Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HhTSviIlF3SCvuwUg4EnhiY6Ws8.roa
File: HhTSviIlF3SCvuwUg4EnhiY6Ws8.roa (raw, json)
Hash identifier: bE0bk/Fl9omPr1fvpN48LuCZCjkey6Fjg+pqNjYZQ8g=
Subject key identifier: 1E:14:D2:BE:22:25:17:74:82:BE:EC:14:83:81:27:86:26:3A:5A:CF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01988D3C03BEDA22D59FD4E2F401AE0FA983
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HhTSviIlF3SCvuwUg4EnhiY6Ws8.roa
Signing time: Sat 09 Aug 2025 05:09:37 +0000
ROA not before: Sat 09 Aug 2025 05:09:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 151.244.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:3c:03:be:da:22:d5:9f:d4:e2:f4:01:ae:0f:a9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 9 05:09:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e14d2be2225177482beec1483812786263a5acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:b9:5e:bc:c8:0b:40:6d:85:95:d5:ec:23:
52:b7:45:33:e4:d4:77:63:d7:54:d2:63:b0:41:df:
4d:d5:a2:2b:65:3f:78:9e:93:83:a5:65:f9:ff:e6:
6f:a6:b0:4d:09:66:2d:9e:44:bc:77:b1:cb:60:80:
85:ff:13:33:15:13:f3:53:44:96:d2:ea:8a:05:1a:
a0:03:ab:b1:b0:d1:b0:9e:81:09:76:d9:39:40:70:
63:66:f0:4b:0e:89:c4:f0:96:85:47:ee:ff:fd:02:
08:08:c0:92:ff:ea:69:b4:c7:fd:d5:9a:1d:35:a2:
3f:63:f6:e4:65:43:e6:51:2a:02:da:91:fc:6b:db:
af:da:d5:fa:a6:9d:43:e8:1a:29:c9:19:c7:cc:4c:
b2:c7:c4:2d:9d:f8:11:56:3f:c4:f4:20:66:58:5a:
e4:ec:7b:87:3f:ff:18:9b:f4:a3:58:28:92:55:c9:
dd:2f:3c:a1:21:90:22:28:21:f8:3b:6d:3c:4f:6f:
7a:71:f7:c2:93:1d:f4:c0:9d:29:19:0e:d9:da:99:
ab:79:36:3e:ff:36:e5:91:55:96:01:1d:38:e5:25:
f7:88:aa:47:cf:db:33:17:b2:78:e1:24:68:77:6c:
8c:68:81:48:12:bc:39:6c:e3:84:c2:b3:e2:63:71:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:14:D2:BE:22:25:17:74:82:BE:EC:14:83:81:27:86:26:3A:5A:CF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HhTSviIlF3SCvuwUg4EnhiY6Ws8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.192.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a9:a9:ea:e5:38:e8:5e:51:fa:bf:1c:e8:5a:7d:13:4e:a8:
45:a2:a2:2e:ac:19:da:c5:9e:e7:29:d5:48:ab:6e:79:39:7c:
a9:bf:e0:ae:03:a2:6f:2f:ec:7a:f8:80:8b:b0:68:4d:57:d9:
0b:1f:06:02:2c:c2:8d:96:7b:e0:0d:39:d9:97:52:15:b4:7b:
72:58:79:23:3b:ec:44:f1:3b:f0:ef:53:1a:4d:98:d2:20:98:
86:71:cd:29:80:47:a8:21:85:f5:cb:9d:41:68:4d:3f:f3:9a:
4f:c7:1b:39:4f:25:7a:c9:ce:a6:5e:33:29:0f:c3:1a:b5:ef:
ca:2d:a5:f0:13:be:fa:8a:81:90:b1:92:22:0e:34:62:4f:77:
73:62:53:45:b8:3e:5f:b7:a6:3a:00:01:e9:c9:17:bd:90:d8:
95:c4:a5:f9:2e:b2:34:3d:2b:c5:c0:28:1d:68:5e:2e:80:88:
f0:46:01:6d:7a:db:9d:a0:16:c2:fa:ec:30:31:3c:cf:7a:9f:
71:87:6b:b0:d0:be:67:c6:fc:cc:74:a4:ef:4a:19:56:64:0b:
e6:db:e4:f4:69:58:e0:cf:d3:8a:20:63:1e:ac:83:db:92:f5:
7a:d8:08:3c:82:24:55:58:16:32:ef:db:94:64:48:23:df:f0:
43:c2:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:16 2025 by rpki-client