Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/HTIT17mRc9e31Xn9TEUf-JUYEKw.roa
File: HTIT17mRc9e31Xn9TEUf-JUYEKw.roa (raw, json)
Hash identifier: o+qmexnhIWhbYDzE4H1wC704iZvwZtN0i6d8jZKUoCg=
Subject key identifier: 1D:32:13:D7:B9:91:73:D7:B7:D5:79:FD:4C:45:1F:F8:95:18:10:AC
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0197CB5608BB4EC7A61A91AD14061E0858A2
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/HTIT17mRc9e31Xn9TEUf-JUYEKw.roa
Signing time: Wed 02 Jul 2025 13:31:42 +0000
ROA not before: Wed 02 Jul 2025 13:31:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213967
IP address blocks: 2a05:4144::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:56:08:bb:4e:c7:a6:1a:91:ad:14:06:1e:08:58:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jul 2 13:31:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d3213d7b99173d7b7d579fd4c451ff8951810ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:77:97:2f:d3:73:10:28:a7:2f:fd:93:48:
49:c2:a8:6c:12:e3:35:6e:0e:3f:7d:ad:ef:38:dc:
62:81:8a:4f:50:ce:3b:6a:c9:a2:2a:02:95:c8:97:
6e:d9:92:64:1c:e1:c7:3c:59:a9:14:27:c0:a6:7d:
66:d9:fb:2b:9f:d3:02:3e:f6:0f:29:03:fc:cf:27:
fd:c6:7b:86:bd:42:1d:17:09:61:0c:a1:c4:db:0f:
5a:b1:8a:72:6c:90:9d:c4:86:90:32:40:5f:b9:e5:
49:60:87:b0:26:d3:72:d2:35:e7:e5:3d:87:e9:d6:
85:26:ff:f8:29:55:c7:d4:34:29:d3:be:ca:17:25:
6b:92:7b:58:80:64:cd:5c:63:f4:06:8d:eb:d0:b9:
2c:32:79:75:61:f1:66:4d:1a:1f:e1:75:e4:ad:b0:
31:ea:84:62:b8:90:ba:b3:08:46:3f:5c:7c:12:b7:
0e:9c:c2:41:1a:99:be:8d:fa:43:3c:b8:9a:92:d0:
c7:8b:39:6e:ee:27:82:42:d1:ed:d9:64:8d:d7:13:
85:9f:84:a9:e6:ff:b0:22:ec:8a:1d:3f:fd:b2:c9:
38:4b:7d:48:da:f1:f6:73:c1:3f:04:f8:0d:8d:e7:
be:73:3b:b7:f4:b4:76:21:e5:be:ab:a5:76:ad:62:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:13:D7:B9:91:73:D7:B7:D5:79:FD:4C:45:1F:F8:95:18:10:AC
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/HTIT17mRc9e31Xn9TEUf-JUYEKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4144::/32
Signature Algorithm: sha256WithRSAEncryption
5a:fc:57:a7:de:f2:8d:ac:35:62:f4:9e:6c:f3:eb:aa:ca:3f:
ee:dc:76:a2:1a:29:71:85:85:46:25:64:2a:5d:9c:dc:be:1a:
40:d4:e0:5b:3d:d7:3f:d3:88:73:70:50:cc:15:21:b2:44:db:
07:36:83:84:a5:01:14:49:60:2b:a6:f0:47:ac:b0:42:1f:2f:
7b:b5:41:6b:94:48:5f:60:2f:67:ed:d8:7d:5b:02:00:d0:ff:
85:2a:1f:df:47:fa:82:77:69:24:26:74:60:09:0d:34:5e:10:
f7:b5:28:2e:d7:4a:84:19:c0:e8:1d:08:1f:88:2a:c3:0c:fb:
df:99:32:1d:b7:7f:4c:fd:c7:1e:83:ba:cd:d8:b9:ae:91:4c:
bf:53:1b:af:8d:50:e0:0d:13:52:24:03:63:63:b0:02:8a:a5:
bc:db:cb:21:53:e2:56:17:2b:40:6e:05:e7:1f:32:b9:8b:86:
d0:da:70:50:8a:fd:7b:23:09:7b:87:9a:c2:6c:6a:0f:86:5c:
28:a4:f8:9c:f1:d5:b6:9d:b8:e6:ac:2b:22:47:a7:11:78:c9:
b1:9b:ad:ce:13:88:f6:80:3a:28:60:6b:08:0b:2a:60:67:be:
23:21:3e:b8:fd:11:c9:8b:73:3e:a7:af:aa:da:db:de:16:b0:
19:3d:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:30:40 2025 by rpki-client