Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hfkXJFjOkPDBwTBL8MY2hUJxQhA.roa
File: hfkXJFjOkPDBwTBL8MY2hUJxQhA.roa (raw, json)
Hash identifier: YCjGJRd6CH0+h/6ItbKULfSD/yxFfozw0+8UjuWtk84=
Subject key identifier: 85:F9:17:24:58:CE:90:F0:C1:C1:30:4B:F0:C6:36:85:42:71:42:10
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197F3FE2C34D58287B0857372B46C714CEF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hfkXJFjOkPDBwTBL8MY2hUJxQhA.roa
Signing time: Thu 10 Jul 2025 11:00:10 +0000
ROA not before: Thu 10 Jul 2025 11:00:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 82.153.220.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/24 maxlen: 24
213.210.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:fe:2c:34:d5:82:87:b0:85:73:72:b4:6c:71:4c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 10 11:00:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85f9172458ce90f0c1c1304bf0c6368542714210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:9b:68:3c:47:3f:d0:4d:81:97:e6:5d:54:
b6:e5:8f:ce:c0:d3:e4:49:21:cc:e6:0a:4c:3b:38:
9a:3d:ff:fa:4d:f9:ac:bf:34:cc:61:e5:a6:26:6f:
b8:fe:4a:83:9d:7a:bf:87:e4:0b:8d:60:92:a0:59:
1a:a8:d8:27:a4:7f:3e:09:54:12:b4:d6:af:e9:b2:
6b:c7:c2:4a:2a:2d:fe:4a:78:50:4b:59:84:af:1b:
a5:51:39:e0:98:e7:97:a8:06:75:2f:7d:88:75:be:
23:6d:d8:7b:7c:b8:7e:04:b9:5a:c8:c3:40:e2:8a:
fd:9a:a6:13:99:39:a7:78:e1:9d:43:b5:d1:db:a3:
34:a0:ec:80:f1:0f:cf:32:22:24:09:58:73:38:1f:
05:5a:30:a7:19:3c:6f:02:c6:b7:b5:f3:02:aa:13:
47:57:82:74:0b:41:03:94:f2:f1:64:14:6e:af:69:
e8:ab:4a:1c:96:e8:50:87:12:91:f9:6b:13:da:38:
b0:bd:e5:5d:41:a3:ea:63:a4:ae:bb:bf:22:db:f5:
a9:05:44:05:85:59:bf:94:d1:fc:45:40:be:fd:47:
35:aa:2d:40:ab:88:25:5d:f5:7a:19:54:6a:3f:6d:
b3:7a:75:9d:6b:49:bc:b5:ce:5f:3c:d8:96:7d:8f:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F9:17:24:58:CE:90:F0:C1:C1:30:4B:F0:C6:36:85:42:71:42:10
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hfkXJFjOkPDBwTBL8MY2hUJxQhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.220.0/24
82.153.255.0/24
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.155.0/24
89.213.162.0/24
89.213.167.0/24
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.212.0/24
89.213.224.0/24
213.210.11.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3c:2e:5d:a6:5a:c2:c9:e8:5f:97:ee:3f:c3:7b:e1:32:30:
8b:b8:e6:20:89:7d:80:f6:f2:ef:f3:06:23:c6:9f:51:c4:bb:
1d:e8:31:4e:48:92:3f:12:c5:f2:22:79:1d:11:e7:ca:c1:aa:
fc:b0:84:9b:3a:ad:e2:a4:15:b6:54:0d:bd:14:ac:1c:64:ab:
42:85:d8:26:eb:6c:5d:d4:b4:e0:e2:21:b1:d3:47:f9:20:23:
b3:fa:6f:2d:4d:e7:69:dd:ed:ff:9f:52:3f:b7:af:17:c6:4e:
25:a5:71:b4:26:ea:54:6c:44:a9:ad:dd:9a:7e:b0:13:a0:0c:
0f:b5:8b:4f:c8:2c:d0:92:d8:24:a1:41:2b:55:eb:9d:8e:84:
b3:bb:62:cd:ea:5b:dd:9f:4c:58:6e:e9:d9:9a:e6:48:c1:71:
54:eb:2a:1e:79:3a:9b:7e:09:27:22:ac:70:12:4c:9e:70:bd:
e2:a8:34:07:2c:48:56:ae:11:46:f1:a6:ec:52:6d:ce:48:f2:
9e:58:a0:52:d4:c4:dd:64:1e:20:27:28:2c:96:fe:ba:a0:03:
0a:6d:17:ef:70:24:a2:97:2e:12:ab:82:c6:eb:9e:63:22:fb:
64:e7:18:1e:be:28:6d:61:9c:55:c1:f1:3a:5d:3c:74:bc:8f:
e4:7a:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:17:50 2025 by rpki-client