Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hxO46FdvlJEUC4n3CoKIGWzcl0s.roa
File: hxO46FdvlJEUC4n3CoKIGWzcl0s.roa (raw, json)
Hash identifier: gUB21vsbkTfEE+jj8rFx1UXcFJUdd9CWo6/HGuaVGe4=
Subject key identifier: 87:13:B8:E8:57:6F:94:91:14:0B:89:F7:0A:82:88:19:6C:DC:97:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01973FA3566448148CC1F52AC97A08DAC058
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hxO46FdvlJEUC4n3CoKIGWzcl0s.roa
Signing time: Thu 05 Jun 2025 10:29:18 +0000
ROA not before: Thu 05 Jun 2025 10:29:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208287
IP address blocks: 82.115.211.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:a3:56:64:48:14:8c:c1:f5:2a:c9:7a:08:da:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 5 10:29:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8713b8e8576f9491140b89f70a8288196cdc974b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:23:2c:86:f4:45:ff:d2:1d:5e:f7:41:27:
95:d0:e2:37:63:c4:3c:f1:1c:55:dd:df:06:d0:8c:
f4:c6:fb:96:3e:1e:c4:94:47:42:66:87:b4:ce:a7:
03:5c:01:32:85:72:62:5c:70:9c:6a:26:e9:c0:2d:
8f:f6:cb:03:48:1e:25:48:78:b3:a0:76:ff:da:c9:
15:0f:ea:bc:7a:12:7e:66:ad:13:9c:86:ca:b4:85:
99:d7:2b:60:a0:98:3e:62:14:a8:74:b0:4d:a2:ac:
86:7d:46:4b:68:5d:7a:5d:fe:a3:f1:0e:32:6f:4c:
c2:9d:83:e1:21:f5:2a:24:fb:3f:5e:b8:86:14:a9:
d3:f9:17:11:57:df:dc:25:54:71:b5:53:12:b4:fa:
47:a7:46:09:e0:86:e0:0c:c9:9d:39:f2:da:0c:46:
09:61:fa:aa:d8:b0:5b:89:30:da:1d:ee:06:9d:61:
45:ea:52:35:b6:86:d7:e6:29:d6:94:cd:56:13:95:
d8:4e:4e:ca:1a:6c:a6:d8:ec:70:29:da:c1:67:ec:
b9:e1:b6:4f:fc:5d:d3:6b:20:92:6a:5e:54:e6:97:
49:91:f2:d5:10:8a:5a:83:9e:00:9a:e8:1a:97:91:
5b:80:1f:c7:f5:e4:5d:5b:c7:b8:8b:85:03:33:3a:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:13:B8:E8:57:6F:94:91:14:0B:89:F7:0A:82:88:19:6C:DC:97:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hxO46FdvlJEUC4n3CoKIGWzcl0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.211.0/24
185.222.160.0/24
Signature Algorithm: sha256WithRSAEncryption
91:22:b4:de:6f:14:36:76:46:10:a5:7d:5a:a7:88:a3:db:13:
3d:f5:4a:13:0b:15:08:9b:3a:dd:03:f6:3c:d0:31:6e:2c:98:
4d:ee:86:72:1a:93:9e:ca:39:78:73:9e:5e:ab:d8:17:41:85:
e8:e3:78:16:bb:0b:28:3a:10:07:84:dd:59:3d:19:a8:b6:12:
81:09:0b:b7:dc:be:20:18:38:73:b2:e1:9f:e9:b3:aa:a1:e4:
5b:2b:00:18:2d:73:7f:c0:fc:e8:9f:44:52:f3:60:ae:ad:d2:
0f:97:1e:f2:c0:28:74:74:7a:b3:5c:20:89:ed:de:85:21:97:
32:7b:82:21:6c:db:c8:78:c3:8e:bf:ae:c1:af:82:7a:dd:25:
97:09:17:ea:1a:6c:b3:8c:6f:20:a7:fa:0d:86:86:55:13:54:
6c:6c:e5:9b:00:00:d1:39:1f:f0:71:71:8f:da:fb:0d:be:fa:
15:50:aa:a1:46:cc:f1:24:5a:9e:94:84:fa:a6:ef:88:8d:02:
98:ce:a9:ee:ba:ea:7a:a7:9b:f4:84:1b:b7:5d:e5:38:99:20:
ae:0f:77:d9:6d:85:d7:7a:73:5d:c2:4d:ca:b9:ac:6b:46:bc:
c3:bf:6a:12:d9:14:34:8e:22:ec:6f:9d:31:ae:92:a8:7b:44:
24:41:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:53 2025 by rpki-client