Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hQfuSPgx6j5w5FOK5CO8gicxcjg.roa
File: hQfuSPgx6j5w5FOK5CO8gicxcjg.roa (raw, json)
Hash identifier: lTq6qqlOJ5RtPv4G7aMVoaSZXDoH6tXtkFjgYeOHndE=
Subject key identifier: 85:07:EE:48:F8:31:EA:3E:70:E4:53:8A:E4:23:BC:82:27:31:72:38
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01973115220B87E4288C442B5D098DB00E12
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hQfuSPgx6j5w5FOK5CO8gicxcjg.roa
Signing time: Mon 02 Jun 2025 14:39:17 +0000
ROA not before: Mon 02 Jun 2025 14:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61002
IP address blocks: 80.96.107.0/24 maxlen: 24
80.97.54.0/23 maxlen: 23
80.97.55.0/24 maxlen: 24
85.120.44.0/23 maxlen: 23
85.122.44.0/24 maxlen: 24
217.156.28.0/24 maxlen: 24
217.156.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:15:22:0b:87:e4:28:8c:44:2b:5d:09:8d:b0:0e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 2 14:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8507ee48f831ea3e70e4538ae423bc8227317238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:f6:27:6a:a7:c0:6b:e0:49:dd:8d:a4:2e:
58:73:ad:1b:f7:32:c8:6b:5d:e5:40:da:ec:46:d2:
05:b8:de:e8:4c:a2:15:cf:52:27:32:39:86:ae:2b:
5b:0a:06:8e:9e:a5:2a:ec:c9:d7:bf:96:9c:97:c9:
81:45:08:87:a5:41:fd:5b:94:21:df:68:4c:2c:45:
e9:78:9f:19:72:a6:e6:5f:4c:e9:f8:d5:70:1e:29:
57:4e:ab:b2:f4:a7:2a:7b:07:39:6c:fa:f0:86:02:
45:cc:31:ab:a1:0b:01:d9:2c:3c:8c:21:be:96:ce:
d1:59:c1:2f:ad:c3:17:53:fc:d3:6a:2e:88:64:ed:
95:1c:f8:77:f9:90:1c:c4:3d:e4:4a:55:dc:06:06:
45:38:04:d9:c6:79:6a:f5:f8:96:d2:df:eb:c6:b6:
cc:93:85:c8:49:8d:cf:c8:0e:2e:69:b8:3e:1a:ab:
3f:0e:98:1b:be:32:97:16:42:9f:74:a3:14:ab:dc:
fd:df:f5:c5:98:b7:2a:e9:1c:42:2b:88:e3:ea:78:
ed:59:e9:d7:87:f3:f4:61:f1:e0:ab:56:cb:1f:68:
f8:8d:10:6f:39:39:b3:56:27:02:21:72:75:94:66:
81:d1:b1:4b:27:58:8a:c9:79:42:47:e6:22:f2:f3:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:EE:48:F8:31:EA:3E:70:E4:53:8A:E4:23:BC:82:27:31:72:38
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/hQfuSPgx6j5w5FOK5CO8gicxcjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.107.0/24
80.97.54.0/23
85.120.44.0/23
85.122.44.0/24
217.156.28.0/24
217.156.108.0/23
Signature Algorithm: sha256WithRSAEncryption
45:67:12:85:7a:20:5a:f5:bc:aa:8a:3d:6b:3a:19:49:76:33:
4a:c5:93:5d:64:46:03:d7:49:b4:08:08:20:8b:c1:01:98:cb:
84:b7:43:0a:a0:29:34:77:12:02:f3:d3:51:0b:41:cd:25:79:
37:b3:6e:a0:62:22:fd:76:fc:c8:34:b4:2d:b3:af:aa:a8:be:
f4:0a:0c:f6:b7:77:6e:b1:f8:07:2f:92:2c:f9:51:c4:5f:a5:
6d:0b:a6:56:c4:19:3a:ab:45:74:02:24:f7:0e:c1:3a:88:49:
e9:8b:68:10:51:a5:2b:e7:7e:01:0a:72:64:41:34:12:01:9e:
8f:86:06:db:ad:df:dd:b1:e3:9c:8d:d8:d5:d0:d3:ec:f1:d4:
8e:0b:7d:79:2c:3d:eb:7a:ec:ab:fc:ba:60:fd:35:9e:10:fb:
b3:8d:33:49:2c:59:67:47:65:fa:47:bd:37:90:e9:fa:a6:06:
6e:6e:38:df:be:81:12:e9:94:ea:e2:44:bf:10:e3:f7:55:ef:
5b:c6:f0:d1:0f:c5:a9:b6:dd:90:8a:19:c8:6a:e1:66:65:f0:
24:fb:0f:c6:a8:32:48:6e:8a:86:7e:52:df:3b:04:5e:85:1f:
cd:ce:f1:be:21:fb:85:5d:03:8f:d5:e5:ed:53:35:2f:6c:32:
0c:cc:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:24:11 2025 by rpki-client