Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HxCbCs4ueTqHNDL-oxJ0bNo_ETo.roa
File: HxCbCs4ueTqHNDL-oxJ0bNo_ETo.roa (raw, json)
Hash identifier: 0mH6L48rhvjdvmC5Ty73K2VG5Qp3tAj2hvWldIopEk8=
Subject key identifier: 1F:10:9B:0A:CE:2E:79:3A:87:34:32:FE:A3:12:74:6C:DA:3F:11:3A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01990F7D4F83014A8F8B0CAE46E348B604A9
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HxCbCs4ueTqHNDL-oxJ0bNo_ETo.roa
Signing time: Wed 03 Sep 2025 12:11:34 +0000
ROA not before: Wed 03 Sep 2025 12:11:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 188.255.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:7d:4f:83:01:4a:8f:8b:0c:ae:46:e3:48:b6:04:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 3 12:11:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f109b0ace2e793a873432fea312746cda3f113a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:0c:dd:83:71:e5:f2:63:b4:c1:28:89:6a:
92:c8:5d:9a:87:73:5d:53:0c:9e:b2:ed:d5:bf:77:
60:06:2d:35:35:57:25:90:4e:91:79:4f:aa:50:cf:
95:a0:c3:26:db:81:ce:0f:35:9a:68:de:46:5e:94:
fe:66:39:ea:05:0f:ad:89:44:20:bc:66:4f:3d:7f:
52:4f:57:c2:f6:b3:68:2c:82:25:e1:89:28:af:45:
27:1d:86:bb:b5:75:01:7c:3b:d1:c5:e1:9d:2c:2c:
98:7b:80:d2:07:52:4b:16:87:81:c5:96:53:d9:0a:
c8:d6:76:21:04:bf:3b:71:ae:6b:59:b8:3a:35:d9:
89:c4:02:d7:fc:8e:2e:23:e0:46:a3:6a:c3:c4:37:
80:18:90:a1:39:d6:db:40:a7:ed:ff:0b:14:78:c3:
be:83:03:7a:4d:d6:52:f4:5e:4b:85:84:49:fd:ad:
f0:7a:3b:5b:5a:b8:53:77:55:0b:0e:a6:62:33:69:
95:87:33:bf:51:51:75:da:c3:ed:66:90:29:03:11:
a7:99:a7:7d:8e:78:3d:98:ff:5d:83:ca:d3:2b:10:
5b:29:2d:6e:69:52:ca:42:ca:87:23:7d:18:37:12:
44:29:a4:b8:ef:b5:f7:f4:f0:e4:f2:de:d0:bc:2d:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:9B:0A:CE:2E:79:3A:87:34:32:FE:A3:12:74:6C:DA:3F:11:3A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HxCbCs4ueTqHNDL-oxJ0bNo_ETo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.231.0/24
Signature Algorithm: sha256WithRSAEncryption
97:73:18:30:36:2a:b6:da:56:b8:36:f5:80:58:97:26:37:97:
5b:d6:87:50:cd:e4:16:be:ae:be:99:3e:92:78:15:d5:09:7f:
9e:2b:d1:ad:81:5e:6f:12:af:75:ba:c5:ad:ba:fd:b6:bc:52:
0a:3c:db:4f:ed:3c:72:1d:dc:59:e2:82:c9:56:7f:91:4f:aa:
9b:fc:ce:f6:51:c5:ac:69:bb:ba:4c:d2:48:70:54:dc:2a:54:
8e:d9:84:55:d6:e7:a8:3b:56:14:5f:80:df:66:74:c5:c9:12:
cc:40:4d:4c:37:5d:c5:00:c2:f7:06:ba:26:ae:e1:da:d1:da:
93:97:85:ea:85:02:12:e9:71:0e:58:9d:0a:ac:30:f0:c1:48:
f4:dc:dd:af:c2:b7:79:07:98:7d:56:60:4b:bd:dd:90:8f:cd:
9d:ec:f3:ad:7b:b4:1b:dd:c9:8c:80:51:cc:f0:51:30:91:db:
e8:aa:41:03:c2:ad:6e:23:5a:f3:9a:04:c7:0b:23:f7:a2:3f:
e5:cd:6b:5f:d1:df:fd:04:6c:4c:e3:ce:00:60:24:90:61:75:
09:9d:0f:8a:0d:86:eb:33:25:7f:b7:23:31:80:bd:8a:14:f8:
e9:3b:35:9f:c2:a5:16:53:b7:81:f8:97:c4:ca:8c:e1:4b:7c:
08:93:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:56:25 2025 by rpki-client