Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/h-sMApBMhDHgCGWpW-gple58v6Y.roa
File: h-sMApBMhDHgCGWpW-gple58v6Y.roa (raw, json)
Hash identifier: fbZWIQuOefiBmYf/a9pDVe0/h4tBsG3+EM0yhcaJGFA=
Subject key identifier: 87:EB:0C:02:90:4C:84:31:E0:08:65:A9:5B:E8:29:95:EE:7C:BF:A6
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 01990B1394E23A2160BC6CF60DCA3E6179B8
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/h-sMApBMhDHgCGWpW-gple58v6Y.roa
Signing time: Tue 02 Sep 2025 15:37:36 +0000
ROA not before: Tue 02 Sep 2025 15:37:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57458
IP address blocks: 130.255.176.0/21 maxlen: 21
130.255.176.0/24 maxlen: 24
130.255.177.0/24 maxlen: 24
2a03:c080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:13:94:e2:3a:21:60:bc:6c:f6:0d:ca:3e:61:79:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Sep 2 15:37:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87eb0c02904c8431e00865a95be82995ee7cbfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:ff:44:d6:7b:0b:de:49:04:1d:ea:d2:c4:
72:70:c0:5c:4c:0d:a7:4b:1d:82:c1:6e:84:85:06:
b0:06:13:70:e5:6b:b4:db:5b:fb:f3:4c:13:46:21:
74:07:7f:a5:d2:88:c2:f6:d6:fc:5c:c0:79:02:d5:
34:e5:bb:b3:55:ff:7f:74:b2:d7:b0:1f:fb:85:6f:
9b:ed:18:0b:de:e9:a2:1e:a4:71:23:68:ad:51:d0:
64:fc:c7:f5:9d:e5:b1:f9:47:15:bc:0c:e2:2a:49:
9b:17:41:c3:4a:2a:c2:7f:44:a3:51:9a:02:91:d5:
4a:62:be:14:b1:53:11:77:ec:f4:a0:98:c0:7e:96:
f4:d3:19:c8:1c:14:bd:bf:20:09:ba:51:e6:87:eb:
27:53:e9:27:bb:a9:ba:4e:a0:d9:94:81:bb:67:11:
6e:02:e6:85:5e:3d:7a:7d:61:b8:38:bd:6c:01:61:
05:5d:81:30:eb:a0:51:a9:7e:ac:5f:ca:72:40:68:
11:5d:8a:da:c9:36:e7:d7:87:9d:98:d1:87:1c:19:
13:fa:66:cf:ab:e1:fc:cc:91:6b:37:9b:b9:5b:a5:
5f:c6:08:dc:80:9d:ad:eb:78:7e:6c:22:67:4f:02:
26:ee:b4:8e:c1:a3:f9:33:f3:23:1b:ca:1e:7d:3c:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EB:0C:02:90:4C:84:31:E0:08:65:A9:5B:E8:29:95:EE:7C:BF:A6
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/h-sMApBMhDHgCGWpW-gple58v6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.176.0/21
IPv6:
2a03:c080::/32
Signature Algorithm: sha256WithRSAEncryption
54:a3:f9:10:e8:dc:d3:45:9e:08:aa:35:4c:a3:93:3f:81:4b:
55:63:47:78:b1:6c:8b:6b:ad:e9:61:21:d6:68:47:ea:c8:65:
32:c6:83:d4:ca:53:fc:e8:72:25:9d:2c:3d:13:12:0c:fd:a9:
d8:61:55:31:84:46:28:e4:8e:9a:54:39:18:cc:fa:b8:5b:92:
1a:2d:47:ea:48:79:2b:ca:f3:98:65:c7:d8:8d:d5:56:e3:c2:
81:54:a3:96:71:73:44:ee:c4:3b:29:16:21:79:1e:a9:d3:27:
f6:5b:3c:48:c9:6b:af:94:8a:b3:16:c3:47:07:96:64:6e:ff:
68:fb:ce:d1:34:3e:84:55:3a:a5:c0:33:0c:e8:e6:b6:16:cf:
3b:b2:94:d9:4d:28:46:2b:13:13:1a:9f:d4:64:03:7d:85:21:
4b:74:3f:b6:d6:d6:67:44:42:29:f0:f4:c0:8e:ec:55:26:37:
c5:80:2f:34:ab:1c:df:cc:6f:c7:2c:75:05:03:82:47:33:5e:
9b:06:1e:9a:d5:df:87:3f:91:ec:7b:cf:2d:2a:cf:e4:e2:2d:
87:f2:f2:af:1c:8a:b5:a7:00:6f:59:ae:40:2a:9e:68:f2:4c:
51:82:dd:a5:b2:76:1a:72:0b:1c:6c:23:c9:7c:dd:ef:fb:0d:
23:3b:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:43:31 2025 by rpki-client