Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/XYgFwZ2CqAs8qGiTQfLochhhVr8.roa
File: XYgFwZ2CqAs8qGiTQfLochhhVr8.roa (raw, json)
Hash identifier: BIq6NWuUjoCoJhl8MtA2+RZunC4kB77cQPXrKGuFmZs=
Subject key identifier: 5D:88:05:C1:9D:82:A8:0B:3C:A8:68:93:41:F2:E8:72:18:61:56:BF
Certificate issuer: /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Certificate serial: 019A05F439D05DB7312B7A0494A8A4E1C594
Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/XYgFwZ2CqAs8qGiTQfLochhhVr8.roa
Signing time: Tue 21 Oct 2025 08:48:02 +0000
ROA not before: Tue 21 Oct 2025 08:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39069
IP address blocks: 147.84.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:f4:39:d0:5d:b7:31:2b:7a:04:94:a8:a4:e1:c5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Validity
Not Before: Oct 21 08:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d8805c19d82a80b3ca8689341f2e872186156bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:41:a8:d5:3a:55:67:f7:85:36:5c:f0:42:
f5:cd:92:40:59:af:22:c7:37:d1:ee:88:45:5d:45:
42:5e:4d:f8:b2:c4:54:26:b2:ac:0b:2a:8d:8d:86:
3b:26:83:db:cb:2f:cd:ed:d0:b4:c2:8c:fb:cc:dd:
25:87:13:de:34:c2:73:fb:c5:dc:90:95:d9:a2:07:
3f:c2:4d:8d:59:f4:bb:72:83:71:9e:0b:c6:79:3c:
35:bd:22:32:bb:9f:a1:e6:6d:44:42:ad:41:cc:a1:
79:4c:58:e7:bd:c2:3f:57:1d:d4:8f:89:57:0e:a6:
45:84:84:66:4c:e5:ef:68:9f:bb:f5:39:6b:4c:88:
b6:49:c6:e6:7f:bc:e7:31:19:25:34:c7:33:20:8f:
3c:36:1b:9a:e2:9f:f3:5b:e3:d8:fc:bf:27:e0:dd:
fd:fb:33:81:7c:9b:9b:7f:76:3d:02:1c:16:fe:7d:
19:48:46:1d:ba:eb:62:2e:e6:58:e2:31:82:c2:14:
d2:b8:ec:2c:f4:f1:74:b8:ca:5d:a9:e9:50:d8:2c:
0f:04:75:c8:a0:8e:f3:ba:7f:2e:08:9e:26:b6:44:
b9:bf:84:87:60:6d:55:e2:da:fc:5c:01:95:d4:85:
ba:a3:5f:98:57:3c:a0:95:94:54:49:d1:f5:4b:f0:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:88:05:C1:9D:82:A8:0B:3C:A8:68:93:41:F2:E8:72:18:61:56:BF
X509v3 Authority Key Identifier:
keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/XYgFwZ2CqAs8qGiTQfLochhhVr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.84.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:bb:31:96:74:73:b5:d0:99:48:01:25:79:17:1a:df:be:a4:
ee:31:81:c6:78:30:b3:2e:aa:de:80:5a:32:95:f0:57:88:dc:
52:3d:71:5d:8c:ff:bb:10:0c:96:ca:6a:d4:cc:a6:f2:e2:1c:
4c:c1:f8:4c:a3:62:3d:2c:87:02:e4:d5:2e:38:f1:55:12:17:
b1:31:09:69:0f:2e:4c:f9:ac:0b:11:27:97:72:7e:a3:3e:65:
d2:d8:8e:56:bd:06:a9:ae:23:5b:95:0e:f7:b9:28:7a:03:19:
c5:12:cf:4e:2a:01:92:59:29:52:92:ed:37:cc:0a:51:6e:f5:
fc:48:b3:c2:2c:9f:f3:de:5d:f0:93:a9:64:c4:cc:42:eb:50:
09:53:53:0b:d2:dd:8c:69:43:07:80:ba:b3:1a:86:bc:cb:0a:
f8:17:5b:db:42:33:1b:16:af:2d:f1:4f:23:59:2e:60:a2:89:
f8:24:19:b3:2f:e8:ff:ff:54:db:d0:63:6d:66:5e:10:e0:66:
f8:cd:71:18:7c:5e:7b:d2:0d:72:fa:4f:29:66:e9:22:29:fd:
73:11:0e:0f:a0:ad:f1:eb:dd:06:41:af:8c:86:17:90:d0:d7:
16:3e:94:f0:39:61:19:8f:f4:f9:7a:0c:5a:77:a5:67:c5:88:
d6:a4:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:45 2025 by rpki-client