a1:df:fd:81:61:c7:a8:ef:7a:5d:1d:8d:52:1a:e5:c1:d1:
6b:da:e8:9d:d7:7f:64:ba:cb:ee:40:59:3b:3a:94:69:4e:44:
89:b7:c8:37:44:f5:04:1b:80:5f:34:40:b5:11:17:59:59:cc:
2a:3e:53:d2:41:e1:c6:e3:e2:a6:51:90:58:c9:ee:f8:63:31:
94:4e:e1:0d:d2:93:ea:88:14:8f:53:62:57:14:7d:7b:5f:3c:
28:bb:c2:b6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZm+UAB2Fx8BeSCGl7t053VzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2
OTdhMDMwHhcNMjUxMDA3MTA1NTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjFjMzc2MDY4N2Q4NjNlNDQ1ZWM2MDYyMTMzOGM5YTBiOTY5ZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRoYRZmRgLHj/rWxZO9UjzSEeLo4
Acrr+xxFEDh20g96htgwYDP10epswBpQZ9XX0ztT+HnT2w2//WIjElpNrgqAr73A
+WbyVuTOW3mXx62slCV7vAQbwKf+m8ZOd46qdQ8V1zIKsY8Dbh/tRVZTXog5yDJ/
rdF7pk1hJhGx43lgUvmZYdW92OouzwYPCq30eSfd7DiOI9IcAQ9I0X04cSUyajmj
xwW3vTa0knCT+03xRPXTiv0iE7OCe5OOYea8mLnxoTCEOKVWH1m5EgtT5XyNOdJ6
MNVEy1Nig+ZDSuX/UsJduzKfg4p5Yyj5LEyzqbbS6hYFdFpVSxLo1xrjeQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIYcN2BofYY+RF7GBiEzjJoLlp2SMB8GA1UdIwQY
MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt
Njg4ZDMzM2VkOWQ1LzEvaGh3M1lHaDloajVFWHNZR0lUT01tZ3VXblpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1
LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAweiLMA8E
AgACMAkDBwAgAQZ8EhMwDQYJKoZIhvcNAQELBQADggEBAA+5N1boFxtb5TLSIbzG
g4iM/+1UEuklUZeK0zxosdnvobgZ7+GF+1Rsi7S0OVkTHF7X8Tdw9g5o+wk5ZDhg
aQu+y1zz744qRESHRjZU8lOZkFgnYwFEqqQugyBujcb83cEC44QW0D9vwSb2sdqE
0FHf0o9oq95iIBauYv8CQXBze5N2dmmkxkw67VxB1EMjwtZ7gGkDdJ7rQy2HIQbF
V1EiA0mh3/2BYceo73pdHY1SGuXB0Wva6J3Xf2S6y+5AWTs6lGlORIm3yDdE9QQb
gF80QLURF1lZzCo+U9JB4cbj4qZRkFjJ7vhjMZRO4Q3Sk+qIFI9TYlcUfXtfPCi7
wrY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:27:22 2025 by rpki-client