Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/hzfPn6OtAv0uvvwro1B8i4NcGgw.roa
File: hzfPn6OtAv0uvvwro1B8i4NcGgw.roa (raw, json)
Hash identifier: 7hWpl5O8danSnIxZLjLxt9gMPgFm0E5udpDgdhH+Kno=
Subject key identifier: 87:37:CF:9F:A3:AD:02:FD:2E:BE:FC:2B:A3:50:7C:8B:83:5C:1A:0C
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019828B807500E8ED3B3AFAD23649CB46F93
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/hzfPn6OtAv0uvvwro1B8i4NcGgw.roa
Signing time: Sun 20 Jul 2025 16:43:25 +0000
ROA not before: Sun 20 Jul 2025 16:43:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55933
IP address blocks: 45.153.128.0/22 maxlen: 24
193.42.24.0/22 maxlen: 22
193.42.24.0/23 maxlen: 23
193.42.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:b8:07:50:0e:8e:d3:b3:af:ad:23:64:9c:b4:6f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jul 20 16:43:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8737cf9fa3ad02fd2ebefc2ba3507c8b835c1a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:63:f6:cc:c0:3d:6b:d8:83:42:d8:ef:0a:
c9:89:48:af:ac:75:f6:ad:22:20:d0:3f:24:ec:0a:
4e:e7:5d:ac:31:41:2c:f6:25:06:a7:d3:37:44:94:
a5:4f:f2:0d:4c:eb:e7:3f:4d:ba:4c:a9:12:ea:cc:
1d:ab:54:0d:14:29:f0:ca:dd:58:ac:41:0c:45:be:
1a:99:ef:ad:64:c7:56:e4:34:16:09:a8:1d:77:25:
bf:fe:c3:d7:1d:4c:f9:de:09:84:1f:87:bf:9c:fb:
ec:64:22:b6:f9:37:98:51:0e:95:1e:45:44:d2:69:
60:bd:bf:8d:e1:ab:8c:b8:f4:4e:35:20:c5:8c:da:
8f:66:42:58:62:64:93:f8:15:2c:66:4e:d9:ee:3e:
7c:c6:dd:d0:67:73:f8:e5:67:a3:68:81:66:ea:08:
3a:fe:2d:d8:94:73:18:2a:2c:ab:11:a8:98:51:44:
9c:87:19:78:2f:ba:58:cf:ea:8c:1a:1b:8c:6f:a0:
0f:a1:91:88:c9:a1:13:e7:29:9a:74:c3:77:2c:f1:
00:1b:d8:7b:29:c5:b6:69:46:e5:1d:f1:bf:f6:5f:
36:ed:5e:a0:23:d4:01:3e:14:24:0c:d7:0b:52:ff:
1c:24:5d:c5:6e:74:d9:36:5a:ce:77:b2:73:b2:0f:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:37:CF:9F:A3:AD:02:FD:2E:BE:FC:2B:A3:50:7C:8B:83:5C:1A:0C
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/hzfPn6OtAv0uvvwro1B8i4NcGgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.128.0/22
193.42.24.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:e3:f1:56:b1:c5:c8:bd:88:a5:f1:5e:11:55:5e:b7:85:8d:
1c:3a:8e:bf:a5:7a:20:c2:3c:31:dc:44:ee:49:52:b5:d6:54:
67:f0:27:2d:36:7e:3d:5e:d2:37:14:f1:bd:78:9d:92:15:fa:
01:e1:9d:c0:a8:28:40:d7:a3:33:6f:7f:0e:90:30:66:f4:6c:
5e:53:e2:6c:b5:53:6c:d0:e9:2f:26:f3:a8:23:f2:fa:0d:8a:
dc:1b:6e:d6:e9:42:72:27:8c:b0:c2:bb:98:2b:b3:5f:73:1c:
41:eb:0a:c6:b0:f5:f8:f2:c0:a1:65:f7:ed:ab:52:ee:8a:c0:
23:b8:ba:14:cb:64:75:9b:8a:90:78:c2:09:e0:76:01:e8:da:
9a:07:01:cb:4c:a8:4c:ce:7a:cb:48:58:7c:ec:a4:b9:c8:d7:
6c:19:18:03:b7:52:a5:9d:e0:be:c2:f7:d4:8e:de:f6:9e:62:
eb:e7:16:62:ba:85:55:60:fe:59:ba:a7:ff:17:7a:9c:04:cd:
12:11:b5:ec:2f:f4:6f:f5:70:c4:36:32:c1:04:30:91:fc:58:
40:96:3d:d1:e8:26:6c:e1:1c:f0:57:2d:66:ae:ca:3a:74:0a:
1c:21:8f:b8:1e:50:c6:03:42:35:68:46:fc:f1:09:83:f0:59:
6b:af:59:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZgouAdQDo7Ts6+tI2SctG+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1
YTYyNDQwHhcNMjUwNzIwMTY0MzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzM3Y2Y5ZmEzYWQwMmZkMmViZWZjMmJhMzUwN2M4YjgzNWMxYTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumFj9szAPWvYg0LY7wrJiUivrHX2
rSIg0D8k7ApO512sMUEs9iUGp9M3RJSlT/INTOvnP026TKkS6swdq1QNFCnwyt1Y
rEEMRb4ame+tZMdW5DQWCagddyW//sPXHUz53gmEH4e/nPvsZCK2+TeYUQ6VHkVE
0mlgvb+N4auMuPRONSDFjNqPZkJYYmST+BUsZk7Z7j58xt3QZ3P45WejaIFm6gg6
/i3YlHMYKiyrEaiYUUSchxl4L7pYz+qMGhuMb6APoZGIyaET5ymadMN3LPEAG9h7
KcW2aUblHfG/9l827V6gI9QBPhQkDNcLUv8cJF3FbnTZNlrOd7Jzsg+AtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIc3z5+jrQL9Lr78K6NQfIuDXBoMMB8GA1UdIwQY
MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt
MDg1MmNiMzUzMjkzLzEvaHpmUG42T3RBdjB1dnZ3cm8xQjhpNE5jR2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz
LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZmAAwQC
wSoYMA0GCSqGSIb3DQEBCwUAA4IBAQC74/FWscXIvYil8V4RVV63hY0cOo6/pXog
wjwx3ETuSVK11lRn8CctNn49XtI3FPG9eJ2SFfoB4Z3AqChA16Mzb38OkDBm9Gxe
U+JstVNs0OkvJvOoI/L6DYrcG27W6UJyJ4ywwruYK7NfcxxB6wrGsPX48sChZfft
q1LuisAjuLoUy2R1m4qQeMIJ4HYB6NqaBwHLTKhMznrLSFh87KS5yNdsGRgDt1Kl
neC+wvfUjt72nmLr5xZiuoVVYP5Zuqf/F3qcBM0SEbXsL/Rv9XDENjLBBDCR/FhA
lj3R6CZs4RzwVy1mrso6dAocIY+4HlDGA0I1aEb88QmD8Flrr1mJ
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:38:00 2025 by rpki-client