Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/H8zP5ADA1qpG3kwvpub1IkD7bYw.roa
File: H8zP5ADA1qpG3kwvpub1IkD7bYw.roa (raw, json)
Hash identifier: onCycwgRdWFveiibrpqjGo0TabyFwkvUWg2/yfU0uMA=
Subject key identifier: 1F:CC:CF:E4:00:C0:D6:AA:46:DE:4C:2F:A6:E6:F5:22:40:FB:6D:8C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0198F737AA0E53001A356E69124F69CBF4D6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/H8zP5ADA1qpG3kwvpub1IkD7bYw.roa
Signing time: Fri 29 Aug 2025 19:04:36 +0000
ROA not before: Fri 29 Aug 2025 19:04:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201106
IP address blocks: 77.239.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f7:37:aa:0e:53:00:1a:35:6e:69:12:4f:69:cb:f4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 29 19:04:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fcccfe400c0d6aa46de4c2fa6e6f52240fb6d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:23:de:22:48:78:d2:f9:3c:e9:23:bb:5c:
ae:89:81:f9:ce:e4:37:ef:3d:2f:a2:55:53:28:86:
f5:8e:fc:a2:98:61:9a:1a:76:7d:2e:1a:5b:ca:b1:
58:be:9f:77:63:f5:06:8f:cb:40:1e:55:f0:cf:45:
e7:9b:d1:91:7b:79:46:ad:19:e6:43:71:c7:0b:f8:
d7:d2:62:94:b5:41:a2:e7:b2:74:3b:0e:85:92:e7:
a7:03:52:af:79:bd:f0:ab:e9:b5:82:b5:50:34:65:
69:fd:21:d1:28:e0:b4:9a:4d:fe:87:66:e1:cc:6d:
b7:87:03:89:ee:37:0f:f2:8b:db:a0:95:27:b2:e6:
d1:c6:82:0f:9f:6a:5d:48:bf:98:17:ba:2e:84:67:
e9:92:cd:ba:2e:10:c3:7f:66:bf:41:19:8f:36:82:
30:65:cc:e0:bc:91:d1:37:db:3f:0e:c5:bf:53:05:
ac:9f:1b:84:c3:bc:78:be:27:3b:d0:c1:98:e4:4c:
05:da:90:b1:ee:49:68:8c:38:84:d9:4f:8b:29:4a:
8e:07:16:70:46:3d:5e:27:fc:ac:39:dd:e8:b6:45:
8a:1b:c4:88:de:2c:2a:47:07:73:6d:d0:d8:aa:3c:
a8:af:e4:15:76:7a:60:b2:47:44:f5:79:63:01:ce:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:CF:E4:00:C0:D6:AA:46:DE:4C:2F:A6:E6:F5:22:40:FB:6D:8C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/H8zP5ADA1qpG3kwvpub1IkD7bYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:fa:87:9f:55:45:d5:d5:71:df:45:6c:c5:25:c1:1b:a2:71:
c2:5c:eb:4f:67:a9:f2:ea:bf:76:4e:8b:38:6a:be:bf:37:2a:
55:aa:6c:73:62:e4:fd:21:bd:47:8b:26:a5:d6:78:04:80:bf:
2c:87:56:04:db:6e:a6:5f:54:8f:63:59:ed:cb:c7:80:b6:84:
32:8c:8a:10:35:e0:4e:01:a6:b5:d4:8b:00:3e:3d:de:05:f8:
f5:43:74:c9:f2:e4:13:a7:51:12:a7:ae:98:b1:ac:2f:1f:f7:
94:6e:79:fa:21:43:6e:e5:53:c0:19:7a:08:81:46:1d:04:a8:
32:94:b3:44:ac:c2:dd:3e:b1:9b:b4:00:27:5f:e7:6d:73:ea:
c5:d6:7e:c5:c9:80:3a:03:01:e7:4b:fa:10:f2:8f:d8:a3:93:
23:fb:73:25:64:26:58:25:7f:b0:d5:4b:9c:4a:d2:cf:4e:f2:
3b:48:34:e8:d5:ef:b9:14:bb:60:50:90:d4:ca:6c:3d:0e:45:
0e:a1:b2:43:af:71:5d:8d:ed:fb:61:1b:7c:03:22:7a:27:42:
be:e0:39:d4:09:86:59:03:f3:fe:4c:32:05:4a:d9:09:e3:f7:
7b:a9:dc:e6:4c:f0:d0:6f:b5:9d:58:65:50:f3:db:50:e7:90:
7e:db:b8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 21:59:05 2025 by rpki-client