Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/HoBHSojBH_q68C4w7hmSMU3ml04.roa
File: HoBHSojBH_q68C4w7hmSMU3ml04.roa (raw, json)
Hash identifier: vzJ5fh/VoqyIbKjmWS+MuYgcJVPGYo9cmJc1XDpmurM=
Subject key identifier: 1E:80:47:4A:88:C1:1F:FA:BA:F0:2E:30:EE:19:92:31:4D:E6:97:4E
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 0198ADB39638038648F995EBA6B7038E6EB7
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/HoBHSojBH_q68C4w7hmSMU3ml04.roa
Signing time: Fri 15 Aug 2025 12:28:04 +0000
ROA not before: Fri 15 Aug 2025 12:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207529
IP address blocks: 2a0f:7803:fd20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:b3:96:38:03:86:48:f9:95:eb:a6:b7:03:8e:6e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Aug 15 12:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e80474a88c11ffabaf02e30ee1992314de6974e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5c:89:4c:c1:f7:ff:86:51:6b:eb:7f:cf:7d:
e2:ab:7a:bd:3a:4d:54:62:01:cb:b4:f3:8d:53:d7:
63:e4:f1:1f:56:61:41:e1:ab:63:97:66:52:15:6b:
d1:53:15:4f:47:b8:83:59:7f:5d:88:6b:0f:71:85:
9e:13:64:3a:58:59:1c:3c:fa:26:79:ce:e4:78:7e:
80:8b:4d:9f:7b:c3:f3:05:71:a4:94:0b:44:0c:06:
07:a1:d1:0c:fa:8d:fa:35:a2:85:3e:a7:2c:d1:dd:
c0:ad:b8:a6:15:77:e0:b1:5c:fc:41:3a:01:cf:8b:
a7:7a:1e:95:a0:61:9d:89:50:b3:77:a5:0a:6f:b5:
e5:4c:79:47:f9:36:2a:0a:5c:21:ca:21:a7:91:26:
8f:f9:97:0a:38:41:55:eb:00:33:c0:41:f8:2b:82:
41:82:1e:b1:a0:ad:80:95:5c:0b:70:f8:5a:90:de:
99:43:4a:9f:f6:27:a3:bd:cb:32:3a:fb:af:90:a0:
25:2a:ee:11:5d:2d:a4:ee:05:3c:3c:8b:67:30:0a:
d6:bc:4d:28:56:bc:ee:e8:de:25:e6:92:a8:79:e0:
17:0e:6f:9d:66:ad:53:78:fd:45:d1:74:2e:ce:96:
13:90:b9:17:5c:09:cb:47:5a:d0:f9:42:db:6e:c0:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:80:47:4A:88:C1:1F:FA:BA:F0:2E:30:EE:19:92:31:4D:E6:97:4E
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/HoBHSojBH_q68C4w7hmSMU3ml04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fd20::/44
Signature Algorithm: sha256WithRSAEncryption
9e:57:41:bb:f5:38:15:60:36:28:8e:67:cd:8f:6d:3c:a4:e4:
46:04:54:09:54:bf:15:3b:f5:70:07:75:7c:e9:aa:60:18:92:
e1:1f:be:98:5f:b6:d1:af:16:1f:ac:b4:c8:51:55:86:c0:dc:
58:b5:61:85:65:d8:1f:de:67:e5:62:2d:fa:dc:20:cb:81:6e:
30:a4:59:88:f5:3a:20:9b:91:b9:df:15:d2:5e:14:e9:d7:68:
11:11:91:e0:3d:89:32:ee:f5:4a:3c:03:37:bd:b2:65:83:99:
01:a5:7c:84:6e:e5:aa:d3:9e:22:a4:93:6c:8f:71:c0:0f:78:
49:8a:36:02:58:f8:ff:e6:d4:ee:74:af:73:a0:23:37:6d:8b:
c6:3b:72:86:63:0e:8c:97:f0:67:01:a9:48:87:ad:91:90:a1:
d2:55:3e:87:55:69:cf:e2:0e:d5:26:79:0f:89:51:a7:7f:4e:
50:f3:de:66:b2:ed:55:f3:66:8d:77:3d:46:12:79:13:85:7c:
fc:70:c8:59:91:c4:f3:64:7c:61:ad:cd:ce:d5:a9:16:bf:7b:
95:69:6b:7c:c1:94:cb:77:7f:ab:23:db:5b:f0:f0:31:c7:05:
14:a1:4a:f0:d1:3f:a8:a1:f7:e0:9e:9b:1c:e1:01:7f:87:e7:
44:f7:16:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:48:15 2025 by rpki-client