Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/HKldyiYx0sP4BotQ-G1ccS2afug.roa
File: HKldyiYx0sP4BotQ-G1ccS2afug.roa (raw, json)
Hash identifier: S4NVBzYTXH0ZvYQ/TjKg8cdi2I+vo34ebyJooJvff+M=
Subject key identifier: 1C:A9:5D:CA:26:31:D2:C3:F8:06:8B:50:F8:6D:5C:71:2D:9A:7E:E8
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 0197F9F2800D31B387FC2BB99E58EE2F9745
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/HKldyiYx0sP4BotQ-G1ccS2afug.roa
Signing time: Fri 11 Jul 2025 14:45:08 +0000
ROA not before: Fri 11 Jul 2025 14:45:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 93.190.124.0/24 maxlen: 24
193.110.189.0/24 maxlen: 24
2a0f:d440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:f2:80:0d:31:b3:87:fc:2b:b9:9e:58:ee:2f:97:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Jul 11 14:45:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ca95dca2631d2c3f8068b50f86d5c712d9a7ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:59:87:23:2e:ed:5c:bc:65:2a:ff:a1:5a:
c4:32:0c:93:05:eb:d6:9c:70:30:ce:e6:3a:8b:38:
a3:df:b7:21:72:46:b9:18:99:15:0c:0d:54:20:34:
1d:2f:6b:79:1f:82:ee:fd:82:a7:1c:e2:9d:91:6d:
df:c9:46:3b:16:a0:8e:13:5a:0d:c5:99:ed:7a:fe:
68:11:a2:5c:39:6b:ab:6d:e6:8d:0a:f5:af:88:f1:
05:f7:31:56:4b:74:11:5d:a3:9a:b4:6e:9e:e0:6c:
19:79:b2:b3:c3:d9:a8:e8:cd:17:52:ca:52:28:4e:
26:51:e3:ae:df:3b:8e:47:d3:a1:07:a1:9a:8c:a7:
65:25:80:12:c2:1a:2e:70:8f:3e:92:3c:ee:00:6b:
0f:7b:ae:8a:23:6c:0e:8e:78:c1:6d:e9:bb:f5:a2:
80:0e:44:d1:46:6b:c8:18:9c:81:70:ae:58:33:5b:
f7:f8:53:7b:1c:76:3b:94:34:45:65:5a:4c:24:19:
53:f1:a2:ee:3d:13:4f:ca:a2:44:15:e6:c7:50:43:
1a:82:9c:a0:b3:e0:26:e8:0d:83:e6:40:01:1c:eb:
86:a7:5a:bc:3b:e9:90:fa:f8:a1:f6:f3:df:4c:ff:
92:22:6b:11:0c:0a:31:43:fe:b4:77:30:58:c0:7d:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:5D:CA:26:31:D2:C3:F8:06:8B:50:F8:6D:5C:71:2D:9A:7E:E8
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/HKldyiYx0sP4BotQ-G1ccS2afug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.124.0/24
193.110.189.0/24
IPv6:
2a0f:d440::/29
Signature Algorithm: sha256WithRSAEncryption
37:80:24:d3:f0:9a:15:6f:a6:0d:80:64:b5:a9:7e:bc:16:88:
eb:24:ee:31:22:c4:4f:14:3d:a5:0a:78:b0:71:66:28:76:8e:
18:90:5b:25:92:f3:41:dc:55:df:3b:b7:1a:c7:f0:c1:14:f0:
08:54:4b:8e:05:85:af:f9:7d:36:c1:ea:bb:43:fc:dd:5e:8f:
6a:a0:72:6f:99:a4:2a:c9:3d:c2:e7:10:43:8f:2f:04:76:51:
ce:2b:08:e4:5d:d5:4a:eb:c7:f5:bf:e2:39:da:36:5a:a5:6a:
36:3c:3b:90:f1:29:ef:9b:06:dc:89:69:54:83:87:a4:a6:96:
e0:90:56:ad:47:3a:9a:15:04:cf:70:ce:4d:7c:ef:63:12:86:
88:e0:4c:be:dc:10:62:17:fa:4b:ce:7f:f3:90:e7:14:24:2d:
83:b6:f8:23:e7:ac:e5:f7:82:7f:35:97:72:57:bc:7d:65:ec:
ec:30:45:63:f2:56:0e:e1:e4:f3:ab:76:2e:34:ac:12:d1:75:
f8:c8:6a:83:24:a2:f0:10:23:81:2c:03:c2:8a:2f:c4:d2:ae:
68:37:e1:e3:8b:97:71:3f:9f:dd:e2:6a:88:c9:b2:fd:cd:1f:
6c:a0:45:01:cd:fd:1d:45:5f:d9:f7:15:d6:bd:c3:6d:db:cc:
23:ed:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:30:49 2025 by rpki-client