Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HkeR6AjmN149Ah4ksTH8Ij1HEGg.roa
File: HkeR6AjmN149Ah4ksTH8Ij1HEGg.roa (raw, json)
Hash identifier: lC37zHsuwp6qwvkWdRp5XNoEdqZwZlcJZAySCU3wZcI=
Subject key identifier: 1E:47:91:E8:08:E6:37:5E:3D:02:1E:24:B1:31:FC:22:3D:47:10:68
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197D00ADF3B66581418FEF31E6773DF71B7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HkeR6AjmN149Ah4ksTH8Ij1HEGg.roa
Signing time: Thu 03 Jul 2025 11:27:42 +0000
ROA not before: Thu 03 Jul 2025 11:27:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.139.128.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:0a:df:3b:66:58:14:18:fe:f3:1e:67:73:df:71:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 3 11:27:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e4791e808e6375e3d021e24b131fc223d471068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:85:2d:8c:ff:9d:e8:44:ab:83:2e:3e:0f:0b:
59:b8:1a:52:73:fb:45:a8:9b:d5:61:f6:1f:35:80:
c7:30:f7:53:94:ba:97:8a:47:dc:5f:4b:0f:b5:0b:
be:4c:74:71:d0:84:13:b5:04:6c:fe:4e:4d:3d:80:
b8:d0:49:20:7b:98:6b:68:91:f4:b1:b0:45:32:b3:
16:b9:af:37:c7:98:5e:bc:ad:64:ef:b7:25:39:66:
75:fd:b7:f7:49:a0:a0:bc:8c:b5:95:83:ca:48:b6:
9c:80:5d:13:fe:cf:e0:84:63:12:ef:4d:7d:01:1b:
74:68:5f:9c:81:23:09:54:af:65:13:ea:74:2f:c9:
69:33:17:b0:a2:77:66:ea:32:9f:84:9c:8f:58:3d:
a4:57:fc:bc:ec:71:33:f7:5a:f3:16:d3:58:ed:87:
89:1a:dd:59:dc:18:28:14:a1:46:e3:29:f7:6a:10:
f8:05:20:62:08:0f:f8:ad:77:31:09:98:67:2b:94:
63:d5:d0:72:dc:8e:1e:68:a4:98:09:8d:ee:c8:54:
52:9e:ed:42:f6:0e:7a:38:45:10:6b:18:e1:80:94:
50:9d:38:bb:97:cb:5b:ac:90:e5:04:7a:9f:2f:7c:
27:94:d4:0e:a6:0c:6d:0b:49:71:4d:ee:21:84:28:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:47:91:E8:08:E6:37:5E:3D:02:1E:24:B1:31:FC:22:3D:47:10:68
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HkeR6AjmN149Ah4ksTH8Ij1HEGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.128.234.0/23
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
91.92.21.0/24
109.206.240.0/24
109.206.243.0/24
171.22.30.0/24
185.218.138.0/24
185.246.221.0/24
193.47.61.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e6:2e:3b:fc:36:90:f1:67:5d:59:1e:cd:7e:a9:19:69:96:
db:92:56:bb:94:30:f8:82:f1:63:7b:97:d9:ab:2d:82:35:ec:
f9:ce:3d:f1:64:00:8b:ed:83:ad:63:85:90:78:6d:d4:7b:fe:
47:90:8c:bd:10:30:ab:ed:6d:9a:da:aa:6a:00:a4:22:c4:5d:
a6:b4:94:1f:ef:2a:2d:21:50:85:3b:4d:8f:07:3c:1b:42:54:
9d:28:99:8c:13:60:76:9e:2b:43:54:0e:ac:27:43:89:11:75:
fb:4e:28:f3:e7:a5:34:fe:cf:c5:02:20:87:59:c0:8e:ad:5e:
bc:5b:06:8d:3a:ca:f0:d6:c6:5a:fe:ae:1b:a7:0f:49:8d:4c:
58:15:d4:e2:0d:7d:88:45:c6:07:70:ce:43:fa:51:8a:46:ea:
9c:2c:73:00:23:37:43:5c:aa:f7:db:e4:6f:ab:5c:7c:cd:83:
89:ad:25:5e:06:a1:04:cc:95:2a:96:f2:5f:43:17:0d:45:74:
54:40:e8:86:ce:1c:e0:76:25:4d:21:c4:66:52:8f:77:ea:6f:
e3:ec:2b:91:2a:0d:1a:fe:5f:ca:b7:91:3c:b1:eb:7b:df:41:
02:97:79:88:cd:04:54:62:27:42:49:1d:87:75:51:35:15:29:
93:a5:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:20:25 2025 by rpki-client