Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/6h5fVqp2myypb-eBCHxV-qnglhk.roa
File: 6h5fVqp2myypb-eBCHxV-qnglhk.roa (raw, json)
Hash identifier: ZaO1YIuZK1aJ4bq0FVDrgZWOhjGCW0XbzAeErXreqcU=
Subject key identifier: EA:1E:5F:56:AA:76:9B:2C:A9:6F:E7:81:08:7C:55:FA:A9:E0:96:19
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 0199B68AE871EE534DD7CBA87D15A863B180
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/6h5fVqp2myypb-eBCHxV-qnglhk.roa
Signing time: Sun 05 Oct 2025 22:43:00 +0000
ROA not before: Sun 05 Oct 2025 22:43:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44064
IP address blocks: 92.118.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b6:8a:e8:71:ee:53:4d:d7:cb:a8:7d:15:a8:63:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Oct 5 22:43:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea1e5f56aa769b2ca96fe781087c55faa9e09619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:c0:9e:7c:7b:28:cb:7c:a1:d9:5f:18:7a:
d4:db:92:89:ff:15:9c:5c:8f:12:57:07:48:66:e1:
6c:62:56:b5:3f:49:94:2c:1a:7c:bf:7d:99:cd:2c:
02:d6:2c:3a:06:fb:da:c3:6f:6a:4b:96:2a:a8:19:
b8:53:0b:6e:1e:3b:b7:eb:09:3b:4d:2f:0a:d0:1d:
88:11:38:1e:6f:b6:52:69:22:2a:09:d9:1e:fe:e9:
19:b3:48:63:8f:c5:8f:75:ae:bc:b6:dc:df:5f:d3:
71:63:7a:8d:ab:0e:54:cc:2e:d3:e2:42:6a:4e:43:
b3:e1:c3:b4:da:63:3c:de:b9:09:3f:a6:cd:e6:56:
ca:af:90:11:2e:25:62:87:5a:84:26:9d:94:b1:7c:
b0:df:a4:82:bd:ea:b4:2f:52:dd:d3:50:22:23:d6:
ee:d3:c4:d9:32:32:f7:1b:0b:3c:a9:60:7f:81:ae:
85:04:c4:e0:2b:49:0c:a7:16:08:23:f9:31:bf:c6:
0d:70:30:19:7f:04:40:06:09:28:c4:44:5a:d0:88:
eb:4b:82:00:46:ee:bb:7b:99:b5:eb:65:79:88:a8:
57:ef:7e:48:9b:24:54:dd:b4:31:a2:9b:3e:a9:d4:
86:c8:d6:12:ef:b2:c0:dc:98:fe:62:7f:4f:a2:36:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1E:5F:56:AA:76:9B:2C:A9:6F:E7:81:08:7C:55:FA:A9:E0:96:19
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/6h5fVqp2myypb-eBCHxV-qnglhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.143.0/24
Signature Algorithm: sha256WithRSAEncryption
33:a9:0b:ab:00:cb:13:96:f9:f2:b7:cb:b4:f0:0b:bd:b2:c6:
96:c9:20:71:ea:c8:4b:c5:67:43:3a:53:b8:95:33:9e:57:76:
6d:5c:12:bf:74:37:f6:b6:25:2e:69:2a:93:de:5e:df:d3:a6:
ba:80:fe:44:a5:88:5f:5b:70:6d:3f:e7:75:a7:52:d9:74:77:
29:1b:0e:8c:81:08:65:6b:0a:cb:49:03:38:99:69:d5:c4:53:
e9:3b:e6:e3:9a:be:73:89:ef:5e:b0:57:61:f4:41:8e:52:2f:
7c:82:55:fc:3e:7b:56:46:ce:de:52:91:f8:dd:0f:9d:67:f6:
f7:6a:b9:be:f2:f7:3a:93:41:c1:34:a4:8a:08:55:97:f7:20:
cc:19:0d:d3:10:af:be:23:27:f2:7a:53:31:65:68:f3:42:8f:
45:af:dc:ab:a7:6b:55:9c:a1:0e:d7:cf:31:a9:d8:1f:8e:47:
dd:c9:3f:06:75:76:44:0d:b3:17:c8:75:4a:75:e7:c5:b5:96:
bf:52:7a:d3:8d:64:ec:ca:e8:ea:e5:a6:54:1d:39:81:1f:06:
22:b8:16:b3:74:d8:0c:84:db:cf:67:44:32:35:d3:a9:6d:ad:
2a:35:3e:f2:f0:68:d8:1d:77:de:1a:2a:bf:a2:a0:d1:60:8a:
6d:1f:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:40:55 2025 by rpki-client