Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H1DE_aeBNRB7qjlQx1Z1DKZSC6o.roa
File: H1DE_aeBNRB7qjlQx1Z1DKZSC6o.roa (raw, json)
Hash identifier: 7KbIVMr+G/o44osChsGvYYijBbDYbYaz29KGuwKZ/aQ=
Subject key identifier: 1F:50:C4:FD:A7:81:35:10:7B:AA:39:50:C7:56:75:0C:A6:52:0B:AA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A07853CADA6FCDF71C4DD2C74FAEDE148
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H1DE_aeBNRB7qjlQx1Z1DKZSC6o.roa
Signing time: Tue 21 Oct 2025 16:06:03 +0000
ROA not before: Tue 21 Oct 2025 16:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 93.190.244.0/24 maxlen: 24
2a0f:1f80::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a10:3440::/29 maxlen: 29
2a12:4ac0::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:9580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:85:3c:ad:a6:fc:df:71:c4:dd:2c:74:fa:ed:e1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 21 16:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f50c4fda78135107baa3950c756750ca6520baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:30:45:9e:63:d2:fe:06:58:df:bb:96:67:
67:32:24:2b:ad:eb:0d:ba:21:2c:bd:4c:b7:b3:69:
4e:28:52:f0:54:c6:26:dc:09:49:1d:ff:b9:c6:81:
68:74:e6:23:53:82:90:3b:8f:1b:4d:d1:1e:76:2e:
c8:11:e4:48:b0:bd:fc:39:98:6b:d8:f9:3e:df:93:
ac:bf:1d:fc:92:97:19:1b:10:aa:37:02:ba:9a:42:
a3:fd:16:43:a1:d2:11:b5:86:80:18:ff:cd:14:09:
dd:35:0f:18:a2:27:ea:dc:97:6f:f5:43:a4:db:a6:
ec:b5:0d:71:35:31:0c:85:8f:8e:48:07:3d:a8:f8:
26:0a:cb:14:2e:fb:03:28:46:5f:74:26:43:7b:e5:
77:ff:6c:5e:6d:d2:fa:c2:b5:02:1f:4e:50:f7:b8:
5f:cb:c3:91:60:58:46:69:4f:89:02:27:aa:b5:f1:
f2:08:25:c7:4e:96:12:41:9a:f2:37:2a:a8:1c:48:
84:d7:1f:74:f9:8d:1d:f1:ca:3c:5f:b1:32:bb:4b:
c4:43:1f:a3:6b:fa:be:ac:62:48:69:1c:43:df:b8:
6d:d9:4c:dc:3e:bf:63:21:e2:5c:7f:21:8d:d4:8d:
63:46:71:d8:06:12:f7:1d:a5:ea:e1:b0:58:0e:9a:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:50:C4:FD:A7:81:35:10:7B:AA:39:50:C7:56:75:0C:A6:52:0B:AA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H1DE_aeBNRB7qjlQx1Z1DKZSC6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.244.0/24
IPv6:
2a0f:1f80::/29
2a0f:dac0::/29
2a10:3440::/29
2a12:4ac0::/29
2a13:200::/29
2a13:9580::/29
Signature Algorithm: sha256WithRSAEncryption
51:9b:db:02:36:e3:11:37:c0:29:40:af:a2:4e:cc:6f:87:85:
3a:4e:fb:68:fd:79:b0:4a:f7:c5:2d:2f:22:7a:83:2f:a5:0c:
68:3b:a8:e4:b7:c6:af:2a:31:b2:81:90:46:96:2c:b0:4e:f7:
7d:b5:86:7b:c2:59:8a:ce:21:ed:03:5e:2a:fd:8c:a1:69:5b:
27:a4:37:4d:10:b2:4c:70:72:12:8f:28:85:1c:8c:78:4a:21:
43:f6:ea:ab:a0:99:9c:da:d6:ad:1b:9f:77:2a:69:af:02:b9:
d8:d0:4f:2b:6c:d2:46:10:cd:10:52:f8:b2:c5:ea:f3:ac:0c:
60:0c:3f:e7:55:71:8c:fa:5c:76:40:84:c9:b9:c5:3f:30:bc:
74:e1:e3:3f:cb:12:aa:59:4b:36:69:a4:95:9c:81:1f:df:e4:
0e:20:18:15:d5:ef:e7:8a:b4:0a:a8:a6:e9:0b:a7:25:c0:00:
33:74:98:83:8e:72:c0:8d:cf:e9:dd:5f:26:a1:6c:ce:c3:57:
60:6b:54:64:ae:27:19:95:34:8c:61:42:fd:a0:35:04:2a:12:
07:15:46:4c:17:8a:92:78:04:c1:67:ef:34:fa:65:1d:a1:d3:
84:68:8d:92:93:c0:c5:3a:a9:ad:8c:7e:23:95:0e:c0:2e:5d:
d8:ff:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:21:44 2025 by rpki-client