Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/HyUq2HM4kVyO5I9xjv23WW5w1ic.roa
File: HyUq2HM4kVyO5I9xjv23WW5w1ic.roa (raw, json)
Hash identifier: OoUZqAFbwPuNe3DMemRAFjc9wb0LotNFxJCnVpSwfHc=
Subject key identifier: 1F:25:2A:D8:73:38:91:5C:8E:E4:8F:71:8E:FD:B7:59:6E:70:D6:27
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0197631D5BEEC4B9D8505E17262F63F6A7E4
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/HyUq2HM4kVyO5I9xjv23WW5w1ic.roa
Signing time: Thu 12 Jun 2025 07:49:17 +0000
ROA not before: Thu 12 Jun 2025 07:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207018
IP address blocks: 185.168.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:1d:5b:ee:c4:b9:d8:50:5e:17:26:2f:63:f6:a7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jun 12 07:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f252ad87338915c8ee48f718efdb7596e70d627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:fa:cd:5d:64:63:c7:4e:26:7e:c9:c4:5d:
2b:3e:92:1d:39:ea:5e:54:3f:f8:e9:f4:12:95:66:
9b:ab:4b:8a:3a:8d:6e:96:4e:27:70:6e:1c:b0:38:
21:27:a5:98:9d:04:51:59:3b:3b:5c:04:61:1d:60:
75:05:15:49:dc:78:f2:c5:ef:21:d8:16:cd:e9:98:
1c:3a:27:c3:d0:94:a0:58:02:d9:f5:c8:1a:70:94:
74:e6:6b:a3:31:89:36:40:ae:01:35:14:9b:f4:f4:
ae:5a:09:36:ca:a8:8e:6b:72:2f:00:ce:0b:f9:33:
bc:c7:dd:38:6c:92:33:af:e0:14:bb:4c:dd:72:87:
b9:84:22:9d:db:54:7f:ae:b8:1e:b1:24:e9:d6:93:
3b:89:41:15:db:1d:a3:76:cd:0e:05:ad:3f:ac:00:
c6:7c:44:2d:66:e9:b9:39:46:4e:67:ef:b6:d0:3b:
0f:33:9c:c7:67:9d:42:cc:9b:f6:22:f3:3d:8c:3e:
d3:aa:6a:e9:5a:a0:1f:19:c0:07:af:04:05:d5:82:
ca:4f:93:07:a2:1c:07:f7:8d:d7:b6:cd:ce:d9:e7:
1e:27:87:7a:8f:80:ad:97:33:29:e9:8f:c1:25:3f:
92:fe:21:d5:9b:9a:06:fa:aa:7c:09:37:dd:08:a3:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:2A:D8:73:38:91:5C:8E:E4:8F:71:8E:FD:B7:59:6E:70:D6:27
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/HyUq2HM4kVyO5I9xjv23WW5w1ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:4b:bd:87:ab:ba:c8:49:c6:c6:1a:20:d9:01:8c:9a:25:f8:
52:99:4f:22:da:e9:a4:5e:90:c0:51:1c:86:d4:b4:74:08:bb:
c4:9d:02:6c:f8:21:a9:aa:98:b9:22:9f:81:e7:a3:e5:a8:eb:
72:d9:2e:b8:c7:99:dd:c2:2d:7e:84:23:e7:7c:04:98:5b:db:
e0:27:bf:92:12:ee:81:4e:9d:ce:d9:b7:1c:8c:b7:b0:5a:83:
45:d4:ef:06:60:9d:e8:d1:57:a1:00:f0:e2:d4:22:2c:1a:a2:
ec:e7:a7:d7:77:db:b0:8e:97:3e:57:b3:2a:23:c0:d3:68:17:
c1:11:d4:34:55:44:e8:bd:84:1f:a4:55:07:37:34:c9:ba:bc:
ad:5e:6c:7e:42:89:02:e7:42:cd:8d:a6:41:c4:ce:99:cf:8f:
ca:0e:32:d6:5c:b3:9d:9c:58:6a:ea:80:fa:57:76:89:b6:42:
ec:8e:ee:e2:0e:2d:19:06:36:2e:23:b1:c2:c2:fe:d0:e9:e8:
6e:45:e3:b9:5a:90:3d:eb:eb:df:45:b7:a1:6e:9a:a7:6c:72:
49:0a:ba:8b:97:9c:f3:fd:60:65:e2:b5:19:f4:4c:3a:29:a1:
ea:b3:75:e2:96:f1:b9:41:d1:4e:ee:a5:4e:c1:5c:76:b8:ad:
d0:ce:c1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:44 2025 by rpki-client