Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/HIBKVvtinhweoi9ybbfYokGtkjg.roa
File: HIBKVvtinhweoi9ybbfYokGtkjg.roa (raw, json)
Hash identifier: khv1qHXammr1ZO8qVWulyea62D34wTqiuoPZd9ngssM=
Subject key identifier: 1C:80:4A:56:FB:62:9E:1C:1E:A2:2F:72:6D:B7:D8:A2:41:AD:92:38
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0198E5575C8C85BF2522FDB6106890C45673
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/HIBKVvtinhweoi9ybbfYokGtkjg.roa
Signing time: Tue 26 Aug 2025 07:46:04 +0000
ROA not before: Tue 26 Aug 2025 07:46:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 185.164.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:57:5c:8c:85:bf:25:22:fd:b6:10:68:90:c4:56:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Aug 26 07:46:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c804a56fb629e1c1ea22f726db7d8a241ad9238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:7a:39:a2:44:fe:21:70:6f:51:69:82:64:
17:8c:23:82:5a:5f:e4:89:6e:00:3b:25:54:8b:55:
b0:6c:f2:af:82:ce:e1:db:9e:45:26:05:89:b0:39:
d0:23:8f:2a:33:0d:3a:74:20:88:06:3a:5b:94:df:
71:7d:6b:0a:af:4e:93:d1:a1:b6:07:6e:0e:d8:bd:
1d:24:c9:6b:f3:c0:72:01:79:d8:fa:87:2a:c3:e3:
20:53:c4:e7:26:f3:bc:64:ea:0e:b1:e2:f3:d0:84:
94:11:2a:92:97:31:7d:e8:39:a4:83:75:57:f2:6d:
80:3d:b5:e4:f5:b9:ed:d0:b1:1d:ea:ed:f0:49:8c:
5f:fa:36:2a:28:0d:fc:85:e0:7c:54:33:9f:68:56:
b3:38:be:64:7a:60:07:89:d5:6f:89:94:0e:ed:a9:
d4:52:63:ea:cc:7f:e7:71:39:20:b5:38:f9:5e:8e:
66:79:65:1d:d5:0e:62:8a:8f:40:66:78:53:76:ee:
52:34:6e:f9:98:69:85:a6:5d:81:10:1d:6f:de:43:
59:5b:66:a1:05:83:4f:36:31:97:a6:7f:57:ba:31:
c1:65:89:52:34:af:9a:e1:59:08:1d:ef:0b:ca:cc:
97:59:09:1c:c3:ee:8d:79:6c:c2:20:37:48:5b:3f:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:4A:56:FB:62:9E:1C:1E:A2:2F:72:6D:B7:D8:A2:41:AD:92:38
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/HIBKVvtinhweoi9ybbfYokGtkjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5d:3b:62:af:de:6e:86:d2:43:18:3d:37:e9:e3:8c:22:9c:
77:d9:40:48:6a:83:00:6b:0a:75:1b:34:a8:04:08:69:9c:9a:
3c:75:0a:ea:57:2a:0f:5f:4e:a3:3f:28:85:35:6c:91:1b:bc:
b2:46:28:e9:1b:df:df:02:8a:e1:d2:ff:e2:50:d8:a0:68:fa:
a3:9c:2b:f4:dc:00:20:39:df:7b:62:54:a9:3e:e2:93:bd:27:
3e:68:dc:73:f0:de:02:b6:79:3e:95:1f:01:54:3a:fd:68:71:
ff:cf:9a:0f:1d:5d:f6:42:84:4f:8b:82:cd:f9:49:24:3d:57:
2c:26:2e:a6:e9:02:1d:40:88:b1:e7:89:1c:79:8b:3c:85:62:
d5:c6:63:16:a3:12:09:3b:0b:d4:cb:50:b8:42:fa:58:2e:b1:
72:0e:f2:31:e8:ba:76:08:02:bc:90:7c:19:4f:59:cb:3b:7c:
18:ff:05:66:3e:9a:33:bc:3f:9d:6f:a8:33:fe:52:05:29:bb:
62:b0:71:84:7b:4e:a9:08:54:37:b3:0b:73:01:84:33:ab:8e:
f3:d7:aa:3e:48:af:72:e9:64:1e:b6:f5:f9:43:1a:90:0b:e1:
91:6f:73:a8:a3:3a:f3:bd:b1:84:7a:7e:41:4e:bf:49:6b:37:
34:74:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 17:55:17 2025 by rpki-client