Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/h8kfp_RxNw9TQJi_FuXtKmOoVdA.roa
File: h8kfp_RxNw9TQJi_FuXtKmOoVdA.roa (raw, json)
Hash identifier: gMyDoTfbghGyh3Yg7Wcs9Qgp2ODCZ1LcJvPzyuFIMbU=
Subject key identifier: 87:C9:1F:A7:F4:71:37:0F:53:40:98:BF:16:E5:ED:2A:63:A8:55:D0
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 01981C433F622B1D13C6AA725CD5428F6D9B
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/h8kfp_RxNw9TQJi_FuXtKmOoVdA.roa
Signing time: Fri 18 Jul 2025 06:40:25 +0000
ROA not before: Fri 18 Jul 2025 06:40:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21215
IP address blocks: 89.207.192.0/21 maxlen: 21
176.109.136.0/21 maxlen: 21
185.13.8.0/22 maxlen: 22
185.18.12.0/22 maxlen: 22
185.20.36.0/22 maxlen: 22
185.81.60.0/22 maxlen: 22
213.244.208.0/20 maxlen: 20
2a03:dd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:43:3f:62:2b:1d:13:c6:aa:72:5c:d5:42:8f:6d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Jul 18 06:40:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87c91fa7f471370f534098bf16e5ed2a63a855d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:18:e9:78:50:3e:3f:01:7f:90:6f:10:9c:
f2:4f:f1:05:3f:48:9d:55:e6:70:db:2a:88:9f:04:
08:77:29:80:3f:65:96:ee:9e:0d:d5:46:b4:75:2b:
3c:6d:e1:25:64:7b:bc:1b:08:b8:f8:0c:d0:00:17:
7c:5b:e4:76:71:de:67:fb:40:37:d3:a8:a6:bb:31:
9c:7d:78:3f:6b:b0:1c:82:9d:21:9f:c5:ea:cb:1b:
25:c8:9f:fc:d3:a4:4e:d3:21:71:55:16:52:11:53:
f3:ef:f0:34:5f:63:84:03:1e:83:1e:4d:b4:80:72:
4c:9d:03:ef:76:58:1d:4b:84:80:87:11:77:93:60:
d9:5e:f3:ae:63:e8:72:4c:59:53:64:b2:92:eb:49:
e4:a8:4c:01:8d:fe:53:3f:e6:7a:55:36:5c:14:03:
da:bd:5c:7d:5c:48:71:a3:71:fc:58:7d:55:0c:38:
65:41:bf:93:ab:9c:60:e7:6e:8d:7d:62:d3:90:68:
3c:84:54:d2:90:d8:e2:0a:bf:82:72:35:5e:0d:76:
d6:da:96:40:e7:2a:cb:f8:d9:f8:09:73:84:24:40:
60:87:d5:bc:46:6a:cc:aa:34:0f:60:de:af:fc:0d:
b6:9e:32:6c:40:75:e0:d1:bb:73:92:b4:f2:14:64:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C9:1F:A7:F4:71:37:0F:53:40:98:BF:16:E5:ED:2A:63:A8:55:D0
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/h8kfp_RxNw9TQJi_FuXtKmOoVdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.192.0/21
176.109.136.0/21
185.13.8.0/22
185.18.12.0/22
185.20.36.0/22
185.81.60.0/22
213.244.208.0/20
IPv6:
2a03:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
47:43:69:23:7f:ac:da:c5:0c:df:1c:9d:1e:55:88:26:d7:dc:
24:26:e1:ce:d9:ed:3d:54:99:de:97:6f:ee:07:29:2c:b6:8f:
ce:ae:ea:09:5d:33:8a:f5:51:83:e4:d7:b5:2d:f2:c8:b3:b7:
98:cf:80:9a:89:69:9d:8e:04:ea:27:0b:68:36:3b:fe:0b:ef:
d5:fb:47:0a:3e:a1:8e:3d:14:54:38:7e:65:b3:da:d1:d8:31:
43:02:43:9f:7c:cb:68:46:36:27:92:9b:cc:ce:1d:a8:ab:46:
ef:d8:ba:59:51:e1:cf:aa:90:96:41:8a:d2:69:c9:f3:07:26:
3c:fc:b6:c1:ec:c6:fa:bf:b3:c3:b1:a0:5b:f5:06:08:1a:44:
71:63:e7:e7:d1:b7:5f:52:fb:7d:75:b8:91:7c:ec:16:34:36:
81:be:8b:f9:c2:3e:2a:4a:4d:34:5f:23:6e:b3:09:71:7e:2e:
0a:f9:47:ee:eb:2b:26:be:a5:e9:16:12:94:aa:83:69:be:15:
68:f3:98:3e:84:bc:df:e6:33:f9:dc:cd:e2:10:c0:03:43:80:
a7:b0:26:dc:76:b8:87:05:6c:61:72:b3:a3:1d:6c:22:0d:4a:
9f:30:6b:80:2f:8c:3d:e6:8b:cb:83:ff:64:dd:b7:e7:07:a8:
92:6a:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:42:29 2025 by rpki-client