Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7hW019HtMuRAnuBp8tTDWkwtt4Y.roa
File: 7hW019HtMuRAnuBp8tTDWkwtt4Y.roa (raw, json)
Hash identifier: B+eHXT4XJnQ0+fCkGjrMabveo3s5rA6KjIrg52zuQHU=
Subject key identifier: EE:15:B4:D7:D1:ED:32:E4:40:9E:E0:69:F2:D4:C3:5A:4C:2D:B7:86
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019A05F6FA25BFB93E4AB9B88BFE5F5956E9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7hW019HtMuRAnuBp8tTDWkwtt4Y.roa
Signing time: Tue 21 Oct 2025 08:51:03 +0000
ROA not before: Tue 21 Oct 2025 08:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 194.231.142.0/24 maxlen: 24
194.231.156.0/24 maxlen: 24
194.231.196.0/24 maxlen: 24
195.86.149.0/24 maxlen: 24
195.86.150.0/24 maxlen: 24
195.86.151.0/24 maxlen: 24
195.86.152.0/24 maxlen: 24
195.86.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:f6:fa:25:bf:b9:3e:4a:b9:b8:8b:fe:5f:59:56:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 21 08:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee15b4d7d1ed32e4409ee069f2d4c35a4c2db786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:d5:d0:af:0a:e0:01:3e:f1:07:88:5c:f3:
c3:06:0f:76:d7:2e:e6:a2:c1:35:d4:0f:85:b9:2e:
44:22:16:db:d2:7b:3b:d5:d8:8c:dc:5b:99:00:54:
41:50:b1:a3:36:86:67:e2:9e:2e:96:c5:f7:f1:d4:
97:81:de:28:50:b9:26:7f:57:d1:31:69:eb:01:1e:
28:62:57:3a:08:fd:cf:2f:aa:7f:3c:d6:d7:b5:90:
88:6a:9d:b1:26:d0:ab:54:e9:a8:0c:f6:00:82:5b:
d1:9c:93:99:16:5b:6d:08:35:8a:f3:2f:3d:62:f5:
72:4c:0e:33:1c:94:5d:67:c7:33:f8:ab:3d:29:ec:
33:b7:87:b4:ec:4d:b3:cb:c1:d9:41:52:be:a4:e9:
e7:6b:8c:44:0f:e5:41:3c:83:36:bb:5a:43:61:2e:
ee:e8:0b:57:d2:57:0c:cc:f1:52:eb:ef:16:c2:bf:
09:3f:8a:07:0a:86:e6:d4:70:1e:7b:d6:5c:71:ed:
80:47:d3:8e:7e:f8:9c:c3:fc:8a:cd:cd:eb:a8:52:
7c:5d:59:0f:1c:15:e7:94:4d:07:c6:d5:3f:4a:51:
ec:54:3c:47:fd:95:e4:06:c8:93:3a:57:b1:4d:c4:
11:01:4c:1d:a9:43:fe:4e:56:ce:81:c4:92:f4:a5:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:15:B4:D7:D1:ED:32:E4:40:9E:E0:69:F2:D4:C3:5A:4C:2D:B7:86
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7hW019HtMuRAnuBp8tTDWkwtt4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.142.0/24
194.231.156.0/24
194.231.196.0/24
195.86.149.0-195.86.153.255
Signature Algorithm: sha256WithRSAEncryption
53:41:81:45:3a:ca:9a:f3:1f:ca:99:14:7c:06:f6:15:0f:f2:
a2:f9:c7:53:d8:85:d1:c5:85:9f:36:07:ab:e8:10:e0:5a:d8:
db:ff:92:b7:82:02:94:dc:0e:52:74:72:8e:78:b6:41:0f:d8:
0e:32:0e:77:c3:cf:91:1d:2c:03:c8:55:c8:d6:7e:dc:4d:5b:
93:9e:b0:77:5d:47:8c:b4:cf:42:ff:cb:d7:1b:64:55:b9:28:
b5:6b:2f:a9:d5:89:4c:0d:17:f2:26:72:d3:ee:7f:31:55:af:
76:1b:81:82:d6:e7:c2:85:3f:68:4c:1b:14:47:d4:f4:3c:d5:
a6:06:d3:39:84:7f:fc:b2:20:ae:e8:ae:a4:03:34:cf:e6:c8:
29:59:05:f9:c0:16:6c:10:ff:61:58:8d:6e:35:cf:10:70:3f:
26:a6:8b:fe:79:d6:50:99:af:3f:1c:ff:f9:aa:76:23:9e:60:
7d:9d:9c:1a:31:ac:ee:1e:94:84:e1:68:e5:1d:19:22:28:3f:
41:f7:60:b8:92:ab:7f:b8:f1:ba:87:ed:6d:1c:54:38:8f:a4:
97:f3:f4:ce:fb:bf:23:52:95:c3:c0:54:b6:57:45:ff:7f:1b:
32:62:da:e4:f6:25:06:c7:2b:79:9f:94:53:7c:54:dd:5e:e9:
68:1f:42:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 15:16:54 2025 by rpki-client