Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/hKxXbJh8EpSdHg8D8QXnVd_gFZc.roa
File: hKxXbJh8EpSdHg8D8QXnVd_gFZc.roa (raw, json)
Hash identifier: Wqz5tqhjb1DI42hOXkF6yrPQYLgpdlMJGKN0K9CLgPQ=
Subject key identifier: 84:AC:57:6C:98:7C:12:94:9D:1E:0F:03:F1:05:E7:55:DF:E0:15:97
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0198139CB2BF3B91172CD3DDD3439997F3A6
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/hKxXbJh8EpSdHg8D8QXnVd_gFZc.roa
Signing time: Wed 16 Jul 2025 14:21:32 +0000
ROA not before: Wed 16 Jul 2025 14:21:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 217.177.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:9c:b2:bf:3b:91:17:2c:d3:dd:d3:43:99:97:f3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jul 16 14:21:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84ac576c987c12949d1e0f03f105e755dfe01597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:1a:47:65:f3:77:b4:b2:c6:2d:4d:00:e3:
52:06:b0:84:42:dd:99:93:f2:1a:55:f7:3d:55:81:
09:8c:2b:9a:e4:17:1b:13:73:e3:38:c6:22:f6:1b:
4e:3a:a5:92:aa:a8:f1:1c:cd:ec:48:fb:e2:6d:ad:
32:49:99:1e:63:a1:03:81:e8:b7:5b:0d:0c:be:5c:
4f:5d:fb:84:67:b3:1b:0f:e0:77:bf:89:41:37:55:
b7:92:8e:68:4e:45:4d:6c:18:89:7d:7e:d7:e7:4c:
73:4c:11:e5:2d:0a:cb:61:ea:de:38:b6:d8:85:5e:
3c:71:14:1c:37:c0:18:58:11:ad:17:14:9b:6b:15:
6f:9f:17:eb:40:49:5b:ab:26:73:cb:44:a5:53:7a:
b8:58:85:90:e9:da:2c:e7:53:64:aa:e2:7f:b8:7f:
b1:44:f9:53:46:53:17:2f:ff:e2:12:2d:44:85:68:
39:9b:3a:26:6f:2f:ae:75:9b:3a:cb:c0:9e:3b:99:
56:70:28:bb:b1:ef:c5:7a:e9:31:1e:a0:2d:46:d5:
12:62:57:5a:25:aa:9c:1b:8f:cf:78:c9:ee:e8:eb:
0c:31:7f:1a:0e:fc:fa:54:67:d3:c2:5a:ae:34:2c:
af:5d:d3:e1:85:14:0e:81:1d:06:a1:95:1d:07:8c:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AC:57:6C:98:7C:12:94:9D:1E:0F:03:F1:05:E7:55:DF:E0:15:97
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/hKxXbJh8EpSdHg8D8QXnVd_gFZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.35.0/24
Signature Algorithm: sha256WithRSAEncryption
88:df:69:42:45:1c:ba:e1:c9:56:41:b7:12:a0:bc:0b:59:85:
14:fd:81:e3:06:87:07:7a:17:da:6e:b8:85:df:e9:b8:4e:79:
c6:dd:69:dc:d8:95:48:9b:cb:5a:0d:69:be:de:ab:a8:58:99:
73:c2:cf:e7:0d:f2:10:00:08:c3:6d:9e:c1:73:7b:52:0b:de:
8d:c0:dc:b7:5a:d9:b3:dc:d8:12:d8:61:72:c3:87:7f:2a:bb:
4d:c8:fe:59:c4:12:6a:3c:06:ea:0d:be:ee:c8:1f:a5:5c:f7:
3d:c0:fd:25:7e:e7:f4:b2:43:12:09:75:16:c7:7f:7a:ab:65:
ec:e5:09:ed:77:c4:d8:6c:bf:87:e6:6f:56:c7:ea:77:47:4e:
5f:4d:37:49:c4:56:ce:82:35:dc:34:37:09:dd:f9:60:e3:df:
c3:07:fc:3e:80:97:c4:3f:ba:31:20:7c:55:c2:2e:9e:c6:b5:
be:fa:64:e7:71:41:23:53:28:f6:2b:1c:71:fb:23:da:99:53:
82:55:c8:74:84:66:69:9b:98:54:57:c7:6f:78:7f:6d:da:98:
6b:1a:3a:b9:b2:00:b6:45:48:e5:e1:29:17:55:59:39:44:08:
0f:73:2a:23:59:39:51:e2:a9:88:11:f8:61:3c:7f:0d:2b:80:
c4:d9:04:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:35:42 2025 by rpki-client