Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/HO9laPPsdq6sfNd_PR3udt1kywk.roa
File: HO9laPPsdq6sfNd_PR3udt1kywk.roa (raw, json)
Hash identifier: ySqE/9cHXiOyjfUHGzF3+AzH1p8/SUImSsDU40s2CbI=
Subject key identifier: 1C:EF:65:68:F3:EC:76:AE:AC:7C:D7:7F:3D:1D:EE:76:DD:64:CB:09
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 01970CB14B89F0BABBE3B9F9A03419A68A04
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/HO9laPPsdq6sfNd_PR3udt1kywk.roa
Signing time: Mon 26 May 2025 13:03:55 +0000
ROA not before: Mon 26 May 2025 13:03:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58282
IP address blocks: 185.128.228.0/22 maxlen: 22
185.153.152.0/22 maxlen: 22
185.153.152.0/23 maxlen: 23
185.153.154.0/23 maxlen: 23
188.64.152.0/21 maxlen: 21
188.64.152.0/22 maxlen: 22
188.64.156.0/22 maxlen: 22
194.182.109.0/24 maxlen: 24
194.182.156.0/22 maxlen: 22
194.182.156.0/23 maxlen: 23
194.182.156.0/24 maxlen: 24
194.182.157.0/24 maxlen: 24
194.182.159.0/24 maxlen: 24
2a03:1500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:b1:4b:89:f0:ba:bb:e3:b9:f9:a0:34:19:a6:8a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: May 26 13:03:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cef6568f3ec76aeac7cd77f3d1dee76dd64cb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:08:b5:59:a5:28:f4:19:80:16:2f:26:6f:
40:93:fb:85:a6:5e:68:f7:ab:c2:c6:8d:3c:96:f7:
d5:44:b4:dd:2b:75:a4:6d:4d:91:52:17:a2:a3:77:
d3:0d:82:41:4c:b2:0c:34:46:c8:4d:63:43:11:ae:
58:1d:94:b6:9e:f1:ee:7d:c8:b7:69:a0:01:ad:2b:
de:d9:fa:7e:8b:90:e4:93:28:e0:a1:b8:ba:35:fc:
44:d6:0a:13:53:ed:bf:e4:95:16:c0:ec:5d:43:ff:
67:33:f5:46:90:92:e4:25:40:60:a8:ad:f0:85:4c:
5a:84:bf:ad:95:2c:ff:d3:5c:da:d3:08:f6:7f:97:
58:91:20:a0:d4:a8:77:ee:ba:8f:50:38:b8:7e:a3:
46:61:bd:27:dc:82:ba:13:3a:62:48:94:9d:90:05:
0c:ea:6b:cd:92:a1:ca:ad:45:ab:5d:58:f6:1a:c0:
ae:77:1e:14:ee:36:0a:94:89:c0:af:09:ae:97:e8:
fc:bb:0d:29:73:43:d1:f8:92:47:a8:c1:9e:95:3d:
98:8a:18:e2:f7:06:57:56:7e:04:61:ea:af:f0:1c:
59:52:bc:b6:98:b5:85:56:17:35:5d:60:b9:be:bf:
46:b6:96:a8:85:ac:36:2b:78:b1:50:7e:d2:d1:5e:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EF:65:68:F3:EC:76:AE:AC:7C:D7:7F:3D:1D:EE:76:DD:64:CB:09
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/HO9laPPsdq6sfNd_PR3udt1kywk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.228.0/22
185.153.152.0/22
188.64.152.0/21
194.182.109.0/24
194.182.156.0/22
IPv6:
2a03:1500::/32
Signature Algorithm: sha256WithRSAEncryption
8f:7f:91:d7:06:53:2a:3f:5b:91:50:46:c5:fc:2a:71:cb:69:
a6:e5:bf:fa:7a:66:6b:40:f5:ca:e5:9b:e5:49:cc:bd:94:ff:
50:16:9b:93:90:74:be:a3:6b:f2:ff:61:a2:25:ce:56:43:a4:
24:7b:33:68:ba:d3:e9:d3:39:b4:b7:07:e0:fa:68:60:53:20:
ac:17:b1:98:15:7f:06:36:6d:65:97:3e:18:da:cc:ff:03:4b:
bb:0c:dc:d8:9e:36:10:5f:4e:4b:2b:5e:02:81:41:36:72:06:
fa:e0:a8:86:a2:07:b3:09:d4:c5:1d:3d:44:ee:f2:3b:86:21:
99:b6:b9:24:d4:9a:04:26:75:1e:0f:02:28:5b:67:ef:5d:b9:
3c:ce:5a:22:df:4c:55:10:f6:9e:ff:41:5c:d3:75:bf:53:00:
26:7c:77:28:db:de:dc:d9:52:c2:08:a1:d0:78:ba:84:c9:8c:
23:47:08:8f:3f:5f:9e:d5:21:a7:aa:99:48:fc:33:08:ca:3e:
0e:bc:c1:76:c0:50:dc:5d:b0:6a:a5:3d:7a:25:95:48:ea:0d:
2e:ce:eb:af:ab:c3:25:66:3a:4b:6f:16:8a:e0:67:4b:d9:b4:
d3:51:7e:53:61:d9:d7:62:c6:f9:57:10:24:ec:17:5e:5a:33:
a5:0a:a3:69
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZcMsUuJ8Lq747n5oDQZpooEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2NmNmRmYTcwOTU3M2E4MjFiNjNjNGNiNjk1NjA1ZmQy
NjY4MGIwHhcNMjUwNTI2MTMwMzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2VmNjU2OGYzZWM3NmFlYWM3Y2Q3N2YzZDFkZWU3NmRkNjRjYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ4ItVmlKPQZgBYvJm9Ak/uFpl5o
96vCxo08lvfVRLTdK3WkbU2RUheio3fTDYJBTLIMNEbITWNDEa5YHZS2nvHufci3
aaABrSve2fp+i5Dkkyjgobi6NfxE1goTU+2/5JUWwOxdQ/9nM/VGkJLkJUBgqK3w
hUxahL+tlSz/01za0wj2f5dYkSCg1Kh37rqPUDi4fqNGYb0n3IK6EzpiSJSdkAUM
6mvNkqHKrUWrXVj2GsCudx4U7jYKlInArwmul+j8uw0pc0PR+JJHqMGelT2Yihji
9wZXVn4EYeqv8BxZUry2mLWFVhc1XWC5vr9Gtpaohaw2K3ixUH7S0V4/3wIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFBzvZWjz7HaurHzXfz0d7nbdZMsJMB8GA1UdIwQY
MBaAFCDM9t+nCVc6ghtjxMtpVgX9JmgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWIt
M2EyOGY4YTljNzA3LzEvSE85bGFQUHNkcTZzZk5kX1BSM3VkdDFreXdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWItM2EyOGY4YTljNzA3
LzEvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCuYDkAwQC
uZmYAwQDvECYAwQAwrZtAwQCwracMA0EAgACMAcDBQAqAxUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPf5HXBlMqP1uRUEbF/Cpxy2mm5b/6emZrQPXK5ZvlScy9lP9QFpuT
kHS+o2vy/2GiJc5WQ6QkezNoutPp0zm0twfg+mhgUyCsF7GYFX8GNm1llz4Y2sz/
A0u7DNzYnjYQX05LK14CgUE2cgb64KiGogezCdTFHT1E7vI7hiGZtrkk1JoEJnUe
DwIoW2fvXbk8zloi30xVEPae/0Fc03W/UwAmfHco297c2VLCCKHQeLqEyYwjRwiP
P1+e1SGnqplI/DMIyj4OvMF2wFDcXbBqpT16JZVI6g0uzuuvq8MlZjpLbxaK4GdL
2bTTUX5TYdnXYsb5VxAk7BdeWjOlCqNp
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:55 2025 by rpki-client