Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/HdQg4z2Zf1RFHyfPIhhO8wU76o4.roa
File: HdQg4z2Zf1RFHyfPIhhO8wU76o4.roa (raw, json)
Hash identifier: 6V9zMRoiTuGwCa4UmUjRFtWch8Ql0rvMtNhWDgEc7Wc=
Subject key identifier: 1D:D4:20:E3:3D:99:7F:54:45:1F:27:CF:22:18:4E:F3:05:3B:EA:8E
Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial: 0196F7922F70A36E91A4F5F99C8DB8931448
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/HdQg4z2Zf1RFHyfPIhhO8wU76o4.roa
Signing time: Thu 22 May 2025 10:37:54 +0000
ROA not before: Thu 22 May 2025 10:37:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212598
IP address blocks: 5.42.202.0/24 maxlen: 24
91.142.130.0/24 maxlen: 24
185.102.87.0/24 maxlen: 24
194.31.59.0/24 maxlen: 24
194.31.64.0/24 maxlen: 24
194.31.79.0/24 maxlen: 24
194.31.87.0/24 maxlen: 24
2a0f:a440::/29 maxlen: 29
2a12:1dc7:fffd::/48 maxlen: 48
2a12:8540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:92:2f:70:a3:6e:91:a4:f5:f9:9c:8d:b8:93:14:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Validity
Not Before: May 22 10:37:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dd420e33d997f54451f27cf22184ef3053bea8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:79:97:b3:9f:6c:c5:2c:1e:99:fa:03:96:
c5:1d:63:bc:f9:94:7b:ec:8d:13:29:be:5e:7d:7b:
bc:60:df:6b:b1:06:2c:31:36:d7:f7:7c:ba:57:eb:
07:66:78:f5:59:01:6b:9b:ca:d1:f0:62:69:30:51:
f3:d9:c7:3d:93:71:74:d3:6b:e3:05:fa:73:4a:69:
f7:cf:dd:38:f9:a8:54:74:be:f6:de:30:05:ec:9f:
62:97:9f:61:44:63:5b:76:45:de:a0:80:e0:c6:57:
e5:73:d9:ae:9c:c7:45:6b:31:3f:cf:e7:14:3e:60:
79:24:21:49:39:ff:cb:28:45:65:59:e2:cf:35:31:
49:23:d2:dd:2a:9b:78:94:53:62:a7:53:1f:e7:23:
2e:0b:8b:3d:0e:1b:6d:91:e8:ef:d9:57:e7:71:9a:
a6:e6:a5:07:a8:ec:55:00:8d:a3:62:d1:08:90:2b:
a0:a5:e1:dc:dc:36:2b:59:b5:c6:20:52:b7:cf:6e:
a1:ac:3e:1e:84:1a:02:6d:84:67:42:ae:c9:ef:bf:
7e:41:a4:e3:ca:67:8f:aa:0d:20:73:85:8c:89:a7:
42:10:38:dc:d0:b3:2b:f6:eb:70:e1:c4:6c:d7:46:
0a:ec:47:cf:44:e4:48:fa:4e:b7:8f:7b:c1:5d:f1:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:20:E3:3D:99:7F:54:45:1F:27:CF:22:18:4E:F3:05:3B:EA:8E
X509v3 Authority Key Identifier:
keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/HdQg4z2Zf1RFHyfPIhhO8wU76o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.202.0/24
91.142.130.0/24
185.102.87.0/24
194.31.59.0/24
194.31.64.0/24
194.31.79.0/24
194.31.87.0/24
IPv6:
2a0f:a440::/29
2a12:1dc7:fffd::/48
2a12:8540::/29
Signature Algorithm: sha256WithRSAEncryption
69:1b:a9:7f:73:57:b2:3a:7c:5e:b5:d6:98:28:82:a4:02:dd:
07:b7:d6:9a:f8:68:a0:5d:5d:38:1f:14:57:ce:e1:65:26:0f:
1c:97:b6:1b:a6:68:d3:c1:d1:af:9d:d4:ed:ff:bb:8f:f4:7b:
1d:bf:fd:95:28:43:65:61:ff:ac:58:96:72:c2:21:97:af:c7:
2f:c2:74:28:f3:d0:b2:8e:b7:05:a6:4d:98:ce:5d:dd:9c:ec:
d5:9a:d0:54:99:6e:71:86:79:50:cb:db:dd:7d:f0:f7:54:c0:
33:54:7a:29:98:d8:01:8f:24:74:0f:4a:32:7d:80:59:7b:b7:
6a:6a:51:7a:d0:00:8b:f0:c0:ad:6e:fc:d2:72:58:58:a1:0a:
40:7a:fe:61:40:01:f9:f4:af:a1:53:e3:df:02:ff:2e:d5:95:
8a:c4:dd:22:9f:8e:2f:d5:e5:b6:ff:e2:a4:87:d2:10:71:9d:
61:b4:8e:ff:5d:44:79:c9:19:16:7f:7b:3e:27:de:4c:fa:c0:
63:99:2c:15:7a:68:f0:07:5d:e0:cd:d4:b0:67:e9:99:74:45:
87:98:d7:72:11:54:59:2b:b3:da:a3:39:ec:19:36:cb:32:19:
9c:23:9f:2a:f5:8a:fa:be:4e:f8:4a:67:43:17:f7:6d:e1:6f:
af:a8:f0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:34 2025 by rpki-client