Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/L_hiJ_zTIPvJHKnWltGOdh1BBUE.roa
File: L_hiJ_zTIPvJHKnWltGOdh1BBUE.roa (raw, json)
Hash identifier: fnkqnOVp0hCGhUIs9oj2vYD3xsZ2o6VTqPgLKa54b08=
Subject key identifier: 2F:F8:62:27:FC:D3:20:FB:C9:1C:A9:D6:96:D1:8E:76:1D:41:05:41
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 019A0AD8AC22BA1C2DEA25062039FAB10E7B
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/L_hiJ_zTIPvJHKnWltGOdh1BBUE.roa
Signing time: Wed 22 Oct 2025 07:36:03 +0000
ROA not before: Wed 22 Oct 2025 07:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 213.178.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:d8:ac:22:ba:1c:2d:ea:25:06:20:39:fa:b1:0e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Oct 22 07:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ff86227fcd320fbc91ca9d696d18e761d410541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:5e:19:2f:61:2e:66:66:66:03:33:10:9d:
79:61:30:d6:28:3e:d7:cd:74:0a:31:e8:84:75:08:
47:01:a4:49:2f:2a:e8:0a:b4:c5:e2:ba:77:5c:8b:
bf:b0:58:48:44:d7:db:e0:6c:76:92:1c:a6:6a:62:
52:4d:56:ad:8f:a2:bc:2f:c7:0b:53:9a:c4:93:c9:
15:38:a9:7d:dd:bd:ff:2e:71:93:74:b7:27:56:dc:
6e:1a:b2:b3:37:b1:7d:ab:c0:b1:72:4c:b1:68:b4:
c2:9f:9f:57:05:75:4f:a8:07:5f:23:77:a6:0f:6c:
6f:82:ad:0e:2c:3a:e3:b4:f4:20:8d:79:b1:04:64:
fd:a9:28:55:9c:17:77:50:d8:35:85:31:1b:f2:b7:
36:fc:bf:f6:98:0e:4b:32:55:d2:0e:dd:e4:77:cc:
cf:6a:77:03:87:5f:fc:b3:14:15:a2:3e:e2:89:25:
6f:81:1e:4e:d6:02:a9:7a:93:ac:3c:a7:b0:26:63:
5e:d8:df:49:f7:5c:79:d6:39:2e:5a:ff:c5:c4:a6:
b3:d9:9e:0a:14:c5:1f:a5:51:3f:88:0a:1f:61:16:
c2:b2:2d:db:fd:44:74:ba:26:50:dd:b0:7a:5d:ad:
12:0e:aa:11:52:c0:b7:fe:da:86:7b:8a:86:1f:75:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:62:27:FC:D3:20:FB:C9:1C:A9:D6:96:D1:8E:76:1D:41:05:41
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/L_hiJ_zTIPvJHKnWltGOdh1BBUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:fe:5e:9e:71:bd:5d:05:3d:aa:40:c3:6a:a4:60:22:17:da:
95:04:1b:9e:e7:2b:99:95:db:e0:fc:e1:2b:79:73:57:6b:2c:
a3:03:15:fe:e6:cd:1a:cc:b7:b9:c9:ac:93:fb:b0:4c:49:1a:
58:34:7e:4d:9a:c8:fe:15:a1:9b:37:13:c5:00:4d:f8:ac:a0:
c6:19:19:7f:a7:54:60:94:4e:5c:42:0f:bf:e7:d5:f1:f0:99:
02:9c:d9:45:e5:95:69:31:05:03:88:2d:95:c9:8b:38:c8:aa:
55:fc:bd:d9:2f:86:fd:f3:4e:f7:22:e0:ef:89:bd:84:51:57:
c6:ba:a5:a5:88:ff:fa:d3:27:b2:ea:f0:75:74:85:94:bf:11:
9c:1b:d5:77:ff:9f:22:22:fb:89:35:10:10:cb:73:20:01:d9:
f2:e4:0c:ba:0c:cc:35:ac:0c:0a:a1:31:88:da:41:11:52:bb:
e4:80:2a:17:99:37:4f:6a:39:cc:a9:4c:99:e2:3f:c9:88:6b:
ce:ee:02:75:ae:42:e1:dd:b9:c9:ac:d5:19:fb:22:57:a2:4c:
1b:c1:7c:d1:16:78:a5:d6:ae:25:67:e7:d3:8c:f6:ef:92:40:
b8:72:c4:68:cf:2e:e1:ab:08:ec:5b:9b:1d:f8:90:74:23:88:
d4:58:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:21:51 2025 by rpki-client