Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/eHIMTPzuCMiUco59sEWdIsxPSRc.roa
File: eHIMTPzuCMiUco59sEWdIsxPSRc.roa (raw, json)
Hash identifier: XR87nUCJ1p3iF9boGBXmCJJovykBt88GMeU/pO+83yY=
Subject key identifier: 78:72:0C:4C:FC:EE:08:C8:94:72:8E:7D:B0:45:9D:22:CC:4F:49:17
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01992CE3B49372A712FEE78A4B425BDC09A4
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/eHIMTPzuCMiUco59sEWdIsxPSRc.roa
Signing time: Tue 09 Sep 2025 05:12:24 +0000
ROA not before: Tue 09 Sep 2025 05:12:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.13.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:e3:b4:93:72:a7:12:fe:e7:8a:4b:42:5b:dc:09:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Sep 9 05:12:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78720c4cfcee08c894728e7db0459d22cc4f4917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:56:8b:08:e9:f3:90:8e:a6:d9:e5:4e:ac:
6f:bf:a1:0c:8b:37:65:68:9a:40:f8:b3:89:79:bf:
e1:82:00:f5:28:bc:67:2f:2e:f8:87:e8:ea:f1:8a:
f9:18:3c:e9:e1:31:3a:47:60:65:6b:8d:c3:38:79:
07:f6:e5:ba:26:b3:00:50:67:ec:10:af:f8:78:c3:
a1:ac:a1:9f:a6:3e:10:f7:c5:0b:19:4d:9a:cc:b3:
2a:a7:e4:71:3e:6f:4d:89:c3:c4:bf:6e:74:a7:95:
1a:c1:1c:07:a7:61:7a:d0:aa:d2:3c:16:8f:8e:03:
af:cc:ad:5e:ae:49:c4:82:32:67:0d:7a:4b:15:41:
d8:c4:97:f2:aa:f3:0f:62:a1:83:91:a2:6a:93:4f:
af:84:3d:a3:25:fd:e2:90:0f:40:b2:15:f3:d7:89:
b0:14:7a:15:da:46:00:2a:70:b5:a6:f8:fe:6d:3c:
88:b6:19:a5:62:10:bd:1d:eb:7c:75:e5:0b:71:33:
3f:b6:b7:93:de:d0:70:0e:ce:9c:57:7a:2e:9f:8c:
4e:d7:82:09:e9:40:9d:c0:fa:d2:12:03:8e:90:8c:
98:b6:e2:bc:35:07:dd:64:ac:82:48:81:bd:ed:f1:
2f:b0:58:7e:07:56:a5:9b:ba:1f:0c:d5:27:01:bb:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:72:0C:4C:FC:EE:08:C8:94:72:8E:7D:B0:45:9D:22:CC:4F:49:17
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/eHIMTPzuCMiUco59sEWdIsxPSRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.179.0/24
Signature Algorithm: sha256WithRSAEncryption
60:87:1d:89:c0:b5:e6:31:01:e1:bd:13:1f:c3:1c:a7:3b:f3:
f5:82:51:e3:7f:b4:4f:d4:77:c5:77:c5:41:9e:0d:ab:ef:a1:
92:3b:39:2a:54:42:99:87:64:67:15:2d:66:02:78:e6:bb:49:
df:db:e7:3c:d5:8f:08:47:39:fa:05:91:68:fd:a4:0c:7e:af:
e0:88:e5:33:4b:fc:45:3b:45:36:07:ec:fb:85:cd:91:69:36:
ec:94:45:2a:55:bd:ec:fd:ad:95:7b:70:0d:74:19:75:44:f2:
85:43:6f:f2:61:48:46:4b:e3:54:8b:53:53:19:68:6b:b3:e4:
e5:c9:a5:08:d4:1c:78:12:dd:11:6d:3f:61:51:fc:e4:86:e1:
c8:32:d8:75:fe:64:01:5f:2a:d1:f8:91:70:74:7e:85:13:70:
96:60:97:73:ac:4a:25:15:80:48:13:d0:19:85:93:db:dc:1f:
50:54:44:f6:b7:75:1d:39:d1:66:ae:32:50:e6:f7:09:94:74:
88:d2:60:e6:bf:7b:c0:7d:6f:73:65:3b:70:17:8a:02:9d:48:
e6:ff:e0:bd:94:3c:f7:25:4c:65:06:cb:1d:59:5c:31:4f:a1:
8b:8a:b9:47:f8:ad:2e:bc:6c:4c:5c:0c:f1:ab:35:df:13:68:
7a:b6:00:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZks47STcqcS/ueKS0Jb3AmkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjUwOTA5MDUxMjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODcyMGM0Y2ZjZWUwOGM4OTQ3MjhlN2RiMDQ1OWQyMmNjNGY0OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1BWiwjp85COptnlTqxvv6EMizdl
aJpA+LOJeb/hggD1KLxnLy74h+jq8Yr5GDzp4TE6R2Bla43DOHkH9uW6JrMAUGfs
EK/4eMOhrKGfpj4Q98ULGU2azLMqp+RxPm9NicPEv250p5UawRwHp2F60KrSPBaP
jgOvzK1erknEgjJnDXpLFUHYxJfyqvMPYqGDkaJqk0+vhD2jJf3ikA9AshXz14mw
FHoV2kYAKnC1pvj+bTyIthmlYhC9Het8deULcTM/treT3tBwDs6cV3oun4xO14IJ
6UCdwPrSEgOOkIyYtuK8NQfdZKyCSIG97fEvsFh+B1alm7ofDNUnAbtPtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhyDEz87gjIlHKOfbBFnSLMT0kXMB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEvZUhJTVRQenVDTWlVY281OXNFV2RJc3hQU1JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ2zMA0G
CSqGSIb3DQEBCwUAA4IBAQBghx2JwLXmMQHhvRMfwxynO/P1glHjf7RP1HfFd8VB
ng2r76GSOzkqVEKZh2RnFS1mAnjmu0nf2+c81Y8IRzn6BZFo/aQMfq/giOUzS/xF
O0U2B+z7hc2RaTbslEUqVb3s/a2Ve3ANdBl1RPKFQ2/yYUhGS+NUi1NTGWhrs+Tl
yaUI1Bx4Et0RbT9hUfzkhuHIMth1/mQBXyrR+JFwdH6FE3CWYJdzrEolFYBIE9AZ
hZPb3B9QVET2t3UdOdFmrjJQ5vcJlHSI0mDmv3vAfW9zZTtwF4oCnUjm/+C9lDz3
JUxlBssdWVwxT6GLirlH+K0uvGxMXAzxqzXfE2h6tgBi
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:52:16 2025 by rpki-client