Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hu6fxyDDBZPTzahJPt0xdPSRpJs.roa
File: Hu6fxyDDBZPTzahJPt0xdPSRpJs.roa (raw, json)
Hash identifier: +23WuFqIdptf0i6k8nmPcI2qaIYE7y7t43KFY2XsbwU=
Subject key identifier: 1E:EE:9F:C7:20:C3:05:93:D3:CD:A8:49:3E:DD:31:74:F4:91:A4:9B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01970DC04A9755BC7EC7FE2A3014780AB050
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hu6fxyDDBZPTzahJPt0xdPSRpJs.roa
Signing time: Mon 26 May 2025 17:59:55 +0000
ROA not before: Mon 26 May 2025 17:59:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 82.153.159.0/24 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:c0:4a:97:55:bc:7e:c7:fe:2a:30:14:78:0a:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 26 17:59:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1eee9fc720c30593d3cda8493edd3174f491a49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:8a:2f:2d:40:da:69:13:2c:1f:f0:94:d4:
c1:c8:5d:ba:f8:02:60:bd:1a:d3:e3:12:10:da:7d:
c6:83:f9:ff:5e:a3:d3:3c:ee:95:85:ca:ec:05:af:
87:56:2f:5d:9e:4f:a5:16:56:33:1c:0f:f5:e5:3a:
8d:26:23:ca:42:cf:8c:14:fd:e2:d1:1c:9d:ca:9e:
fa:cf:27:63:6f:89:69:5d:39:d1:ff:5b:26:04:29:
52:fc:4f:d4:03:cc:1f:ef:3c:a5:1e:61:23:68:95:
bb:14:f9:bb:e1:12:11:3c:76:66:3c:d3:6b:4f:cd:
cc:b1:ab:62:1a:54:ba:bc:08:09:2c:88:7a:d7:36:
7a:2f:bc:a1:07:24:ce:5a:c5:f0:6b:ba:65:63:fd:
85:87:05:c6:70:68:a5:1e:1b:e1:05:43:7f:ea:cc:
20:3d:34:9a:73:f2:9d:3e:b5:91:f8:84:cb:fe:2c:
98:86:a5:16:a5:a4:9e:46:ae:ca:8f:b3:10:02:47:
10:e0:c3:8b:83:69:c3:2f:db:c3:a6:bf:4f:98:56:
63:e4:34:db:e3:c4:96:f6:06:f9:4e:9f:b5:07:fd:
75:ab:4c:f5:03:1b:13:ac:16:31:0e:1d:d8:31:d3:
1d:16:97:9e:6a:88:aa:8b:58:da:08:7d:57:33:0e:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EE:9F:C7:20:C3:05:93:D3:CD:A8:49:3E:DD:31:74:F4:91:A4:9B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hu6fxyDDBZPTzahJPt0xdPSRpJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.159.0/24
109.176.193.0/24
109.176.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a5:0b:52:fb:51:06:70:78:c4:05:d4:45:e1:5c:e7:57:a7:
60:3d:b5:94:21:eb:4f:aa:01:ae:94:8d:ae:b5:07:33:a2:1b:
67:94:62:36:bf:30:f6:e7:43:0e:84:64:06:37:9b:61:61:f4:
25:99:69:9d:c8:a4:d3:32:8b:ec:87:c7:1d:e9:ce:d7:4e:bf:
d5:97:54:d7:b7:61:d9:64:16:25:b0:d4:dc:de:7b:03:c8:e6:
e7:69:8b:af:e4:a8:b9:2d:c0:05:46:36:ce:6e:88:6a:4b:86:
a1:c3:19:a0:d6:2b:5a:0c:b4:b0:15:ad:99:b8:c3:71:37:f9:
f0:71:73:e8:bd:e3:33:b0:c3:d1:62:5b:4b:b2:7f:dc:96:f9:
76:0e:d0:38:0d:65:1a:db:3d:72:5d:e3:fc:4d:1e:5f:76:a8:
4b:79:f7:40:67:84:27:b4:88:94:1f:e2:3c:3e:1d:18:1a:16:
f7:d4:43:7e:ed:0e:7a:d8:53:cc:e9:fe:d8:b2:d6:f0:29:07:
0c:3d:95:ee:dd:55:a3:92:6e:75:1d:c1:e1:7c:8b:ea:10:82:
8f:2b:15:87:04:07:61:b2:e4:e7:be:ff:75:99:44:0c:4c:18:
51:5a:07:7c:22:ce:43:12:82:f8:5f:5e:22:f0:e5:b0:b6:26:
36:a4:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:04:11 2025 by rpki-client