Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/HiyOSlWSUZyoXRKEQ8-AzqVu9kI.roa
File: HiyOSlWSUZyoXRKEQ8-AzqVu9kI.roa (raw, json)
Hash identifier: MVMF8kukmBZ4pXpEUl0dGUhwl4qbYY4jZ5ApzTER1/M=
Subject key identifier: 1E:2C:8E:4A:55:92:51:9C:A8:5D:12:84:43:CF:80:CE:A5:6E:F6:42
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01983BB26BA12CE7F67546CA48145F1A270F
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/HiyOSlWSUZyoXRKEQ8-AzqVu9kI.roa
Signing time: Thu 24 Jul 2025 09:10:05 +0000
ROA not before: Thu 24 Jul 2025 09:10:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a0e:f04::/32 maxlen: 32
2a0e:f07::/32 maxlen: 32
2a11:15c1::/32 maxlen: 32
2a11:3180::/32 maxlen: 32
2a11:4a04::/32 maxlen: 32
2a11:4a07::/32 maxlen: 32
2a11:7883::/32 maxlen: 32
2a11:8500::/32 maxlen: 32
2a11:8507::/32 maxlen: 32
2a12:4144::/32 maxlen: 32
2a12:4147::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:b2:6b:a1:2c:e7:f6:75:46:ca:48:14:5f:1a:27:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Jul 24 09:10:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e2c8e4a5592519ca85d128443cf80cea56ef642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:92:ba:d7:41:25:0d:ad:88:26:ac:9f:32:98:
ee:dd:65:c9:d3:fc:9e:32:53:4d:28:61:bb:89:3c:
7c:47:60:76:08:e0:61:a3:a4:7c:22:af:ba:84:90:
62:7d:f5:08:9c:f1:61:ba:40:86:19:73:63:42:44:
26:1c:82:1f:53:e1:b8:e4:0e:76:e2:97:cc:fa:6f:
ba:31:6c:c2:5b:db:eb:a9:5d:02:a4:2a:a2:86:6d:
76:51:78:f8:3f:46:af:d2:bc:96:1d:d7:bf:7c:5d:
83:a3:e5:3e:b9:54:7d:5b:87:05:79:ed:b2:c8:18:
3f:9c:8e:f0:ca:34:96:e6:62:4c:b7:0a:5c:7f:ca:
c2:6f:95:4a:7d:23:37:70:7d:21:6b:85:20:f4:f5:
f3:f3:5f:ae:03:42:de:51:62:ef:0f:86:08:ba:c0:
2c:54:68:62:d8:2a:69:2c:b1:a4:dc:12:c8:46:30:
00:fb:00:16:5a:79:e5:66:d1:06:d2:98:72:c3:4c:
89:9f:b9:ad:16:45:f3:59:9f:a3:99:37:16:bc:50:
e2:d2:c1:50:6c:5f:47:c6:d1:29:9a:7b:dd:8b:03:
e2:1f:1c:f8:70:d4:04:4c:91:49:05:1c:3f:ff:1d:
7f:3b:27:e8:f5:28:f6:4a:35:85:2b:c7:72:93:1f:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2C:8E:4A:55:92:51:9C:A8:5D:12:84:43:CF:80:CE:A5:6E:F6:42
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/HiyOSlWSUZyoXRKEQ8-AzqVu9kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f04::/32
2a0e:f07::/32
2a11:15c1::/32
2a11:3180::/32
2a11:4a04::/32
2a11:4a07::/32
2a11:7883::/32
2a11:8500::/32
2a11:8507::/32
2a12:4144::/32
2a12:4147::/32
Signature Algorithm: sha256WithRSAEncryption
6f:33:c2:e2:43:8d:f8:c6:e5:03:94:d6:37:c0:08:fd:9b:3b:
d5:f8:a2:ce:eb:3c:b3:b2:69:ac:59:06:73:60:72:16:71:76:
8c:b7:82:dc:01:0f:7e:ed:cf:46:58:d1:8d:fe:1e:7c:8b:33:
c6:36:ed:e1:67:67:22:4d:6d:c9:04:70:a5:b4:69:61:59:59:
3f:d6:1b:59:bc:e2:eb:e1:0d:db:46:b1:36:56:eb:5e:13:4f:
79:64:4d:d9:76:f2:f1:d5:70:2a:8a:4a:11:8e:ca:52:f1:e8:
62:80:d8:be:1c:19:08:c0:47:2c:68:05:21:35:53:b9:28:17:
b2:42:cb:65:d8:58:c2:95:e2:0b:18:84:8a:51:93:72:5e:33:
b5:dc:94:14:36:4c:2b:f3:1f:02:2f:70:b1:0a:ca:e2:3f:fe:
c7:91:97:11:c3:6a:35:83:08:0d:39:b5:d0:c2:f8:15:9d:17:
5e:08:7c:65:58:c2:57:7b:c5:fa:00:db:8c:40:bc:79:ee:99:
d6:c1:af:ef:cf:c8:96:ca:1e:0f:02:26:4f:e0:a0:e1:44:62:
d9:8a:9b:20:1a:2a:59:08:1e:89:c4:e1:28:c6:b9:6c:98:73:
ac:16:06:ce:41:db:14:d6:ef:6d:09:bf:0f:cb:00:e8:e4:84:
1b:b0:ee:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:34:56 2025 by rpki-client