Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa
File: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (raw, json)
Hash identifier: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=
Subject key identifier: 1C:91:0E:32:47:2E:6B:65:34:09:73:3F:0E:02:9D:86:03:95:26:E4
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 01981EA7BB41577E786D420D5E1719F333FE
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa
Signing time: Fri 18 Jul 2025 17:49:25 +0000
ROA not before: Fri 18 Jul 2025 17:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20115
IP address blocks: 161.8.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1e:a7:bb:41:57:7e:78:6d:42:0d:5e:17:19:f3:33:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jul 18 17:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c910e32472e6b653409733f0e029d86039526e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:c0:96:22:29:0f:5f:73:09:50:41:27:76:
de:a7:59:a7:eb:e5:a9:81:4f:99:ce:89:fb:13:af:
b6:02:f5:49:87:ad:9e:39:30:b6:2d:e0:90:f0:99:
59:80:5a:16:80:0c:d2:99:19:19:53:b3:c7:5b:96:
2a:a9:40:a1:28:fc:62:36:d6:75:34:b8:69:90:25:
4a:5c:ad:71:d1:a9:a6:39:90:02:ec:cb:a6:ed:99:
84:2d:b9:6b:f2:bc:d6:22:d4:c8:9c:03:6a:e7:46:
37:f5:81:70:6e:8b:a1:d2:cf:39:0b:ff:6e:c3:af:
bc:bb:c5:9c:1e:0e:92:e8:1e:1b:0b:1a:a8:35:3c:
0a:bd:4b:b8:05:1f:c1:6e:1b:bf:b7:6d:29:58:97:
fc:95:9d:71:28:63:40:f7:9e:11:ab:0c:33:e1:35:
ac:b7:07:18:e6:88:87:f4:0e:44:73:6e:c0:92:05:
92:4b:55:87:fc:81:ca:f5:d8:20:54:29:f1:80:57:
2f:a1:78:d8:d3:ad:dd:d7:50:c3:c5:8d:a1:94:2d:
08:8a:c3:00:97:01:35:a0:1e:51:b0:a7:e2:06:e1:
2d:ec:63:a2:8b:7f:a0:88:26:73:ee:cd:64:12:70:
2c:44:8e:b4:5c:9d:bf:1f:a4:a9:d2:cb:9a:84:9e:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:0E:32:47:2E:6B:65:34:09:73:3F:0E:02:9D:86:03:95:26:E4
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.8.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:e9:73:de:1a:10:73:29:40:aa:03:f6:0e:f6:29:af:73:2d:
af:7b:60:8c:f0:1c:da:36:ce:6f:58:3d:13:fc:2b:68:6c:69:
0c:ec:ae:00:65:2c:06:62:90:44:65:81:19:1a:0b:a0:8d:3c:
c2:29:38:65:b8:09:f3:fa:d7:4b:ef:0b:cb:05:be:07:b4:2b:
14:d0:57:2f:10:61:14:34:b1:77:78:43:e4:7e:b9:64:87:a4:
4a:e1:b1:17:b1:e5:a9:df:98:5f:fb:9e:b4:24:0f:0e:11:8a:
b2:d9:77:fe:9c:82:67:52:ac:8a:9d:cd:7f:f3:5b:ef:d9:5c:
a3:5b:f8:99:83:88:71:10:c3:6f:b2:3a:41:fe:65:e7:d4:0c:
46:ad:dd:fa:50:6a:de:a5:9f:bb:3c:f1:4a:32:3e:2d:63:f0:
3d:dd:58:f0:6a:d1:2c:a6:38:11:a7:62:db:5b:f9:90:ed:ec:
25:99:26:c9:c8:5e:dc:58:48:fd:88:df:55:b5:ae:4a:ae:bc:
2f:15:3a:e4:60:b2:b3:f0:e6:12:f9:76:f7:e0:7c:6f:6e:88:
6b:c4:21:80:a6:3b:9a:85:5e:12:6b:bc:6d:35:78:41:f1:04:
af:cb:c7:a7:1b:74:bd:e4:25:cb:6c:7a:40:d1:3a:2d:cf:5c:
98:33:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:21:42 2025 by rpki-client