Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/HRO3d0vD1MhFRdSoqWboZsCNWbw.roa
File: HRO3d0vD1MhFRdSoqWboZsCNWbw.roa (raw, json)
Hash identifier: Ekxu6IECplVn4BvNsNV7ylSUkSXZ8qjRVaCHFN/54ms=
Subject key identifier: 1D:13:B7:77:4B:C3:D4:C8:45:45:D4:A8:A9:66:E8:66:C0:8D:59:BC
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E253920D07D5A823A8339C31298FBA76
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/HRO3d0vD1MhFRdSoqWboZsCNWbw.roa
Signing time: Mon 25 Aug 2025 17:43:04 +0000
ROA not before: Mon 25 Aug 2025 17:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 85.203.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:53:92:0d:07:d5:a8:23:a8:33:9c:31:29:8f:ba:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d13b7774bc3d4c84545d4a8a966e866c08d59bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:18:b2:5a:31:28:67:f2:0d:cc:ce:60:39:
36:ba:fe:38:58:5a:6d:48:f7:c2:38:08:50:93:20:
a1:02:48:e9:58:9a:e7:f8:11:f4:ac:5c:6e:bb:ac:
6c:00:12:65:bb:61:ef:35:a2:17:a2:f4:83:b6:59:
02:cf:a1:1c:f9:4e:c3:40:b5:c0:3d:d0:73:5f:06:
fb:b8:47:fa:78:b7:3a:dc:31:59:1b:75:19:70:5a:
82:43:85:ae:6e:60:f5:04:f8:c5:f8:43:dd:65:e4:
ae:d5:3b:f1:34:6a:66:ac:a7:a9:2b:10:79:2a:ea:
33:5b:5b:e7:04:76:b3:ca:6b:b8:c0:ca:a0:43:59:
3c:24:12:ce:e1:2c:2d:7a:14:1a:d1:ae:ff:41:d7:
28:5e:4e:1d:9e:17:8a:61:4b:23:ff:c3:ca:51:69:
6b:8f:69:8b:4c:84:59:2a:a1:18:90:f9:58:9d:c2:
81:98:c5:6e:40:8d:6a:9b:d5:f6:3e:c8:b5:3c:bf:
fb:04:dc:ca:1c:c5:d1:95:18:27:7c:d0:33:da:ce:
05:23:a8:85:ed:0f:70:f0:62:45:95:d6:a9:e8:0b:
4e:19:b1:e0:d8:7d:54:68:3e:2a:3d:76:ce:89:f0:
d8:7e:8c:bf:24:d0:9b:dd:65:ba:0c:00:d0:3c:34:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:B7:77:4B:C3:D4:C8:45:45:D4:A8:A9:66:E8:66:C0:8D:59:BC
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/HRO3d0vD1MhFRdSoqWboZsCNWbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.28.0/22
Signature Algorithm: sha256WithRSAEncryption
85:52:0f:67:8e:d9:95:3d:58:ad:ab:4e:9b:5b:01:d4:7e:48:
99:19:4a:8d:c1:d8:3f:ee:cb:24:ec:25:e0:8d:20:7a:f3:68:
92:31:6d:47:df:e6:49:ee:02:36:23:0d:94:7c:b2:cc:78:24:
40:06:f3:a2:b7:f3:da:b9:c2:99:c5:44:16:ef:ad:58:10:b9:
21:81:ea:ac:77:24:57:b5:eb:23:9f:d3:46:bd:d2:2d:3d:ee:
96:14:28:2f:65:21:f3:7d:94:14:5f:79:fc:8d:0c:e8:7e:9b:
66:cc:81:98:a5:0f:55:ae:aa:4d:c4:56:2e:d0:33:55:9a:dc:
aa:c3:f8:ed:12:8a:6b:18:69:50:54:82:b0:99:3c:30:b6:e7:
24:54:03:6f:31:c2:f5:79:49:dc:17:02:9f:5e:bd:2b:45:b3:
0b:27:9e:5a:fa:0a:1f:a3:9f:b3:c2:44:7a:a8:95:19:ac:7a:
3a:e2:2d:b4:83:e7:d9:86:d3:48:87:f2:81:be:3f:c0:cf:c3:
a8:c3:21:fd:1e:f2:96:87:b3:5c:97:0c:79:46:64:0c:ce:28:
10:05:d7:25:1f:a9:cb:56:02:c2:af:dd:30:ca:57:19:61:e1:
65:88:52:bd:45:55:fb:c9:5a:a6:e8:dd:c2:a1:ca:83:8e:60:
3f:ec:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:31:42 2025 by rpki-client