Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/hKXa70S3ljEorLxU2kzO1pY1eio.roa
File: hKXa70S3ljEorLxU2kzO1pY1eio.roa (raw, json)
Hash identifier: 3x8mJaBH6qD86fie9M/gP0ahSf8iI2csAz50I3eyjQ4=
Subject key identifier: 84:A5:DA:EF:44:B7:96:31:28:AC:BC:54:DA:4C:CE:D6:96:35:7A:2A
Certificate issuer: /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Certificate serial: 019A0BBE776AF2F77140207B5E286D908530
Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/hKXa70S3ljEorLxU2kzO1pY1eio.roa
Signing time: Wed 22 Oct 2025 11:47:03 +0000
ROA not before: Wed 22 Oct 2025 11:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29686
IP address blocks: 46.243.72.0/24 maxlen: 24
46.243.73.0/24 maxlen: 24
195.43.141.0/24 maxlen: 24
2a09:e080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:be:77:6a:f2:f7:71:40:20:7b:5e:28:6d:90:85:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Validity
Not Before: Oct 22 11:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84a5daef44b7963128acbc54da4cced696357a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:72:55:ad:e2:38:69:21:0a:9a:da:3d:26:
77:14:dd:35:3c:99:9a:a2:d3:86:0a:db:ac:2c:a7:
82:2e:53:99:b4:b6:4e:0d:7f:73:83:89:f8:25:db:
86:e1:27:e7:86:ac:b7:fb:f7:11:0c:d9:c2:06:87:
98:e0:45:cb:14:aa:c9:45:27:19:b8:ce:e1:39:b1:
46:eb:96:08:41:5d:98:89:dc:f4:f4:fd:b6:25:f9:
5c:a2:58:a0:6a:76:73:57:54:a1:a3:93:97:16:54:
14:7d:24:b9:1d:0b:80:c3:cb:6c:cb:67:0f:16:54:
f2:9a:bf:62:5c:3e:bd:f5:44:e0:ec:a4:af:c8:f5:
24:a6:21:17:b8:e2:84:92:2f:50:bb:d1:5c:cd:b1:
ca:c5:ae:aa:15:f3:12:56:db:7a:57:d4:14:22:ef:
53:1a:28:57:b0:09:2a:2d:08:72:1c:01:a7:cb:0d:
5d:7b:53:0b:54:b2:eb:fe:f9:b4:c2:e9:93:63:bc:
ee:2c:c2:38:31:82:1e:e0:b9:52:6b:ab:20:fc:4a:
8d:cb:40:71:09:86:f2:24:8a:22:4b:b8:61:73:30:
33:c9:00:29:57:bf:92:c2:8d:ed:9f:d7:31:ea:ee:
4f:66:0b:44:f0:60:e5:74:33:5b:f2:03:fa:28:90:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:DA:EF:44:B7:96:31:28:AC:BC:54:DA:4C:CE:D6:96:35:7A:2A
X509v3 Authority Key Identifier:
keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/hKXa70S3ljEorLxU2kzO1pY1eio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.72.0/23
195.43.141.0/24
IPv6:
2a09:e080::/29
Signature Algorithm: sha256WithRSAEncryption
5e:a0:17:35:6d:e6:62:13:25:4f:b4:e0:86:15:ea:41:fe:50:
e7:5c:e2:43:82:8d:f3:b2:67:21:1c:1d:2d:a3:b7:8b:75:5b:
b8:f9:36:20:d5:e5:d4:ac:33:bf:f0:8d:b5:2d:c0:eb:35:de:
03:64:71:b8:18:41:47:cc:5e:43:96:84:4e:15:6e:e9:48:03:
3b:6b:24:22:87:60:df:87:a4:38:fe:f6:6f:5c:e2:9c:e5:48:
e9:f4:c4:3f:b9:9a:d4:a0:79:00:e6:c2:25:99:73:9c:f3:47:
ee:cb:24:04:00:9e:65:0d:fe:26:d8:97:39:87:f7:d7:08:38:
58:d2:bd:b9:61:b3:08:a5:43:ac:ca:3d:67:79:b6:74:96:2f:
03:d4:34:ca:9d:9c:00:bd:a1:d9:2b:bc:95:f7:99:d1:83:a0:
70:d6:50:64:39:5a:32:c3:d7:a0:65:75:57:7f:39:99:30:7a:
bd:5a:c0:26:bb:79:85:74:4c:ee:8d:84:6d:6b:b3:94:a5:91:
d2:f1:9e:11:27:06:b6:a1:d0:f9:4c:9a:48:a7:53:d5:d8:39:
10:2a:9c:66:1e:a1:75:f4:30:7d:09:8c:d2:0f:65:c3:27:64:
c7:8d:d2:2c:03:d6:41:5a:7e:02:f9:47:6c:b7:56:8c:9c:c0:
fa:2f:88:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 03:14:31 2025 by rpki-client