Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hWh-EuHYZrp-yfCOqezqtzZCVj8.roa
File: hWh-EuHYZrp-yfCOqezqtzZCVj8.roa (raw, json)
Hash identifier: 2mGLT5j8urFIG+sjcO0/86af3Oa28gjIC11CMYWIJ2w=
Subject key identifier: 85:68:7E:12:E1:D8:66:BA:7E:C9:F0:8E:A9:EC:EA:B7:36:42:56:3F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01979BDE90765ADDA284EAAB365D376185F1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hWh-EuHYZrp-yfCOqezqtzZCVj8.roa
Signing time: Mon 23 Jun 2025 08:19:03 +0000
ROA not before: Mon 23 Jun 2025 08:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207513
IP address blocks: 195.133.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:de:90:76:5a:dd:a2:84:ea:ab:36:5d:37:61:85:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 23 08:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85687e12e1d866ba7ec9f08ea9eceab73642563f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:e1:e8:3d:e3:b0:b7:f3:b1:d7:5d:7c:3f:
8b:34:22:96:ee:0e:3d:72:3b:e3:38:4d:92:dc:56:
89:75:bf:d3:6c:94:ce:b3:79:a4:33:00:b7:b1:88:
e6:82:eb:3f:64:0b:60:28:52:72:8f:5d:c6:7d:78:
eb:15:dd:8b:c4:58:b8:70:9f:1b:e8:55:9f:f3:62:
de:56:5f:c3:8d:53:ab:f3:ca:37:d4:e0:9b:8d:f0:
51:53:5e:ac:4f:e5:7f:7b:77:f3:72:6b:29:34:97:
f7:99:c9:b7:66:a2:d5:ed:55:e2:a0:8d:d9:1c:92:
ca:8e:dc:97:1f:f7:6a:9d:a7:15:13:c2:89:7d:67:
3d:5d:18:fb:11:2f:af:c7:cb:43:cd:59:1a:c5:b5:
82:98:8b:c5:cb:bd:af:d2:04:f2:df:a8:36:5d:a6:
c8:44:b9:35:9f:c2:65:f9:71:cf:f2:62:96:33:6e:
00:3b:a0:f1:7d:8f:9b:d2:df:d1:8b:ba:f9:67:23:
bc:6d:7d:c5:70:59:a3:18:4b:ba:c3:25:9d:c6:66:
76:3c:9a:4c:86:ab:86:48:3a:dd:af:20:10:40:9c:
86:61:6d:09:c4:92:99:b1:28:1c:ba:44:f5:e6:46:
23:92:d3:b0:eb:56:0c:8c:f2:be:d7:82:68:43:83:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:7E:12:E1:D8:66:BA:7E:C9:F0:8E:A9:EC:EA:B7:36:42:56:3F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hWh-EuHYZrp-yfCOqezqtzZCVj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.195.0/24
Signature Algorithm: sha256WithRSAEncryption
46:95:cf:21:4a:a1:6b:3b:c8:1b:7c:21:13:df:01:86:13:20:
d1:93:88:da:03:8d:e7:a4:8b:b1:b7:49:e8:e6:12:b4:14:21:
ba:83:4f:93:a9:91:b7:7b:a4:7f:f0:c8:b4:02:aa:ff:cf:90:
be:df:6d:2c:86:a3:ee:a2:88:c9:31:a6:3a:f1:55:46:e3:a4:
62:a6:0d:20:3f:93:27:08:3a:f4:43:b9:81:4e:3b:2a:1c:12:
ed:1f:26:a8:c3:4b:87:74:30:a9:c4:45:0e:94:f9:46:21:83:
dd:32:e6:43:d0:ac:fa:20:c3:0d:97:97:e0:bf:20:51:27:c9:
2a:03:2b:8c:92:2c:99:69:64:2c:0b:26:46:71:e9:91:0a:a0:
9e:d4:ae:1a:2d:10:fb:92:cb:5c:56:14:02:a5:42:28:bf:5d:
13:7b:db:f0:7c:69:a3:22:74:e9:55:b9:b5:28:fa:75:aa:eb:
d8:36:cd:00:ce:37:f9:9d:69:a3:c7:c5:59:b2:92:cf:95:b2:
89:dd:3a:da:2f:66:fe:a6:08:ff:d7:dd:8d:f8:3c:ec:f2:2c:
e4:80:9d:a9:57:67:d1:b2:58:92:dc:20:70:a8:5a:5c:d5:17:
cd:85:cc:a3:6e:e3:93:d2:7f:7f:4d:b3:19:a8:de:2e:8e:83:
3a:87:52:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeb3pB2Wt2ihOqrNl03YYXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwNjIzMDgxOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTY4N2UxMmUxZDg2NmJhN2VjOWYwOGVhOWVjZWFiNzM2NDI1NjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSfh6D3jsLfzsdddfD+LNCKW7g49
cjvjOE2S3FaJdb/TbJTOs3mkMwC3sYjmgus/ZAtgKFJyj13GfXjrFd2LxFi4cJ8b
6FWf82LeVl/DjVOr88o31OCbjfBRU16sT+V/e3fzcmspNJf3mcm3ZqLV7VXioI3Z
HJLKjtyXH/dqnacVE8KJfWc9XRj7ES+vx8tDzVkaxbWCmIvFy72v0gTy36g2XabI
RLk1n8Jl+XHP8mKWM24AO6DxfY+b0t/Ri7r5ZyO8bX3FcFmjGEu6wyWdxmZ2PJpM
hquGSDrdryAQQJyGYW0JxJKZsSgcukT15kYjktOw61YMjPK+14JoQ4MG1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIVofhLh2Ga6fsnwjqns6rc2QlY/MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvaFdoLUV1SFlacnAteWZDT3FlenF0elpDVmo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4XDMA0G
CSqGSIb3DQEBCwUAA4IBAQBGlc8hSqFrO8gbfCET3wGGEyDRk4jaA43npIuxt0no
5hK0FCG6g0+TqZG3e6R/8Mi0Aqr/z5C+320shqPuoojJMaY68VVG46Ripg0gP5Mn
CDr0Q7mBTjsqHBLtHyaow0uHdDCpxEUOlPlGIYPdMuZD0Kz6IMMNl5fgvyBRJ8kq
AyuMkiyZaWQsCyZGcemRCqCe1K4aLRD7kstcVhQCpUIov10Te9vwfGmjInTpVbm1
KPp1quvYNs0Azjf5nWmjx8VZspLPlbKJ3TraL2b+pgj/192N+Dzs8izkgJ2pV2fR
sliS3CBwqFpc1RfNhcyjbuOT0n9/TbMZqN4ujoM6h1JT
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:42:56 2025 by rpki-client