Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/nh8Wwn3Fj2yGVzqswDAx-hybLdE.roa
File: nh8Wwn3Fj2yGVzqswDAx-hybLdE.roa (raw, json)
Hash identifier: XEpaT4HyqXFQYAhd7C6I8/JvL9+p58S8LPezKapKn1U=
Subject key identifier: 9E:1F:16:C2:7D:C5:8F:6C:86:57:3A:AC:C0:30:31:FA:1C:9B:2D:D1
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 019712C206C9C52DD042AE7D52FFEF5EB0F5
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/nh8Wwn3Fj2yGVzqswDAx-hybLdE.roa
Signing time: Tue 27 May 2025 17:19:54 +0000
ROA not before: Tue 27 May 2025 17:19:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 193.200.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:c2:06:c9:c5:2d:d0:42:ae:7d:52:ff:ef:5e:b0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: May 27 17:19:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e1f16c27dc58f6c86573aacc03031fa1c9b2dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:53:c3:71:0f:8b:1e:73:33:15:51:a5:eb:
bd:38:bb:4c:3a:f6:6d:ed:f8:fb:2e:9b:3c:e6:35:
ce:82:a7:9b:bb:d3:62:12:89:7a:63:22:77:c8:8b:
be:00:aa:0d:75:0b:66:02:a2:ae:9e:50:75:a8:30:
d6:28:54:e8:e1:3a:3c:79:ab:be:ea:04:c1:b6:dd:
26:56:72:71:69:5b:61:69:1b:57:b2:a5:d5:d1:d5:
32:10:30:54:88:c9:c2:dc:44:e0:ac:8e:8b:7c:92:
83:0c:a8:fb:7d:2b:2c:9b:88:13:32:51:92:ac:0d:
ea:20:35:b1:64:7f:1a:a9:f9:41:e5:87:14:60:79:
56:f6:a8:a7:a8:7b:3e:49:dc:a5:89:61:1a:d7:33:
6c:49:39:6d:0a:da:4b:ad:68:77:f5:f4:e3:2e:d8:
6b:9a:d6:b8:5f:1d:59:60:1a:55:a4:8b:fa:a4:dd:
19:9e:f9:9c:4e:d7:36:7a:87:3d:a1:9e:5d:d5:83:
26:53:03:89:f7:b0:c2:8c:e4:8b:7f:43:d5:d3:7b:
02:29:f4:ab:6d:b1:99:a9:83:b3:8e:c8:df:2d:0a:
dd:db:a5:b4:48:53:62:f1:57:f4:a5:b2:93:c4:ec:
01:1f:2a:01:f9:bd:20:13:5a:91:b1:b7:7b:33:25:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1F:16:C2:7D:C5:8F:6C:86:57:3A:AC:C0:30:31:FA:1C:9B:2D:D1
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/nh8Wwn3Fj2yGVzqswDAx-hybLdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.12.0/23
Signature Algorithm: sha256WithRSAEncryption
61:a9:3b:ea:d3:9a:2e:82:44:8f:19:cb:a4:25:0c:42:f2:91:
9a:ac:42:58:b2:a4:2d:23:20:f6:f7:d5:9c:b1:2c:de:e2:95:
a3:19:49:8f:ed:88:e5:14:e8:32:b6:e6:d6:ab:58:20:6f:39:
b7:91:23:e6:bf:d2:02:dd:7a:b5:6f:45:5e:d3:6d:a1:66:f1:
d6:75:29:ea:7e:cc:c2:b6:b3:0c:9a:91:91:8d:df:08:26:4f:
db:cb:64:76:48:46:9f:f8:40:0e:c7:f0:62:d3:11:0f:96:50:
6b:b7:8c:0d:97:0c:b1:8e:1b:ad:fc:8f:ba:52:3c:bc:7f:21:
f1:b5:72:11:a0:f8:b0:31:98:c5:ee:97:ef:26:be:a2:e6:1f:
18:8e:87:5e:5b:8d:fe:7f:ae:66:dd:d4:1b:5d:0e:26:67:45:
68:6b:99:9b:74:20:27:56:e6:5a:c1:9a:46:ec:01:03:3b:ac:
8d:cd:2a:49:8b:36:64:53:ed:53:37:58:85:63:73:f2:5d:c8:
3b:fd:4c:5c:37:d1:4e:d2:33:2b:d8:b4:66:e0:79:de:36:df:
c8:e4:a0:15:e9:fa:8e:24:21:6f:ab:a7:4d:97:df:e9:3e:70:
49:70:78:3a:52:9c:d7:f9:0c:bb:58:17:86:4a:ba:3f:47:1d:
08:a0:1e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:18:24 2025 by rpki-client