Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/h6iYTxkEjd04WV05dd6fQmp61L8.roa
File: h6iYTxkEjd04WV05dd6fQmp61L8.roa (raw, json)
Hash identifier: R2cWVyoWjWNVsdNIi8vnopbDtThlhMuHspPbR0pD3jU=
Subject key identifier: 87:A8:98:4F:19:04:8D:DD:38:59:5D:39:75:DE:9F:42:6A:7A:D4:BF
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 01988123BC4C245FB95AD9966377AD02C84D
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/h6iYTxkEjd04WV05dd6fQmp61L8.roa
Signing time: Wed 06 Aug 2025 20:47:39 +0000
ROA not before: Wed 06 Aug 2025 20:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25151
IP address blocks: 130.193.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:23:bc:4c:24:5f:b9:5a:d9:96:63:77:ad:02:c8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Aug 6 20:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87a8984f19048ddd38595d3975de9f426a7ad4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:e9:51:7b:22:dc:da:7f:6a:4e:dd:13:27:
d2:3e:7f:bf:73:9a:6e:fe:ba:b2:38:62:bb:ca:d8:
41:17:ea:ed:e3:b6:e2:2f:12:d4:52:7f:d7:a6:b9:
6e:b7:93:bb:52:15:06:ff:1d:41:9e:6b:68:4a:70:
9f:d7:39:5d:e5:96:80:34:b6:d0:70:35:73:4c:64:
09:dd:49:c9:6f:13:24:0c:6a:65:73:65:2f:ab:a3:
0d:f5:1c:ad:70:84:51:20:0f:31:ea:59:de:f9:cc:
ca:33:b1:33:14:ee:7e:15:fb:77:0e:24:0d:07:f4:
93:9a:da:1f:a9:ab:8d:80:48:23:c2:e9:58:80:13:
2b:9a:c2:e8:a6:15:b4:22:20:4d:03:cb:e6:43:6f:
c8:02:b8:d4:4c:62:89:f9:94:8c:bc:d9:e0:90:b9:
2d:6b:c5:9d:ad:df:8f:5f:2c:76:bd:6c:dc:a7:37:
e6:42:0c:aa:df:b8:c0:c2:c6:3b:9a:19:e4:31:64:
53:78:35:46:e6:bc:6e:28:da:47:ca:71:b2:05:e2:
e1:dc:c6:ed:d5:8a:1d:f7:3b:f1:21:95:91:0b:f9:
33:8f:0e:d3:4f:94:d4:35:6f:10:57:54:30:3b:45:
d8:06:7c:f1:6e:86:18:de:e0:b2:82:7d:2b:47:05:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A8:98:4F:19:04:8D:DD:38:59:5D:39:75:DE:9F:42:6A:7A:D4:BF
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/h6iYTxkEjd04WV05dd6fQmp61L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:23:33:f8:f8:c6:be:14:24:ac:2f:c7:a9:18:7e:e6:d4:a2:
d2:22:cd:be:3e:a0:59:c3:b6:ef:a7:6d:63:37:77:7e:20:c8:
a6:c4:4d:3a:a8:62:bb:9d:25:4b:f7:05:36:01:ae:01:c9:38:
d5:2a:c9:b4:58:f4:ff:7a:00:92:af:43:14:37:55:18:7e:f0:
de:38:29:17:cf:c6:3c:ed:3a:3d:e9:b5:69:a3:cb:89:fb:ba:
6b:f9:4b:78:8e:7f:8e:e6:a7:fd:68:6d:47:86:12:94:39:92:
09:a9:09:7a:88:03:78:b7:fb:49:a4:ad:40:82:e5:b8:0c:49:
b0:5c:8d:cd:5b:de:99:26:69:55:e8:05:ce:61:8e:1a:7c:27:
46:e3:3b:14:07:53:06:74:ab:b1:2d:3d:7e:59:7a:aa:a8:2f:
60:f2:3e:e0:b3:9b:97:52:d2:d6:6d:6f:ae:25:0c:0f:d3:bf:
a9:c0:fd:0d:5b:52:7f:f2:2d:6c:75:24:db:e4:e7:54:e8:04:
b4:fe:49:04:75:1a:7b:29:d7:ae:16:5d:12:6c:c8:13:0e:8d:
bc:d1:3f:2f:91:97:fc:f8:31:d4:ad:28:f7:8d:67:ff:5f:5e:
e5:15:89:53:ed:f3:7a:c7:f9:69:37:e8:5a:c8:65:6a:4c:6a:
51:a1:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:03 2025 by rpki-client