Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/Hyeufykk73xgcSneHYi8ECCnPYc.roa
File: Hyeufykk73xgcSneHYi8ECCnPYc.roa (raw, json)
Hash identifier: 5VqCSOjA5bcQ+XGnXlR3yfwEpjMPFBK+PpNlY2M7gXw=
Subject key identifier: 1F:27:AE:7F:29:24:EF:7C:60:71:29:DE:1D:88:BC:10:20:A7:3D:87
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 01992E5A6A3015418C0C30955929A7830181
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/Hyeufykk73xgcSneHYi8ECCnPYc.roa
Signing time: Tue 09 Sep 2025 12:01:41 +0000
ROA not before: Tue 09 Sep 2025 12:01:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 203.13.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:5a:6a:30:15:41:8c:0c:30:95:59:29:a7:83:01:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Sep 9 12:01:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f27ae7f2924ef7c607129de1d88bc1020a73d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:cb:c2:78:e0:db:e5:90:56:c4:44:84:7a:
ed:66:3c:93:f2:cb:7d:a6:d7:0c:02:9e:fb:93:69:
91:b1:3a:81:f0:29:ef:b9:04:02:f2:e4:08:09:0b:
d2:61:09:df:80:5d:bf:25:5a:df:78:23:09:64:73:
87:56:21:79:f9:1c:18:ef:ec:71:f0:2e:93:06:53:
cd:f0:4a:37:85:9c:0d:cd:b7:5e:98:36:8b:aa:41:
36:b2:77:83:eb:28:a5:ea:19:a0:c2:e4:1e:72:f6:
62:72:f8:a5:3b:f4:1b:e9:37:42:d8:f6:c9:79:9c:
78:71:54:3a:d6:6d:55:dc:6d:09:33:0e:8e:45:b5:
ec:c5:ce:33:2c:73:24:11:d6:16:fd:03:42:1c:44:
2a:df:1e:ed:3a:a2:84:96:f4:2f:dc:d4:fd:c6:37:
07:01:7a:5d:66:0a:9b:f4:86:34:12:cf:e3:c6:5a:
de:5d:63:c0:b7:03:78:9b:30:03:2e:44:bd:5e:16:
71:fe:44:95:f4:90:e7:94:38:f0:00:3d:fa:da:6f:
fa:63:0f:5c:bb:62:01:04:b0:26:e6:80:bd:0e:d7:
77:3c:12:db:83:89:21:71:75:22:20:a7:59:79:10:
72:0b:ec:32:dd:43:c4:41:c7:c9:a6:4a:ec:53:58:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:27:AE:7F:29:24:EF:7C:60:71:29:DE:1D:88:BC:10:20:A7:3D:87
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/Hyeufykk73xgcSneHYi8ECCnPYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.13.20.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4a:62:c9:85:44:ea:cf:23:08:35:02:b4:17:aa:4a:03:7a:
57:d9:a6:46:f9:2f:2b:80:b5:e1:d1:30:c8:76:f2:2c:c0:68:
1e:1b:24:59:08:06:32:31:69:a8:03:1c:c9:e5:e1:2b:62:f2:
ae:17:20:3e:28:7e:d1:b7:a5:b2:af:10:4a:4b:cc:57:00:05:
11:87:ba:fc:9a:ef:18:05:51:de:55:49:cf:41:a4:69:a3:08:
53:9e:42:29:a2:1f:63:ee:72:b0:42:12:d6:c6:80:70:9c:46:
16:8d:71:de:f5:ea:8c:0c:8d:90:89:d3:87:c5:7a:c6:99:47:
38:e1:e1:17:f3:3e:01:cc:33:5b:38:96:9f:8a:72:0d:fd:94:
02:eb:cd:69:30:7c:4d:4e:10:6a:39:89:cd:6f:19:8b:e7:e7:
0b:c4:69:f9:eb:c6:5f:55:b4:dd:6e:be:e5:9d:dd:66:0b:6a:
76:22:b3:5d:c7:db:8c:14:2a:e2:fa:89:d7:72:4e:7d:8b:1b:
63:e9:02:8e:29:7d:7d:00:ce:e6:e1:02:7d:2a:e2:ff:be:db:
2d:bf:2e:39:e4:73:85:db:d0:b3:c2:a2:21:58:f7:98:bf:e5:
44:47:cd:1d:23:ac:c5:10:7c:fd:48:0d:51:27:92:a8:96:01:
69:44:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:10:28 2025 by rpki-client