Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/giTh8Ebv-slnkkaTofMNpLbZvzM.roa
File: giTh8Ebv-slnkkaTofMNpLbZvzM.roa (raw, json)
Hash identifier: bO2clbkcE8o6+abtqVuqTC73svDuw3XhC1F4AhqNJOA=
Subject key identifier: 82:24:E1:F0:46:EF:FA:C9:67:92:46:93:A1:F3:0D:A4:B6:D9:BF:33
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 0198EBAF8105F1BA260199A417B3CAFCD4EB
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/giTh8Ebv-slnkkaTofMNpLbZvzM.roa
Signing time: Wed 27 Aug 2025 13:20:04 +0000
ROA not before: Wed 27 Aug 2025 13:20:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51858
IP address blocks: 176.120.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:af:81:05:f1:ba:26:01:99:a4:17:b3:ca:fc:d4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Aug 27 13:20:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8224e1f046effac967924693a1f30da4b6d9bf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:ef:45:60:2a:05:73:aa:de:2f:22:bf:a8:
b6:72:95:06:d3:c4:3a:94:c9:5e:a4:7b:45:14:21:
55:48:9e:06:c6:29:e1:80:f7:1d:8e:82:14:e2:e6:
01:19:fd:d2:86:4e:d4:b2:53:9c:5f:19:b6:56:dd:
59:02:05:97:c2:46:d3:97:a9:3b:f7:c5:3e:55:5e:
f3:e3:86:dc:6e:aa:fb:ec:7b:19:0d:f9:e5:88:20:
66:57:50:38:5b:37:ee:18:1d:16:b6:d2:4a:ee:cc:
32:47:ac:0c:14:72:73:42:a9:07:5b:47:92:28:36:
0e:83:b3:55:36:24:e5:13:1b:f0:f5:43:6f:06:4e:
c3:ff:c4:b5:e7:56:29:3a:0b:80:b4:6a:ef:51:0b:
3f:12:1a:a3:2d:af:4c:36:59:41:c7:2f:b7:e6:07:
e1:c3:7f:96:ff:b7:b8:78:74:9f:b4:a5:3b:96:d4:
db:ca:e9:f3:52:d2:4e:16:b7:83:55:09:cd:30:d9:
14:80:6c:f7:ba:c8:30:4e:7b:3a:72:b6:75:42:99:
89:92:00:c3:61:d3:f0:ce:7c:5f:69:fb:57:47:db:
23:91:d3:fa:03:b4:dc:8d:a3:8f:c5:50:e4:18:ba:
40:e1:99:2e:4e:ae:40:d9:40:32:e6:ab:77:0d:54:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:24:E1:F0:46:EF:FA:C9:67:92:46:93:A1:F3:0D:A4:B6:D9:BF:33
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/giTh8Ebv-slnkkaTofMNpLbZvzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.98.0/24
Signature Algorithm: sha256WithRSAEncryption
35:8d:fa:bd:7b:78:ee:ad:17:18:a6:35:ea:69:58:31:17:94:
ac:1b:31:b1:72:1f:90:5c:50:9a:3e:f9:9d:43:1e:0a:a9:3c:
ca:d6:87:c2:91:5b:27:23:02:23:a6:89:1f:a8:e5:33:64:9b:
16:19:0b:55:cf:37:16:3b:64:ab:d9:cd:97:7d:a5:55:08:79:
80:a1:22:0d:46:84:2b:f1:bc:e2:22:82:7a:e6:9f:fb:3d:87:
94:fa:3c:75:67:9e:ea:47:3c:0c:ec:b0:f6:f4:66:e9:ba:53:
c9:f6:17:35:a0:5f:5e:52:64:1f:a3:4a:76:3a:e6:51:27:b5:
5a:16:d3:8b:56:d4:17:ee:84:7e:af:4a:de:ac:d4:37:fc:d9:
31:01:40:64:80:30:29:9a:5c:22:31:dc:6a:85:4d:94:da:83:
c4:64:27:d1:bc:3b:82:c1:7b:79:47:9f:8a:02:01:3b:9f:7b:
e6:1e:77:53:44:db:63:a8:58:d5:07:c7:06:8a:7e:f2:64:c3:
1d:b7:d1:95:c1:d3:73:d9:b0:8d:1f:e2:06:00:44:82:32:cf:
d2:48:29:a9:a6:ca:57:5d:0d:41:32:f5:1c:fa:ee:bc:d8:45:
64:19:ac:79:f3:bb:29:de:cb:a6:54:9a:40:bd:3e:5d:d4:9b:
57:02:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:29:02 2025 by rpki-client