Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/h-V4YCyNCE3omsXuuAMBsxo_l7I.roa
File: h-V4YCyNCE3omsXuuAMBsxo_l7I.roa (raw, json)
Hash identifier: +PH6IsvUThXKqOZiHkDLtzu2RY8WlWt5iWk/5hrs36o=
Subject key identifier: 87:E5:78:60:2C:8D:08:4D:E8:9A:C5:EE:B8:03:01:B3:1A:3F:97:B2
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0197E9DAA0E115F8B51C840FCEDA53CBE92D
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/h-V4YCyNCE3omsXuuAMBsxo_l7I.roa
Signing time: Tue 08 Jul 2025 11:45:08 +0000
ROA not before: Tue 08 Jul 2025 11:45:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200088
IP address blocks: 37.252.6.0/23 maxlen: 23
37.252.10.0/23 maxlen: 23
92.63.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:da:a0:e1:15:f8:b5:1c:84:0f:ce:da:53:cb:e9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jul 8 11:45:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87e578602c8d084de89ac5eeb80301b31a3f97b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:97:93:90:79:74:82:2b:a9:cf:fa:fb:0a:
e6:4b:ba:a7:bd:10:6e:82:ca:1f:02:d5:19:8e:5e:
b9:44:06:ff:41:1e:8d:7f:16:86:2b:c7:dd:e0:63:
1e:3b:9a:b1:a1:31:88:02:3c:55:aa:21:04:13:5f:
d5:de:52:f3:8c:d1:9b:50:11:39:7d:a9:88:4d:97:
65:47:2f:5f:09:76:0f:77:d6:83:2e:04:8d:2a:4c:
f5:56:8b:f0:e6:ed:21:77:b1:cd:2b:82:c0:83:89:
72:4a:66:24:75:bb:80:27:ac:0f:07:e3:cd:22:cd:
f5:c9:f3:20:30:09:5a:55:ed:eb:f0:8f:09:2f:3c:
01:75:85:98:b5:c3:c1:e7:63:1f:c7:38:8e:53:b2:
a5:72:ee:01:b7:51:fd:24:7b:4d:e2:e8:fd:af:a0:
7f:75:d2:c2:91:f8:1b:91:3b:6c:fb:84:cf:4f:48:
e2:79:d6:b9:e5:24:03:ef:cc:22:c8:1e:d3:85:31:
11:24:8b:09:f2:0e:77:83:1a:a0:61:53:b0:66:56:
0b:9c:4b:5d:26:1d:0c:bb:6a:0e:b7:96:8d:8c:b4:
04:a0:c4:9f:04:8a:b8:11:d1:c2:56:4d:59:b3:b0:
c7:e9:d7:ff:bd:9f:d7:a1:6f:5c:d1:c9:4c:25:78:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E5:78:60:2C:8D:08:4D:E8:9A:C5:EE:B8:03:01:B3:1A:3F:97:B2
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/h-V4YCyNCE3omsXuuAMBsxo_l7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.6.0/23
37.252.10.0/23
92.63.227.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a7:6d:8c:6b:b8:a5:fc:66:7a:56:dc:dc:bf:ff:3c:31:37:
0b:33:ff:48:d7:1a:c0:bb:36:0d:d8:db:f2:8d:09:32:c5:f3:
84:a4:f2:f0:0e:15:86:af:50:71:ca:3c:97:0a:fd:6d:8a:4d:
dc:df:23:f3:14:ce:5f:21:fb:a8:a8:7e:a6:23:9f:03:09:46:
e4:4b:79:2e:c5:49:6b:0b:e1:7c:d8:b0:35:f1:f8:a6:6c:e1:
2a:9f:41:3f:72:74:fc:6c:40:3c:18:b2:37:09:4e:b3:9b:8b:
44:d1:96:96:42:d1:c0:71:1d:81:6a:0d:57:bb:2d:4d:f8:82:
57:34:64:4d:7e:82:e2:de:95:24:aa:be:0d:22:45:a5:fd:e0:
03:05:a5:5f:6e:45:45:8c:7c:60:41:04:66:25:cf:54:3b:42:
89:bf:7a:4c:77:11:5e:f9:ad:47:51:2b:06:99:29:cf:b5:ff:
99:4f:f1:14:77:3f:f8:d8:e0:64:81:23:2c:c1:5d:fd:dd:65:
ab:69:b5:70:d1:42:3b:e6:bd:3b:b7:fd:24:c1:3f:7e:c2:cf:
10:47:be:53:49:15:45:4c:e2:49:35:71:fb:f3:45:c3:8c:5e:
6a:0c:2f:fd:32:b1:88:09:ab:cd:87:6b:c3:a5:b5:e2:67:dc:
88:5e:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:15:04 2025 by rpki-client