Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hDT-1p1qXt50-hPLVYW7pV-0kw0.roa
File: hDT-1p1qXt50-hPLVYW7pV-0kw0.roa (raw, json)
Hash identifier: ibkK0li5MGeVHv6HZ2AtXVUZhXrs5Dt/GxGo1rerYbo=
Subject key identifier: 84:34:FE:D6:9D:6A:5E:DE:74:FA:13:CB:55:85:BB:A5:5F:B4:93:0D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019A0B3D61A9D85E2D46DB267E71173310C7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hDT-1p1qXt50-hPLVYW7pV-0kw0.roa
Signing time: Wed 22 Oct 2025 09:26:03 +0000
ROA not before: Wed 22 Oct 2025 09:26:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216392
IP address blocks: 45.81.152.0/23 maxlen: 24
2a0b:da80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:3d:61:a9:d8:5e:2d:46:db:26:7e:71:17:33:10:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 22 09:26:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8434fed69d6a5ede74fa13cb5585bba55fb4930d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:eb:fc:89:00:fa:d7:a9:14:92:15:f8:57:
6a:7b:41:8d:f8:25:ca:3f:1d:8e:69:f3:d5:c9:b1:
57:0d:99:eb:25:eb:d1:6a:be:7f:4c:ab:01:3c:9d:
1a:3d:40:a3:bd:57:c2:fc:73:99:7a:ce:00:c6:fe:
60:cd:86:36:87:cc:0f:13:a1:6d:dd:00:7e:d1:3d:
54:be:92:10:67:5c:a6:82:6c:58:75:41:70:18:2b:
09:ed:fa:8f:f1:90:3b:d5:86:86:4d:87:a9:80:f5:
58:81:68:09:91:dd:44:2f:4c:49:7d:03:bc:a2:f8:
29:e2:af:a6:fb:50:0e:06:8b:af:bc:8a:b5:cd:0e:
5c:3f:35:3a:f0:e4:69:91:d6:a0:ac:09:48:7d:b8:
8f:a1:a5:de:3e:65:18:bd:6f:e9:d0:c8:3b:c8:eb:
07:98:38:e9:71:ac:87:6f:de:48:97:37:09:35:45:
84:67:73:a5:94:da:06:1f:2e:8e:46:9f:52:c8:7a:
8e:64:ea:f7:61:38:37:d5:48:f5:c5:ec:bb:cb:0c:
16:7c:97:16:84:96:93:b3:90:bf:b5:4d:18:ac:0f:
82:a0:b7:32:c6:ad:8a:ac:c0:08:bd:9c:ec:03:13:
d8:85:4f:bd:d8:2d:db:0c:4d:1b:b3:e2:bb:6c:b0:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:34:FE:D6:9D:6A:5E:DE:74:FA:13:CB:55:85:BB:A5:5F:B4:93:0D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hDT-1p1qXt50-hPLVYW7pV-0kw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.152.0/23
IPv6:
2a0b:da80::/32
Signature Algorithm: sha256WithRSAEncryption
a4:21:95:a4:de:f7:f2:f6:47:8d:81:17:42:f6:83:e6:d1:17:
b3:2c:63:f7:04:ba:64:28:47:d6:1a:15:9c:f5:5d:0b:1e:22:
ae:f6:23:d6:0d:77:85:59:e7:0c:dc:15:11:e7:e4:a6:00:8e:
68:c1:08:5b:4e:8a:93:05:19:2c:e2:e8:12:81:23:64:db:40:
fc:7d:99:51:cc:2a:72:43:db:ab:8c:42:e1:6b:06:75:fc:41:
5a:17:c6:cb:46:b4:34:2b:54:d2:ec:17:91:5b:92:35:a0:4a:
86:ec:9d:2c:08:a6:8d:57:05:7d:21:89:80:b1:cb:e0:ec:0c:
ae:ef:58:c7:b9:09:58:bd:43:21:3e:d7:ad:92:56:f9:1e:59:
0a:2e:10:ce:4e:3f:c3:f1:e7:47:cf:8a:c6:37:fb:23:87:72:
5b:38:3e:a2:c5:32:e3:f5:aa:9a:46:cf:e2:d7:65:7f:7f:d8:
d5:7e:85:1f:b1:f1:f9:60:3a:29:f3:69:17:9c:39:9b:79:f5:
42:19:a2:7f:49:db:89:bf:b5:7f:97:28:80:0c:66:98:d6:cb:
3c:fd:66:4e:61:00:92:66:b4:01:c0:da:8f:a8:97:57:35:ce:
9f:c5:42:54:9a:17:12:51:a9:52:9f:3b:7d:dc:78:86:ff:7e:
6c:f0:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:11:42 2025 by rpki-client