Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/6H_HYtmg2UdJqU5MWI0lffy1dSc.roa
File: 6H_HYtmg2UdJqU5MWI0lffy1dSc.roa (raw, json)
Hash identifier: AKgGfr6wkzXFXCjq2IfcxYtjAtEln9LUULf9VwKwDj8=
Subject key identifier: E8:7F:C7:62:D9:A0:D9:47:49:A9:4E:4C:58:8D:25:7D:FC:B5:75:27
Certificate issuer: /CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
Certificate serial: 019A0768D8FB37060864A3A3791AB0B3CF3F
Authority key identifier: 30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/6H_HYtmg2UdJqU5MWI0lffy1dSc.roa
Signing time: Tue 21 Oct 2025 15:35:03 +0000
ROA not before: Tue 21 Oct 2025 15:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44885
IP address blocks: 109.237.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:68:d8:fb:37:06:08:64:a3:a3:79:1a:b0:b3:cf:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
Validity
Not Before: Oct 21 15:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e87fc762d9a0d94749a94e4c588d257dfcb57527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:be:ef:27:b7:b8:a8:68:c4:f5:45:90:ee:74:
bb:e7:14:3e:60:56:1b:6f:e8:ff:3a:f4:c9:07:5f:
76:24:f5:5f:72:e2:7e:7c:f0:99:6f:c4:e4:f2:26:
12:55:fb:da:86:8a:62:b6:b4:b0:49:af:4f:a3:18:
03:16:19:db:c8:e3:f5:44:a3:0a:a1:f0:f6:c5:97:
d9:ac:f1:81:4d:36:54:9a:a0:f3:8b:69:f1:ba:b1:
e4:c8:6c:7d:f8:49:79:ec:70:65:4e:04:8c:57:d6:
f8:ce:6a:c8:5b:a0:a5:5c:04:13:d5:36:2d:38:b9:
1b:e6:ad:47:bf:5b:78:2d:9c:02:72:7c:c9:a0:43:
8a:72:07:52:5d:63:0a:37:c0:50:e1:c5:b2:ad:3e:
c0:71:1c:71:dc:44:6b:33:84:ba:87:82:20:f2:ed:
75:38:c6:e9:07:5a:e0:eb:43:b8:c7:b9:9d:a0:8e:
28:07:4e:c0:c1:45:2d:96:98:ea:bc:d3:69:4e:c0:
fb:e4:76:db:b9:fb:5f:8a:2c:6e:7c:a5:c7:1b:b7:
35:33:4d:9f:5e:f8:f3:7d:8d:d0:9c:a6:4e:e2:42:
bb:bf:6e:1c:a5:c7:1d:3d:6d:8d:07:22:89:16:a2:
5d:29:bf:0f:43:c6:fc:0e:58:20:a5:64:16:d2:ed:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:C7:62:D9:A0:D9:47:49:A9:4E:4C:58:8D:25:7D:FC:B5:75:27
X509v3 Authority Key Identifier:
keyid:30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/6H_HYtmg2UdJqU5MWI0lffy1dSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.59.0/24
Signature Algorithm: sha256WithRSAEncryption
30:18:de:74:e5:8f:88:fb:a8:6c:7c:10:01:d0:7d:84:a0:78:
7f:6e:fe:0d:44:b1:07:7b:45:65:e1:c3:f2:69:fe:3f:54:cb:
08:5d:6c:c1:1e:eb:d8:6c:b0:db:66:35:1f:1e:3a:27:7d:fc:
62:6e:66:53:4a:41:50:39:e5:e5:52:eb:06:50:bc:11:4d:63:
c8:f0:fb:ad:ea:e2:2d:b7:66:90:72:3a:e6:30:88:ec:a6:26:
d6:18:d5:12:65:3e:c1:70:49:8a:2f:d9:ea:59:53:bc:a4:e5:
31:b4:4a:54:b0:ac:76:03:d1:ba:5c:03:4f:c9:fc:65:46:60:
f0:b4:b4:41:14:28:d1:f1:7b:2d:49:0d:bd:1e:32:6f:86:31:
c6:f0:4a:92:eb:86:91:b7:f2:af:e0:96:f6:0f:e2:73:ad:aa:
74:6f:9f:e0:e9:a2:0e:4d:5a:ae:ad:a3:67:2d:3e:50:c2:24:
9d:dc:af:e3:1f:57:27:26:21:3f:fe:f6:a7:df:7a:67:2a:e8:
d4:39:75:4f:b6:11:92:df:f2:c7:7d:ac:aa:f2:89:b2:ca:72:
2a:d1:42:6d:9b:eb:70:27:07:81:88:6c:c1:86:88:cc:58:85:
62:ca:89:4e:b7:80:b7:ab:51:ee:5b:a4:75:9b:05:a4:eb:54:
77:95:c4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:10 2025 by rpki-client