Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/HDWOzuPTwlAHknanrzPQOxDtfLY.roa
File: HDWOzuPTwlAHknanrzPQOxDtfLY.roa (raw, json)
Hash identifier: FUrGik+y3pqdGMlwd5PDuEglRaEJqMBal6SEbEqnbvU=
Subject key identifier: 1C:35:8E:CE:E3:D3:C2:50:07:92:76:A7:AF:33:D0:3B:10:ED:7C:B6
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 019731736EA5C09CDFA18F2DCC2E7774CAE7
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/HDWOzuPTwlAHknanrzPQOxDtfLY.roa
Signing time: Mon 02 Jun 2025 16:22:17 +0000
ROA not before: Mon 02 Jun 2025 16:22:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 78.143.252.0/24 maxlen: 24
78.143.253.0/24 maxlen: 24
79.135.102.0/23 maxlen: 24
194.33.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:73:6e:a5:c0:9c:df:a1:8f:2d:cc:2e:77:74:ca:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jun 2 16:22:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c358ecee3d3c250079276a7af33d03b10ed7cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:02:eb:a9:ca:55:d0:c7:8b:6d:5a:97:4d:
86:4f:1b:de:b4:f5:50:33:e0:94:8b:e0:33:54:a2:
c4:42:cc:ea:fe:ab:7f:c4:72:06:15:26:19:09:e9:
a5:dc:f8:2f:2a:cb:d8:fa:ea:da:93:61:f2:bd:4f:
5d:1e:4b:0e:bf:c6:04:10:d3:f6:ec:a3:73:e8:ef:
6c:e6:8b:2a:b7:e5:da:40:8a:17:76:bf:d3:b3:de:
dc:9b:6b:41:9c:fc:ee:5c:a7:54:f3:95:eb:76:3f:
03:74:c4:15:ce:5a:2b:2c:64:d0:65:8b:a6:6c:05:
85:79:71:24:72:32:16:a3:25:ce:b1:76:ce:fa:d8:
f7:65:09:15:d1:36:78:a5:21:81:41:ba:94:c0:1a:
fe:b9:70:d4:73:6e:2f:e5:18:38:e0:0e:4b:c0:0b:
47:37:91:c3:e8:54:2f:86:b9:f8:a9:e1:a5:f2:59:
3c:0b:3d:dc:12:1e:7a:7b:8e:74:0c:f9:d4:34:b7:
49:f1:00:90:7e:68:16:8d:53:14:44:3c:64:b6:84:
8f:c0:30:d0:e5:e0:53:e1:f9:17:c1:54:b5:14:3a:
10:a5:cc:c1:6f:d9:ba:a7:e5:8c:77:88:e6:81:20:
78:71:75:50:79:51:ac:a8:71:04:73:5a:48:d5:ae:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:35:8E:CE:E3:D3:C2:50:07:92:76:A7:AF:33:D0:3B:10:ED:7C:B6
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/HDWOzuPTwlAHknanrzPQOxDtfLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.252.0/23
79.135.102.0/23
194.33.150.0/24
Signature Algorithm: sha256WithRSAEncryption
70:85:4c:bc:47:dc:65:1e:d2:65:c7:6f:45:ee:4a:94:08:21:
d8:58:4a:66:ef:b3:33:f6:52:37:13:d0:e3:c9:cb:30:25:a7:
2d:84:95:57:0c:a1:3a:d3:5d:bb:f3:d8:1f:d1:2e:b1:d1:cb:
ed:c9:ee:82:57:09:8c:56:01:aa:6e:ae:9d:c9:ad:d7:ff:5f:
a8:34:40:15:3a:5d:15:c5:d5:2c:e4:d9:aa:bb:fd:47:a4:94:
87:c5:4f:20:7d:c1:cd:ab:00:66:fb:89:77:4c:66:b5:e7:55:
47:c7:83:b8:77:0a:2d:48:c9:ad:a3:67:c4:de:bb:2f:e6:17:
05:a0:d0:20:f5:a5:a8:89:51:19:21:f0:14:57:8b:a1:8f:a1:
2b:1a:02:d2:35:b9:5e:9f:f7:c3:b9:fc:e4:27:12:ff:1a:10:
a7:ec:94:12:28:68:c8:52:1f:32:a6:97:72:30:49:c5:97:f4:
3e:82:db:e0:f1:9c:e7:b7:6f:ad:bd:be:6f:bf:1a:f9:ab:a5:
ea:8c:36:eb:a6:3c:da:a7:3d:e4:88:11:bd:f5:05:83:cd:5a:
a8:79:89:db:b3:d3:ef:b3:3b:a5:4c:9c:89:93:bd:e0:a7:b9:
0c:45:d7:b8:a2:56:f4:e0:d0:d8:91:2a:7f:d9:c4:ed:a1:13:
3d:44:b1:d3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZcxc26lwJzfoY8tzC53dMrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0
ZWE1MDAwHhcNMjUwNjAyMTYyMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzM1OGVjZWUzZDNjMjUwMDc5Mjc2YTdhZjMzZDAzYjEwZWQ3Y2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksYC66nKVdDHi21al02GTxvetPVQ
M+CUi+AzVKLEQszq/qt/xHIGFSYZCeml3PgvKsvY+urak2HyvU9dHksOv8YEENP2
7KNz6O9s5osqt+XaQIoXdr/Ts97cm2tBnPzuXKdU85Xrdj8DdMQVzlorLGTQZYum
bAWFeXEkcjIWoyXOsXbO+tj3ZQkV0TZ4pSGBQbqUwBr+uXDUc24v5Rg44A5LwAtH
N5HD6FQvhrn4qeGl8lk8Cz3cEh56e450DPnUNLdJ8QCQfmgWjVMURDxktoSPwDDQ
5eBT4fkXwVS1FDoQpczBb9m6p+WMd4jmgSB4cXVQeVGsqHEEc1pI1a7ggwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBw1js7j08JQB5J2p68z0DsQ7Xy2MB8GA1UdIwQY
MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt
OGU5Yjk4YTk5Y2RiLzEvSERXT3p1UFR3bEFIa25hbnJ6UFFPeER0ZkxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri
LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBTo/8AwQB
T4dmAwQAwiGWMA0GCSqGSIb3DQEBCwUAA4IBAQBwhUy8R9xlHtJlx29F7kqUCCHY
WEpm77Mz9lI3E9DjycswJacthJVXDKE6012789gf0S6x0cvtye6CVwmMVgGqbq6d
ya3X/1+oNEAVOl0VxdUs5Nmqu/1HpJSHxU8gfcHNqwBm+4l3TGa151VHx4O4dwot
SMmto2fE3rsv5hcFoNAg9aWoiVEZIfAUV4uhj6ErGgLSNblen/fDufzkJxL/GhCn
7JQSKGjIUh8yppdyMEnFl/Q+gtvg8Zznt2+tvb5vvxr5q6XqjDbrpjzapz3kiBG9
9QWDzVqoeYnbs9PvszulTJyJk73gp7kMRde4olb04NDYkSp/2cTtoRM9RLHT
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:27 2025 by rpki-client