Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/h4SH4jbcO_QrPdA2Gh6nPhcu90k.roa
File: h4SH4jbcO_QrPdA2Gh6nPhcu90k.roa (raw, json)
Hash identifier: i2GmF/BWsi8T4gmbicuCkuelb7temf0e4pvjoHHSntA=
Subject key identifier: 87:84:87:E2:36:DC:3B:F4:2B:3D:D0:36:1A:1E:A7:3E:17:2E:F7:49
Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial: 019A07E474589F3AF416156AAA07DBFD14DB
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/h4SH4jbcO_QrPdA2Gh6nPhcu90k.roa
Signing time: Tue 21 Oct 2025 17:50:03 +0000
ROA not before: Tue 21 Oct 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215290
IP address blocks: 2a04:fa00::/29 maxlen: 29
2a11:3fc0::/29 maxlen: 29
2a12:2ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:e4:74:58:9f:3a:f4:16:15:6a:aa:07:db:fd:14:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Validity
Not Before: Oct 21 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=878487e236dc3bf42b3dd0361a1ea73e172ef749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ec:76:70:8c:8b:ba:bb:c1:8b:09:f0:29:38:
08:de:fc:b2:9c:85:ea:d9:bc:60:f5:a3:5f:dc:8d:
b8:23:01:f0:c7:b6:ef:4d:36:22:2b:18:c9:33:01:
db:43:02:7e:35:bb:97:a7:44:48:13:1e:95:6e:cb:
67:5c:39:ec:72:4e:06:b2:ac:cc:08:6b:f3:51:3b:
09:7d:2a:8c:cd:4b:33:0c:2c:68:ac:c4:99:db:0a:
b1:e8:6a:29:7b:e8:45:0d:8d:46:a0:ef:a6:1a:47:
65:18:f2:9a:ca:93:14:88:3a:ee:bc:ed:dc:88:34:
00:ae:30:de:de:0d:f4:ca:84:5c:62:2b:58:83:7b:
b7:d7:7e:6f:27:cf:39:77:88:27:ed:45:ef:ec:79:
97:a5:c2:10:a6:e6:f6:4b:88:98:61:18:4c:fc:4e:
06:61:5c:03:35:57:84:8d:60:69:01:67:fd:94:36:
6a:55:fb:09:25:14:94:bd:92:c4:c3:8f:d7:e0:c3:
e6:e0:6a:ec:70:dd:f3:5d:8a:38:a4:1c:ca:90:a5:
e0:d4:a0:a4:cf:e0:c1:7e:d6:68:9f:89:c3:1b:ba:
8b:6c:85:a1:4e:8f:85:7c:20:85:7e:c5:99:8f:fe:
e1:4f:34:60:83:36:c2:ab:de:a0:a5:f9:09:6f:36:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:84:87:E2:36:DC:3B:F4:2B:3D:D0:36:1A:1E:A7:3E:17:2E:F7:49
X509v3 Authority Key Identifier:
keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/h4SH4jbcO_QrPdA2Gh6nPhcu90k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:fa00::/29
2a11:3fc0::/29
2a12:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
5c:5c:19:76:1d:1f:c3:fd:d7:86:bb:c0:f9:bf:de:dc:42:88:
b8:8f:82:01:63:21:cd:bf:85:bd:9c:e1:45:57:95:53:2b:d6:
a3:37:a6:6b:ff:5b:4c:d5:ba:a7:d7:22:2a:9c:9a:e7:a3:9d:
c3:5b:ca:a5:23:b2:a4:9c:7e:92:5c:f6:7d:f7:ac:54:54:3d:
ed:2a:90:8d:3e:70:06:ac:bb:bf:b7:dc:f3:19:c8:03:94:0c:
33:91:4c:72:f5:90:f8:80:75:35:e8:18:91:58:8c:7b:77:0c:
a0:60:39:8e:c5:ad:65:45:2c:8d:fc:7b:b6:b4:1f:88:23:6a:
c2:23:eb:c0:33:73:1b:91:81:fb:ab:79:03:f8:bc:4f:24:4a:
c4:6f:9d:a7:cc:dd:e5:17:e8:e1:12:ae:23:a4:b3:7c:fc:c3:
d5:b3:38:07:8c:d3:0c:6d:d7:8c:ca:49:ee:15:a4:38:8a:0c:
22:f2:7b:a0:5a:e4:01:43:39:cc:b5:97:fb:21:6d:2d:aa:ba:
98:1c:b3:19:b3:c1:1a:82:1c:04:9e:fc:07:97:ab:e6:f8:ad:
a4:86:7a:62:c5:c1:e9:e0:b8:35:43:44:9d:d6:a2:ca:7c:36:
35:69:1e:2d:97:b4:4f:63:1e:dc:2a:fb:25:8d:0f:41:b6:23:
3e:43:48:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:04:48 2025 by rpki-client