Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/sHQalHC2kGBmqdUs9aj081_Resg.roa
File: sHQalHC2kGBmqdUs9aj081_Resg.roa (raw, json)
Hash identifier: ygo+vrz6Ex95kvWb5fe7rBFq1CBBbH1XzoihEVkVxBQ=
Subject key identifier: B0:74:1A:94:70:B6:90:60:66:A9:D5:2C:F5:A8:F4:F3:5F:D1:7A:C8
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 01982C310073B931EE108715E5C7660B903A
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/sHQalHC2kGBmqdUs9aj081_Resg.roa
Signing time: Mon 21 Jul 2025 08:54:25 +0000
ROA not before: Mon 21 Jul 2025 08:54:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398704
IP address blocks: 185.129.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:31:00:73:b9:31:ee:10:87:15:e5:c7:66:0b:90:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jul 21 08:54:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0741a9470b6906066a9d52cf5a8f4f35fd17ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:4a:0d:83:29:09:58:f4:04:5b:57:83:db:
e1:c9:f6:ea:81:09:52:98:d9:33:8c:f4:8e:eb:96:
88:d8:a8:f9:f6:db:89:e2:bf:52:4e:1a:4e:46:e0:
22:19:00:57:e0:6c:4d:19:4d:7a:d0:82:9b:1b:a0:
37:30:aa:c2:fc:9d:a8:31:f4:9b:b1:b9:01:2b:98:
0e:14:6c:7c:6d:4f:3a:d0:e8:00:07:70:2a:ed:c1:
13:8f:c6:5c:1d:a5:2e:81:d6:75:14:58:d6:20:6e:
d3:ee:5a:e8:7b:7b:8f:69:0c:0b:7f:08:dc:c4:d7:
a6:63:05:66:14:3e:75:12:fb:e1:35:b0:f0:2f:a2:
68:43:75:f4:fe:b0:f5:c5:b2:70:97:cf:cd:48:9e:
1f:67:04:04:0f:de:0e:d4:e7:88:06:9c:65:51:b6:
b4:d0:9a:1f:9f:82:69:6d:ce:52:8e:67:ec:66:17:
ce:69:eb:19:51:08:ea:57:2e:63:8f:22:de:84:f4:
b6:e7:12:20:76:8e:2c:b0:72:3b:fc:86:5a:b7:2e:
95:16:d6:d6:53:21:8e:35:38:cc:59:e2:30:77:f9:
6b:f5:b5:65:2f:c0:4d:84:67:5f:0b:a8:71:6d:25:
40:61:2a:26:58:55:74:d9:b2:2f:87:e3:c7:41:ff:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:74:1A:94:70:B6:90:60:66:A9:D5:2C:F5:A8:F4:F3:5F:D1:7A:C8
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/sHQalHC2kGBmqdUs9aj081_Resg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.208.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:80:75:60:c7:a2:4c:b7:fa:cc:2a:69:6a:42:88:28:5b:7a:
66:c5:15:84:1b:55:5c:57:cb:56:33:bc:32:9d:05:70:55:91:
c6:e8:08:1f:e7:c6:a8:b1:6b:16:2a:be:28:15:30:57:16:a9:
77:20:57:84:42:2e:3b:72:04:57:91:6e:be:de:23:98:3f:36:
5b:d9:0f:77:3a:78:c9:81:be:a9:6b:4b:9c:ba:0f:5c:0b:9f:
7c:fc:18:96:41:e6:77:e4:d3:af:bb:26:dc:d3:08:e0:ee:f0:
f3:10:71:5e:11:cc:34:46:12:0e:49:af:13:0f:ef:c1:c5:60:
fb:08:6b:a9:50:81:73:de:fa:1f:0b:fe:f1:c4:4e:71:24:a7:
6d:00:45:4d:f5:b6:bd:df:f9:14:8d:6f:65:50:56:8c:15:8d:
84:db:a3:bf:a0:f2:4a:cf:f9:71:60:7c:52:f2:be:29:85:39:
8b:e9:e8:af:4e:d0:1d:6a:16:9c:8d:aa:20:31:40:ad:f5:69:
ee:8f:ee:fa:9e:0c:05:37:32:1b:25:c7:1d:d6:7b:2b:67:0a:
c4:3e:67:cb:a7:69:9d:cb:5a:d0:8d:87:57:be:0d:b3:55:0f:
70:20:be:d5:31:b3:61:52:6c:f8:0c:6e:fa:e1:75:5d:25:10:
ca:f0:eb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:07:29 2025 by rpki-client