Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/jhzB3ouu7eGFu6kVywcyzMtWs14.roa
File: jhzB3ouu7eGFu6kVywcyzMtWs14.roa (raw, json)
Hash identifier: 7ZiZaqq6we6E8f2G4rGHZ2hDk0lAG3K7IdZ3KOrq/pc=
Subject key identifier: 8E:1C:C1:DE:8B:AE:ED:E1:85:BB:A9:15:CB:07:32:CC:CB:56:B3:5E
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0198BFBC97208BA3DA3D5ABE474060C38A3D
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/jhzB3ouu7eGFu6kVywcyzMtWs14.roa
Signing time: Tue 19 Aug 2025 00:31:04 +0000
ROA not before: Tue 19 Aug 2025 00:31:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 194.59.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bf:bc:97:20:8b:a3:da:3d:5a:be:47:40:60:c3:8a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Aug 19 00:31:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e1cc1de8baeede185bba915cb0732cccb56b35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:17:ab:68:ad:cb:33:2f:c1:c2:28:b9:07:
83:4d:1c:77:74:a7:ab:da:6e:b7:54:c0:47:1a:9c:
af:59:0e:6b:1f:35:16:82:4d:bc:4d:74:6f:20:59:
16:7b:7c:ba:1e:55:df:97:5b:20:11:aa:e4:19:e5:
fe:7b:df:a7:c2:74:3c:e1:ff:65:17:64:b2:f2:aa:
56:03:87:27:08:e8:d9:71:04:47:e3:bc:18:52:27:
32:bb:ec:10:c4:9b:4b:a1:5d:a9:9c:76:c5:2a:99:
0c:1b:62:7a:b6:40:d2:4d:bb:70:55:27:10:af:f1:
a5:6b:42:f7:12:07:3c:43:2a:5f:5a:78:ae:58:c4:
ab:96:fd:7e:7e:dd:48:dd:7e:91:5c:23:96:32:3c:
83:bd:b1:fb:91:50:ab:22:2a:45:bb:1d:78:3c:2b:
7a:26:d1:c1:4e:96:53:e6:70:9f:e5:44:24:a1:27:
19:32:e6:18:e4:a9:86:40:b9:db:02:8b:b5:a7:7e:
df:e3:47:83:0c:f9:40:94:a1:cf:77:ee:5b:a8:ae:
1f:3b:b0:1b:c2:de:ce:20:67:fd:b6:0e:ac:fc:83:
9c:af:f3:e0:98:f8:7e:b4:3b:5b:0e:77:b2:cd:58:
d7:f1:1b:10:b3:1e:1f:48:83:d2:ca:42:ea:bc:f6:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1C:C1:DE:8B:AE:ED:E1:85:BB:A9:15:CB:07:32:CC:CB:56:B3:5E
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/jhzB3ouu7eGFu6kVywcyzMtWs14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:67:54:76:6a:76:55:f9:d3:52:04:d4:1a:01:e3:aa:34:08:
07:31:ea:f7:cd:1e:f9:63:0a:58:ac:e4:2c:fd:ef:f4:0c:95:
fb:cd:9e:56:e8:2a:71:99:bd:26:b3:82:3f:b7:34:95:3c:78:
af:3b:3f:74:87:b9:b0:30:38:4c:2c:f0:9c:bf:88:d8:34:6d:
09:b5:c3:f5:bc:83:8b:a7:1b:d2:d5:e9:de:58:98:f3:74:bb:
2d:a4:49:82:ee:18:41:c2:d8:0e:0a:fb:e9:f5:21:44:4e:e9:
11:cd:2c:6f:f7:93:ba:de:f1:7e:56:51:19:bd:2b:f4:68:ff:
12:c8:23:3d:7a:1e:a4:87:d0:d2:8c:b9:b0:a9:93:b3:c6:c4:
e7:6b:98:cc:c5:11:66:0c:39:f6:71:49:89:62:fb:c0:7a:a9:
a0:53:53:4e:42:0c:4e:6f:c6:85:b7:78:f0:d1:e7:b2:97:90:
07:96:39:00:b3:b1:34:91:a6:57:19:10:22:98:6e:65:80:8a:
a1:38:93:1b:9e:f8:60:13:e3:52:30:bc:7a:79:84:88:4c:fd:
9c:8b:f6:dd:43:80:27:c0:06:e5:24:7b:28:06:e8:56:8b:b7:
06:63:48:8b:ba:8d:e1:cc:7a:0f:26:f2:b1:75:a1:c6:4e:9a:
d2:c4:71:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZi/vJcgi6PaPVq+R0Bgw4o9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjUwODE5MDAzMTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTFjYzFkZThiYWVlZGUxODViYmE5MTVjYjA3MzJjY2NiNTZiMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3IXq2ityzMvwcIouQeDTRx3dKer
2m63VMBHGpyvWQ5rHzUWgk28TXRvIFkWe3y6HlXfl1sgEarkGeX+e9+nwnQ84f9l
F2Sy8qpWA4cnCOjZcQRH47wYUicyu+wQxJtLoV2pnHbFKpkMG2J6tkDSTbtwVScQ
r/Gla0L3Egc8QypfWniuWMSrlv1+ft1I3X6RXCOWMjyDvbH7kVCrIipFux14PCt6
JtHBTpZT5nCf5UQkoScZMuYY5KmGQLnbAou1p37f40eDDPlAlKHPd+5bqK4fO7Ab
wt7OIGf9tg6s/IOcr/PgmPh+tDtbDneyzVjX8RsQsx4fSIPSykLqvPZMMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI4cwd6Lru3hhbupFcsHMszLVrNeMB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvamh6QjNvdXU3ZUdGdTZrVnl3Y3l6TXRXczE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi
LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsHMA0G
CSqGSIb3DQEBCwUAA4IBAQCdZ1R2anZV+dNSBNQaAeOqNAgHMer3zR75YwpYrOQs
/e/0DJX7zZ5W6Cpxmb0ms4I/tzSVPHivOz90h7mwMDhMLPCcv4jYNG0JtcP1vIOL
pxvS1eneWJjzdLstpEmC7hhBwtgOCvvp9SFETukRzSxv95O63vF+VlEZvSv0aP8S
yCM9eh6kh9DSjLmwqZOzxsTna5jMxRFmDDn2cUmJYvvAeqmgU1NOQgxOb8aFt3jw
0eeyl5AHljkAs7E0kaZXGRAimG5lgIqhOJMbnvhgE+NSMLx6eYSITP2ci/bdQ4An
wAblJHsoBuhWi7cGY0iLuo3hzHoPJvKxdaHGTprSxHHq
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:23:53 2025 by rpki-client