Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/hAltwAar8cruPnrUggNtE-ckX2E.roa
File: hAltwAar8cruPnrUggNtE-ckX2E.roa (raw, json)
Hash identifier: L6YarcwAfqpMI8vHdXzsk7yBc6dzjR+YnQY4CVhZuBE=
Subject key identifier: 84:09:6D:C0:06:AB:F1:CA:EE:3E:7A:D4:82:03:6D:13:E7:24:5F:61
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 01992F98BB65045CA9DD90025D044B0A5BE0
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/hAltwAar8cruPnrUggNtE-ckX2E.roa
Signing time: Tue 09 Sep 2025 17:49:22 +0000
ROA not before: Tue 09 Sep 2025 17:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48955
IP address blocks: 86.107.58.0/23 maxlen: 24
94.154.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:98:bb:65:04:5c:a9:dd:90:02:5d:04:4b:0a:5b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Sep 9 17:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84096dc006abf1caee3e7ad482036d13e7245f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:6e:6a:0f:4c:1d:fb:ad:b3:c7:a2:11:dc:
67:9e:94:9a:80:5a:64:26:f1:04:5e:e5:7c:21:4a:
c5:6f:7c:1e:57:3d:f5:73:f7:6f:16:94:ef:8f:4b:
46:4a:f2:e4:5e:4d:72:5d:4c:5c:0e:6e:7f:ac:aa:
b1:a7:1f:a9:bc:8d:9b:c1:c7:e6:8d:db:38:71:73:
54:23:ee:c4:9b:7f:e9:f9:44:3f:ae:cd:31:ba:aa:
66:f0:5f:ec:0b:69:ff:ed:e1:48:2d:3e:62:0a:7e:
41:10:da:4a:aa:7d:2a:5c:da:89:16:07:8f:6c:1d:
64:3f:57:aa:58:91:03:ef:76:eb:04:d0:a8:03:1d:
92:83:47:08:b7:3f:05:8f:96:7b:4f:28:0c:d6:bf:
5a:4c:bd:af:d4:ed:32:42:41:41:f9:ec:8c:db:1a:
8d:68:ed:17:7d:f7:63:d2:25:7c:c3:13:f4:ad:b5:
d7:4c:32:a6:d5:c7:15:61:35:00:ce:43:d1:65:f4:
a7:fa:5d:65:95:02:be:fe:b7:66:82:10:70:5f:b5:
02:d4:95:75:2d:bc:80:7d:7e:4e:25:e7:31:9f:2f:
9b:4c:78:6e:6a:eb:04:9c:ad:09:ec:f3:7b:f6:11:
01:4c:97:52:b9:19:5b:bb:af:c0:d5:42:00:2b:46:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:6D:C0:06:AB:F1:CA:EE:3E:7A:D4:82:03:6D:13:E7:24:5F:61
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/hAltwAar8cruPnrUggNtE-ckX2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.58.0/23
94.154.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7b:5d:c2:00:05:7c:8b:1d:2c:20:e3:15:fa:08:38:14:3b:
71:ea:45:98:78:6f:58:d9:29:fe:da:68:75:a6:2f:cb:e4:c8:
e1:bc:50:f6:92:1e:57:be:8c:bc:aa:b0:69:ab:1a:6c:99:1c:
2f:7e:ca:f2:5d:b8:a1:ec:7d:3f:bc:98:23:d1:f0:36:d1:9c:
2e:ce:25:f1:47:62:a1:d5:72:17:7e:05:2e:d2:18:ad:91:02:
6e:27:84:13:f8:35:98:10:51:06:5c:a7:45:54:43:c9:37:7d:
bb:8f:3e:51:e9:53:cb:5c:11:77:45:ac:fb:41:e8:09:d4:0a:
68:36:d5:ba:c9:41:47:fd:b3:c0:cd:9f:49:03:c3:ac:25:f6:
f4:27:7c:6f:05:47:2f:c9:e4:94:ad:63:59:b1:61:15:52:20:
21:45:9f:4c:a8:07:3a:bd:6a:c7:a1:45:98:0d:10:e8:57:03:
1b:e3:aa:bc:72:c2:56:b3:12:a9:d7:f1:d3:ac:ba:fc:12:e5:
ad:14:4c:4b:d0:a3:a6:37:21:0a:5a:1b:69:9c:2f:5d:a6:15:
88:f4:8b:18:f0:1b:25:25:c5:25:c4:d4:79:2f:c1:fc:3b:d5:
3f:21:d3:1d:bf:1e:01:b5:d7:4d:16:f1:79:60:0a:c9:44:f9:
e5:b1:38:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:49 2025 by rpki-client