Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/HzwblvNW7ywqh-dMu42axBFlblY.roa
File: HzwblvNW7ywqh-dMu42axBFlblY.roa (raw, json)
Hash identifier: 31+dn+HQx58EIsCmtWFYe5pzfQ4tRscb8EhJKs75vUQ=
Subject key identifier: 1F:3C:1B:96:F3:56:EF:2C:2A:87:E7:4C:BB:8D:9A:C4:11:65:6E:56
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019A35D0BAF08F667AD04C77A39E1799D51D
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/HzwblvNW7ywqh-dMu42axBFlblY.roa
Signing time: Thu 30 Oct 2025 15:51:03 +0000
ROA not before: Thu 30 Oct 2025 15:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.80.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 19:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:d0:ba:f0:8f:66:7a:d0:4c:77:a3:9e:17:99:d5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Oct 30 15:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f3c1b96f356ef2c2a87e74cbb8d9ac411656e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:a1:50:ab:4b:93:df:9d:0d:84:53:b8:7d:
5d:6d:69:65:5b:b0:50:f0:20:96:e0:80:d5:35:84:
8b:1a:6d:83:71:e0:ac:1b:1d:b5:cd:28:b9:81:03:
57:91:cc:8d:44:a6:f6:3b:16:70:9e:aa:94:34:cb:
dc:a0:1c:11:6c:d6:2a:eb:08:3e:b6:ce:31:19:f0:
eb:20:4b:a7:7e:37:f3:59:d3:d9:c4:7a:b7:d5:69:
f6:8a:48:ad:2d:08:e4:73:0a:2b:d2:54:71:0d:f7:
37:11:05:c8:d0:89:38:fa:ba:a3:94:a9:9c:d8:e4:
62:64:2f:f6:6f:e3:3f:c9:65:fc:d2:0a:4c:d6:b0:
3e:1f:37:05:16:32:18:d9:fd:8d:ed:2f:28:3e:ad:
58:0d:d6:5b:c6:70:eb:38:db:75:15:ed:e6:c0:1a:
ae:cc:e4:2c:67:56:f1:e8:5a:43:6b:d5:b7:8a:c3:
2c:ef:fe:8b:79:20:a4:90:ba:ea:62:64:cf:d4:b4:
fb:0b:ef:c9:c4:34:28:07:4c:a0:b5:30:4e:92:85:
db:c6:14:0a:44:a6:11:18:e0:ac:7d:62:2d:4f:d4:
a4:1e:92:20:e5:88:3b:bd:41:48:99:34:77:a4:fb:
a9:11:12:d6:bc:da:fd:65:53:4a:7c:59:16:64:1a:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3C:1B:96:F3:56:EF:2C:2A:87:E7:4C:BB:8D:9A:C4:11:65:6E:56
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/HzwblvNW7ywqh-dMu42axBFlblY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.137.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c8:c6:28:ab:4b:4f:e0:1a:29:3f:1e:67:5d:51:56:2f:76:
9e:7f:d8:be:cd:3f:bc:d0:85:e6:70:bf:00:f7:0b:c4:66:78:
96:a9:c4:73:a0:6d:c5:f2:32:3c:d9:b0:ea:ff:bd:f5:dd:05:
b5:28:72:61:55:91:b4:78:ad:a1:f7:18:66:e5:9c:4c:43:ff:
21:a4:09:ee:1d:ca:24:17:3a:8e:ef:99:cd:c2:83:21:dd:a0:
f9:ca:e3:a6:f3:dd:ae:8e:40:e0:5e:61:90:ff:d4:ae:bb:eb:
09:c7:ae:41:5e:d8:28:0b:48:52:32:74:60:8c:69:ec:75:d9:
c5:db:51:dd:ed:ea:a1:df:3a:6a:5e:4a:71:22:44:9d:07:78:
b3:5d:5b:19:0c:ff:72:55:4f:ea:c3:12:4d:52:60:ae:2d:0b:
be:00:9c:ce:07:9e:6e:b2:5b:76:49:61:5f:64:19:59:da:b8:
13:18:16:41:79:d5:43:4f:a8:8e:71:c3:18:45:aa:a6:c9:7c:
65:0d:ec:6b:08:0e:9d:a1:87:19:5b:d6:b7:18:9e:10:d0:26:
7e:69:8d:e3:14:bf:bf:a0:76:e5:1c:6b:2d:95:71:0b:3d:69:
7d:96:f5:d4:8a:7f:e7:a4:ba:d1:14:01:4f:47:b3:dc:d2:c5:
09:eb:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:31:41 2025 by rpki-client