Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/_hwoOnSYlfjUaTComm-3hBe2zs0.roa
File: _hwoOnSYlfjUaTComm-3hBe2zs0.roa (raw, json)
Hash identifier: PBuw/FbCVTJ5hqhxHvWYLj5Cm4bbcUK+XRb8x/VJhJI=
Subject key identifier: FE:1C:28:3A:74:98:95:F8:D4:69:30:A8:9A:6F:B7:84:17:B6:CE:CD
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019996595DF9773AF678CDC6BBF9C5C95ACB
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/_hwoOnSYlfjUaTComm-3hBe2zs0.roa
Signing time: Mon 29 Sep 2025 16:41:02 +0000
ROA not before: Mon 29 Sep 2025 16:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215004
IP address blocks: 176.118.177.0/24 maxlen: 24
2a14:3244:beee::/48 maxlen: 48
2a14:3244:beef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:96:59:5d:f9:77:3a:f6:78:cd:c6:bb:f9:c5:c9:5a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Sep 29 16:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe1c283a749895f8d46930a89a6fb78417b6cecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:5c:32:bf:a3:56:3c:0f:f6:83:54:f5:08:
4c:b3:fd:11:67:73:ec:1a:84:84:63:20:b9:a3:64:
7a:a7:6c:a7:9a:a9:2a:63:62:4d:02:ef:ed:de:f9:
bd:49:28:2e:91:e2:03:72:93:89:47:31:d1:d9:76:
93:58:1e:e4:ac:b8:8b:74:d4:da:58:13:3c:72:5a:
00:cb:b8:ba:ce:a3:19:0b:12:1e:d7:7e:21:24:37:
e0:af:9b:75:63:6e:05:b5:71:b7:99:1e:fb:7b:9c:
8c:e5:8e:0d:f2:7c:4e:c6:42:a7:8b:fe:92:33:30:
01:04:6c:36:52:ca:ee:47:8e:8c:69:46:0f:3c:e5:
60:bb:af:03:45:e0:af:ae:ce:d3:42:b4:12:24:97:
02:a3:a8:db:86:f8:ae:b7:70:be:a2:d5:a9:79:88:
71:6b:8e:ef:33:ad:fc:01:70:c7:da:5b:19:eb:e1:
95:6e:1b:17:89:2d:54:01:51:1c:eb:f0:76:14:cb:
6c:45:2a:46:4a:f5:dd:31:28:6d:00:e2:c9:5b:59:
b5:a2:91:59:21:0e:29:98:20:8d:3e:15:91:6e:da:
45:be:15:84:f1:76:3e:a6:4d:ef:ab:a1:9b:24:72:
1b:81:01:a8:d2:e4:6e:72:91:53:0d:53:b0:96:14:
0d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1C:28:3A:74:98:95:F8:D4:69:30:A8:9A:6F:B7:84:17:B6:CE:CD
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/_hwoOnSYlfjUaTComm-3hBe2zs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.177.0/24
IPv6:
2a14:3244:beee::/47
Signature Algorithm: sha256WithRSAEncryption
89:57:bf:b1:f9:3b:9a:24:8f:92:7c:50:5b:78:a8:ea:6d:6f:
43:0c:13:9b:ea:0a:cb:b4:2d:b8:7d:6a:26:48:a8:29:84:6d:
d9:cd:9a:8e:ab:46:0f:14:77:44:30:f9:be:a8:53:e4:be:76:
0d:66:ff:fe:bb:23:31:8d:b9:e3:88:6c:97:1e:e0:24:ea:ba:
4b:7d:d1:74:13:c2:da:3e:c4:91:56:af:ec:fa:ab:e4:b5:72:
28:0b:3c:e5:89:cd:05:38:70:2f:ab:60:49:6e:cb:0a:90:e1:
7b:34:51:50:87:15:b6:b7:43:5e:3b:c7:92:4f:3e:1c:83:41:
9d:a2:8c:52:47:e6:a4:8d:1c:2b:de:ba:a0:04:7b:df:a1:81:
84:9e:c4:bd:59:74:b0:2c:53:e1:40:43:73:ed:92:50:38:22:
05:70:5f:0c:6c:1b:eb:4d:b1:3c:ca:00:ea:e9:b1:8b:d7:f2:
00:07:bd:88:ef:8c:1f:6a:30:61:70:c6:4b:a4:1d:d7:1c:a9:
38:db:87:b8:3a:cd:cd:7d:fb:b5:0d:40:d1:6a:49:55:c5:01:
8f:56:fc:63:8b:a9:54:02:ae:6f:ac:0f:18:d4:d1:d4:b6:1c:
26:ab:ec:52:45:19:e8:ab:f9:27:c8:ef:49:a7:6c:a5:a3:d5:
d5:41:f0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:39:41 2025 by rpki-client