Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/H0T-34z9d7yix90gKZU4Rf5EtFo.roa
File: H0T-34z9d7yix90gKZU4Rf5EtFo.roa (raw, json)
Hash identifier: AXU2dsCqjiHftVtLlFWCzD90rGetVRjiynBOVxzbz0U=
Subject key identifier: 1F:44:FE:DF:8C:FD:77:BC:A2:C7:DD:20:29:95:38:45:FE:44:B4:5A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0197EFDAE35648B7E470D22E9960CAFD4A90
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/H0T-34z9d7yix90gKZU4Rf5EtFo.roa
Signing time: Wed 09 Jul 2025 15:43:09 +0000
ROA not before: Wed 09 Jul 2025 15:43:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 85.208.105.0/24 maxlen: 24
85.209.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ef:da:e3:56:48:b7:e4:70:d2:2e:99:60:ca:fd:4a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 9 15:43:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f44fedf8cfd77bca2c7dd2029953845fe44b45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:26:b4:52:ae:61:dc:c4:0a:e3:98:91:1d:2f:
49:f0:46:ad:db:b1:14:84:07:90:0b:e5:6c:fd:7c:
bf:0d:30:cc:af:fb:92:34:bc:28:83:5d:63:2c:2f:
33:45:5c:16:b9:8a:04:6f:0b:be:41:86:e5:33:e2:
55:34:0f:b6:19:8a:db:be:ae:ea:11:4f:1c:17:87:
ba:39:ba:02:4b:9f:c3:1c:db:bf:b5:34:21:18:31:
3f:79:db:af:ba:17:00:9f:47:38:cf:79:32:13:e4:
e9:d4:6f:c6:58:a2:df:a8:b9:9e:82:2d:4f:1f:de:
ac:d7:48:3f:c1:77:bd:50:e0:3a:c7:00:7c:c8:4c:
8d:cd:7a:72:47:84:7b:9a:60:52:0d:da:30:62:ad:
71:82:83:f5:9a:55:e9:99:e5:3a:0f:d0:70:e4:87:
0b:64:1e:1b:16:29:c2:51:4d:b2:62:a9:38:75:eb:
81:54:82:7a:5c:1a:48:5c:16:86:25:2e:53:f7:c0:
c8:83:bd:a9:e6:0c:d1:ac:50:1c:ff:72:c0:77:3e:
04:c7:7c:d4:56:f1:f0:75:28:a0:4a:d8:34:e4:2e:
fb:3c:83:81:2e:ee:32:f5:9c:4c:b6:1e:dd:6b:af:
6e:f9:58:c7:04:c9:a0:d0:e8:83:dc:ab:51:64:ed:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:FE:DF:8C:FD:77:BC:A2:C7:DD:20:29:95:38:45:FE:44:B4:5A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/H0T-34z9d7yix90gKZU4Rf5EtFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.105.0/24
85.209.161.0/24
Signature Algorithm: sha256WithRSAEncryption
02:54:79:eb:ad:9e:3d:7f:b4:d1:13:ed:2f:02:3f:c8:59:5a:
9e:72:40:4e:46:8b:cb:25:e1:d3:20:4c:01:37:2d:c0:c8:e5:
bb:7a:f2:dd:e5:03:c6:65:a5:db:2a:6d:51:bc:82:f1:42:bf:
71:66:06:c1:5d:26:8c:41:ca:a5:01:fa:8e:fc:97:35:09:9b:
88:b9:bf:35:12:3c:e8:0c:40:19:5c:06:9d:f2:61:44:c4:63:
33:7e:63:91:86:ed:0e:da:e5:6b:ea:3b:1d:70:00:0c:cd:6f:
c0:3f:32:c8:65:e4:25:39:7c:3b:25:eb:a5:d7:0c:df:46:f6:
fb:ac:5c:1d:cb:38:95:f0:8d:a7:28:32:08:d0:27:b4:20:36:
92:1b:0b:83:f6:ed:8f:c1:95:85:d6:1c:e1:bf:95:68:85:ea:
c9:c5:8b:72:72:80:ba:3e:2a:9d:cb:20:b3:30:b4:0e:30:9c:
ca:e5:39:03:93:49:b0:cb:1b:ca:62:a9:4f:d7:dd:56:c8:21:
4b:05:46:9c:99:f9:60:13:cd:8d:8a:8e:9a:f7:cc:f5:23:8f:
e3:c1:58:36:64:a0:65:40:39:b0:ca:ca:6b:74:f2:7a:f3:31:
b1:7a:86:6d:15:fc:94:7b:53:16:91:29:9b:ef:cf:3e:77:56:
01:c1:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:47:08 2025 by rpki-client