Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/hkDzJJYa_8AXZWHuwxhkvXYeqBU.roa
File: hkDzJJYa_8AXZWHuwxhkvXYeqBU.roa (raw, json)
Hash identifier: jBdI40IIexbS7hFgDYQGpUFEN6SpLEVlHNlns3J1TE0=
Subject key identifier: 86:40:F3:24:96:1A:FF:C0:17:65:61:EE:C3:18:64:BD:76:1E:A8:15
Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial: 0199B8922C490732DF96DF458E3D03BF4611
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/hkDzJJYa_8AXZWHuwxhkvXYeqBU.roa
Signing time: Mon 06 Oct 2025 08:10:11 +0000
ROA not before: Mon 06 Oct 2025 08:10:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57280
IP address blocks: 185.60.172.0/22 maxlen: 22
185.60.174.0/24 maxlen: 24
185.60.175.0/24 maxlen: 24
195.10.196.0/24 maxlen: 24
2a03:5580::/30 maxlen: 30
2a03:5584::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:92:2c:49:07:32:df:96:df:45:8e:3d:03:bf:46:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Validity
Not Before: Oct 6 08:10:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8640f324961affc0176561eec31864bd761ea815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:66:ca:54:fc:12:ec:dc:7e:50:67:fb:e1:
c8:68:5c:1e:53:02:54:a6:d2:2f:1a:7e:2e:d9:e1:
71:be:bc:a3:79:4d:83:68:e3:cd:11:13:9e:c8:a1:
c5:23:27:1b:69:f7:4b:57:63:ec:07:83:5a:b1:99:
3c:85:43:8a:bb:00:1b:a3:7d:4d:8c:7a:45:31:2f:
00:da:3f:97:97:ea:b9:3c:9f:ae:51:85:81:07:fe:
ca:4a:76:1a:64:6d:b1:4c:32:00:22:e5:a6:5e:d1:
9c:15:68:49:ff:16:20:43:7c:c8:ac:d5:b4:cf:92:
6d:f8:04:76:ca:a6:49:3b:28:43:58:af:cb:c6:0c:
8e:e3:c3:f5:c5:fd:6e:66:df:08:42:af:de:5e:02:
24:d6:8c:10:5d:30:da:6b:0e:95:5e:6b:0d:1e:1b:
a8:53:c0:df:84:75:f8:ca:41:e1:ee:56:51:7f:81:
79:8f:03:92:5a:4a:10:05:6e:9f:3a:1d:f8:33:dc:
aa:b3:99:59:bc:a6:74:2d:67:f1:03:39:ae:a0:d2:
ce:cd:64:1a:bf:e2:dc:26:d6:ab:94:69:db:82:1c:
44:a3:31:32:86:3c:d5:ea:c7:46:8e:a6:e4:7a:3d:
2f:a3:40:ec:23:ba:8d:1c:c5:bc:e5:c0:af:b2:b9:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:40:F3:24:96:1A:FF:C0:17:65:61:EE:C3:18:64:BD:76:1E:A8:15
X509v3 Authority Key Identifier:
keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/hkDzJJYa_8AXZWHuwxhkvXYeqBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.172.0/22
195.10.196.0/24
IPv6:
2a03:5580::/29
Signature Algorithm: sha256WithRSAEncryption
3c:86:a2:5f:5c:71:cb:5d:8d:a7:b3:75:d2:ad:21:ea:d2:3e:
aa:02:5e:f9:d2:26:85:69:7c:e3:19:0d:0e:68:4d:ed:a7:a1:
e2:3d:26:29:f3:0a:3f:83:7c:c9:39:27:7f:84:9e:9c:28:bb:
27:31:f8:1a:36:47:f5:fa:89:e6:8a:18:b5:b8:1e:a4:92:20:
42:a1:c6:0f:55:33:b3:40:51:b9:f5:40:cf:c0:37:7e:4e:59:
a9:87:cd:71:f3:d9:62:d0:76:dc:d9:f2:e5:53:da:b7:3a:43:
63:7e:01:78:5c:73:15:77:e3:08:57:2c:1b:02:13:6d:94:a6:
58:1d:e6:86:99:65:55:c1:be:eb:d9:64:87:1c:b5:c3:a6:1a:
52:31:37:3f:08:30:5b:af:5c:0a:41:01:18:a6:c5:37:fd:85:
61:5f:47:3d:4a:9c:84:45:29:80:3b:92:a4:de:36:bd:d9:d7:
7f:04:87:bc:9e:3e:9f:71:59:98:97:2b:da:cf:77:d2:51:94:
52:cc:c1:a5:26:e2:7c:7c:00:9e:45:d8:3c:ff:d9:9d:99:6f:
24:ad:1d:43:23:12:59:09:6e:07:42:5c:2a:17:53:9c:87:42:
3e:28:c6:10:1a:db:92:70:05:b8:60:72:b1:c2:68:9e:34:bf:
cd:10:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:07 2025 by rpki-client