Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/h6j3PofcBQDmfTGah59b1zPMf8o.roa
File: h6j3PofcBQDmfTGah59b1zPMf8o.roa (raw, json)
Hash identifier: q+IYqPK8ZddReCwkNGJqqDDyQQjRAwXJSYw+Ehyh7O0=
Subject key identifier: 87:A8:F7:3E:87:DC:05:00:E6:7D:31:9A:87:9F:5B:D7:33:CC:7F:CA
Certificate issuer: /CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Certificate serial: 019999F6F5FB4D394DD61480376556B32C4C
Authority key identifier: 7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/h6j3PofcBQDmfTGah59b1zPMf8o.roa
Signing time: Tue 30 Sep 2025 09:32:02 +0000
ROA not before: Tue 30 Sep 2025 09:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12480
IP address blocks: 195.42.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:f6:f5:fb:4d:39:4d:d6:14:80:37:65:56:b3:2c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Validity
Not Before: Sep 30 09:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87a8f73e87dc0500e67d319a879f5bd733cc7fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:75:3e:c0:9c:a9:f3:76:bb:fb:56:b0:63:de:
1d:9c:22:1f:36:85:b1:9c:51:56:08:4e:ca:03:f8:
87:72:cb:ea:82:a1:b5:b9:44:5f:84:dc:72:3d:1c:
5d:5e:1a:51:22:dc:c0:ef:6e:a8:eb:bc:d9:e3:2f:
16:1d:58:3a:13:2b:12:20:2e:1c:8a:12:6b:e7:2e:
bc:24:6a:d6:90:c6:72:e3:34:32:29:55:1b:a2:3e:
4e:bb:8e:86:6e:90:a5:27:d8:53:01:d5:9d:12:d2:
85:5d:fd:1b:49:d0:da:a4:20:35:3d:2e:1e:c9:3d:
6e:f4:c2:84:9e:8b:58:ca:6b:26:30:37:22:0d:3c:
68:de:28:db:b1:52:e2:31:cb:73:c2:cd:4b:48:74:
a0:d8:01:25:d4:79:4e:15:a3:29:61:3a:b2:5a:f9:
17:12:2a:77:52:d3:52:d5:c1:5b:94:e2:d1:6c:ca:
c2:a5:4c:c0:8d:bd:3c:2d:9d:fc:b5:88:8a:cf:1f:
52:a4:48:16:6d:6b:da:e9:2d:4c:ca:f0:97:5e:f8:
e3:6c:a8:f1:bd:9f:f4:5f:4a:0c:4c:27:df:44:89:
32:bf:b6:c5:a9:6c:bd:6f:70:63:41:8a:26:74:cd:
71:20:86:77:ae:9d:1c:c9:7d:ad:be:15:a9:7c:44:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A8:F7:3E:87:DC:05:00:E6:7D:31:9A:87:9F:5B:D7:33:CC:7F:CA
X509v3 Authority Key Identifier:
keyid:7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/h6j3PofcBQDmfTGah59b1zPMf8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:53:c7:a6:c8:a5:29:7a:9f:ed:76:45:2a:ec:22:62:ac:6d:
2b:ad:3b:32:54:98:ea:e6:cc:8e:8d:84:b3:0a:3e:6b:8d:42:
a8:c7:48:66:e3:05:b0:0b:9b:f8:7f:5e:80:77:29:a8:25:f0:
d3:13:f8:73:d3:cc:e2:a3:41:b8:7c:6a:33:27:aa:b6:c6:a9:
2f:6c:ea:eb:23:44:35:94:e3:7d:54:56:1c:83:ae:0d:41:e3:
2f:5b:4e:b0:85:33:8b:01:b6:95:75:9f:36:72:a0:a6:d1:11:
96:35:e8:22:06:47:12:88:c1:2f:23:5c:8e:53:03:93:ee:a1:
b4:fe:46:6a:3b:81:9e:df:a0:79:d9:58:2f:b1:b5:3b:85:34:
cc:1c:bc:5f:21:cf:bf:4c:b9:22:98:55:b3:c4:9a:5c:9b:8e:
fd:13:00:98:9d:25:67:e1:19:e9:8c:b5:69:f0:28:9e:2a:62:
a9:8b:f6:76:73:1f:af:79:e8:4a:3a:1d:ce:a5:84:91:13:8d:
fc:f3:f7:2c:6a:67:b3:93:53:65:76:6a:7f:78:e9:15:ed:f2:
73:03:43:6b:12:91:b4:88:a3:18:31:6e:8e:3e:1f:a5:88:3b:
02:e6:15:a8:7b:98:f2:d3:f3:6a:3b:69:89:ad:4e:3b:1b:98:
c8:b9:ac:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:57 2025 by rpki-client