Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Hfyt8Qxc-gVePz7GLADpDZ9etco.roa
File: Hfyt8Qxc-gVePz7GLADpDZ9etco.roa (raw, json)
Hash identifier: uR8oD8fOmYTQyMejXkLhA4C3sZCjQppq7tu7DlOn9C8=
Subject key identifier: 1D:FC:AD:F1:0C:5C:FA:05:5E:3F:3E:C6:2C:00:E9:0D:9F:5E:B5:CA
Certificate issuer: /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Certificate serial: 0197179A90B1347AA97EF9DD4D1812E3ED0E
Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Hfyt8Qxc-gVePz7GLADpDZ9etco.roa
Signing time: Wed 28 May 2025 15:54:54 +0000
ROA not before: Wed 28 May 2025 15:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42484
IP address blocks: 195.114.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:9a:90:b1:34:7a:a9:7e:f9:dd:4d:18:12:e3:ed:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Validity
Not Before: May 28 15:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dfcadf10c5cfa055e3f3ec62c00e90d9f5eb5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:01:48:70:e0:01:a8:6f:f3:99:9e:79:f8:
eb:01:df:90:3a:68:03:41:bc:57:b9:9c:ce:f2:5f:
3b:80:76:6a:df:6c:d4:8b:f4:73:78:92:2b:4c:1f:
64:6d:70:bd:58:f6:fc:4c:dc:84:fa:7d:1a:f1:2c:
cf:80:7b:53:4f:38:0e:cf:12:b7:03:a1:92:fc:49:
40:e1:a1:56:d8:eb:e2:c9:b6:1b:b9:7d:2f:42:02:
67:3b:48:d3:eb:10:65:78:56:e2:a7:f2:db:34:20:
94:de:af:a5:47:84:21:44:4f:ee:70:c6:89:79:99:
20:da:69:91:d4:db:95:26:37:01:b6:f1:6d:ac:f1:
95:f1:df:fb:a2:d0:3f:15:ba:ec:87:ac:53:61:cf:
18:08:be:70:92:45:0c:8f:18:ee:7a:a8:4c:3b:15:
13:e4:49:99:26:c6:b1:74:ea:7e:47:c3:40:53:2f:
2b:3b:f9:14:55:f0:4d:0e:1c:dd:08:96:a0:fa:72:
e8:7b:57:1e:e5:35:90:1c:ab:af:77:6d:29:f9:a7:
e4:4f:b4:d1:b6:fc:10:a8:4a:27:76:0b:7c:af:b9:
8f:42:fb:a2:42:90:18:27:2d:c1:bf:10:85:fd:32:
c4:31:26:74:2e:ba:39:7f:6f:88:a9:35:ab:2a:8d:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FC:AD:F1:0C:5C:FA:05:5E:3F:3E:C6:2C:00:E9:0D:9F:5E:B5:CA
X509v3 Authority Key Identifier:
keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Hfyt8Qxc-gVePz7GLADpDZ9etco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.116.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7e:bb:27:bc:62:57:cd:e8:91:c0:2d:ff:9f:aa:8a:52:d3:
3b:05:5e:a2:38:77:c7:c1:37:ae:bd:ae:85:af:34:43:c1:c2:
ce:af:93:10:56:ff:40:9c:9c:5f:fc:84:e7:9a:07:c2:99:f8:
2c:c4:f2:99:b4:9d:f9:39:04:15:db:01:21:9c:f1:cd:2c:f8:
29:dc:57:05:0e:d2:a7:8f:a4:61:54:63:41:5b:0a:e4:e2:b3:
01:7a:bb:70:b4:54:53:6a:2c:00:a7:f4:69:34:f3:dd:40:b9:
c1:c2:b4:c0:54:bc:05:a6:fb:9f:1d:cc:c9:10:3c:e8:4a:3d:
bb:35:55:30:80:cc:d0:b9:8e:78:5e:0c:0b:b5:ba:30:5c:a4:
28:68:65:eb:cb:08:a9:54:d6:8c:9b:89:c4:7e:7d:d5:51:5e:
8f:2f:32:f8:0c:5e:2a:f9:77:ed:cb:80:4c:ff:56:34:ef:3b:
61:18:e1:4d:b8:e8:70:f5:6e:05:26:1a:f0:5b:f4:4d:2b:65:
9e:72:ca:84:bb:da:e9:0b:b8:a2:11:24:24:28:6d:a8:69:5a:
e8:b6:ea:ec:9d:72:d2:78:55:d1:f0:36:bb:09:f4:ca:97:fa:
56:bb:f1:b7:78:2a:ce:7e:f9:db:a3:4e:01:b0:74:6e:ee:8b:
34:9d:0e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:53 2025 by rpki-client