Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/HHx5PgT40c8odAvxk1P-fxWePlA.roa
File: HHx5PgT40c8odAvxk1P-fxWePlA.roa (raw, json)
Hash identifier: zPsSrq/ptkyDcwkMCUxFQsAp1K70phIRO2z3d5q6bK8=
Subject key identifier: 1C:7C:79:3E:04:F8:D1:CF:28:74:0B:F1:93:53:FE:7F:15:9E:3E:50
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0197317D8088ACF7677654450864AF15CEE5
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/HHx5PgT40c8odAvxk1P-fxWePlA.roa
Signing time: Mon 02 Jun 2025 16:33:17 +0000
ROA not before: Mon 02 Jun 2025 16:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:7d:80:88:ac:f7:67:76:54:45:08:64:af:15:ce:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jun 2 16:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c7c793e04f8d1cf28740bf19353fe7f159e3e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:29:73:99:e0:69:fe:fc:d5:b8:1b:12:b5:
cf:57:0b:3b:79:b0:0b:4f:13:04:9f:d5:4f:50:c1:
4b:9d:30:8a:81:81:4e:54:7c:19:63:83:e0:8e:3e:
09:af:83:17:5a:0d:4a:76:19:b4:10:5e:ee:6d:84:
30:3f:75:a6:6d:ca:06:46:92:c7:1a:05:f6:d0:42:
13:6f:b2:fa:99:59:0b:77:3d:2f:6f:23:22:78:54:
39:51:6a:a3:91:70:71:08:36:64:76:de:e5:fa:0f:
16:ec:61:fc:21:c3:03:11:2b:5a:5a:55:85:4d:62:
a8:7b:22:63:3d:9c:37:36:2a:0b:9a:9c:8c:70:75:
7a:d9:9f:e7:77:7b:eb:b2:88:78:2d:73:3c:8d:f4:
e2:2a:b1:11:cd:30:52:2c:6c:b2:7f:34:6c:84:35:
f3:2f:f8:ae:94:5c:4f:f0:8f:ba:eb:a5:f8:55:4d:
a7:9f:bf:38:17:9b:b3:ac:46:30:c0:39:d9:11:b7:
b1:f6:97:30:43:c5:a1:3b:c0:fa:4d:c4:e0:9b:b4:
f1:cd:b4:1d:85:1a:e1:0e:fe:59:88:ee:57:bd:3a:
ba:64:9b:36:e2:e7:35:a0:16:12:31:e7:d3:b8:ab:
c7:f8:d0:b0:fe:c8:5a:a5:84:49:bc:34:23:7e:86:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7C:79:3E:04:F8:D1:CF:28:74:0B:F1:93:53:FE:7F:15:9E:3E:50
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/HHx5PgT40c8odAvxk1P-fxWePlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e1:27:87:b0:01:35:fb:0a:a0:0e:09:da:36:ba:03:58:9c:
6b:ec:51:c6:c4:05:4c:1f:f9:ee:98:5b:ac:0f:e2:14:26:3f:
66:47:85:3f:22:ff:41:ab:1e:50:ba:07:7c:b1:41:f5:98:ce:
89:07:a8:20:2f:24:f6:d3:62:93:5f:0c:10:b0:b5:bd:92:b9:
3e:48:7e:b8:42:fd:33:36:df:b0:90:6c:36:2a:45:49:bf:5a:
60:af:e9:a8:10:33:ea:08:da:d2:66:89:be:ff:03:3b:1a:56:
14:e7:40:98:1e:a6:b0:5e:d2:41:eb:90:5f:ca:dd:b0:ae:d9:
79:53:db:48:0e:2a:16:7b:3a:b9:bd:df:0c:1f:ca:ad:64:3d:
08:0c:da:11:e1:ba:7f:69:d7:95:1b:6d:fd:c7:1a:82:26:92:
3a:05:61:ee:f2:e3:22:90:29:06:51:c5:f7:7d:1d:c2:af:e0:
d4:cd:00:44:48:a9:f9:c4:6a:7b:15:91:a5:d7:1e:6a:90:fe:
b1:33:af:3c:b5:2d:f9:3f:f6:19:21:97:3b:f4:ea:91:d9:54:
19:f0:14:fc:d5:47:3f:27:56:a6:2c:ac:3a:29:7f:1e:52:14:
07:81:04:15:a3:a8:ed:d7:86:f8:49:33:18:e6:cc:f6:a2:14:
b2:d3:6f:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcxfYCIrPdndlRFCGSvFc7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjUwNjAyMTYzMzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzdjNzkzZTA0ZjhkMWNmMjg3NDBiZjE5MzUzZmU3ZjE1OWUzZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArucpc5ngaf781bgbErXPVws7ebAL
TxMEn9VPUMFLnTCKgYFOVHwZY4Pgjj4Jr4MXWg1Kdhm0EF7ubYQwP3WmbcoGRpLH
GgX20EITb7L6mVkLdz0vbyMieFQ5UWqjkXBxCDZkdt7l+g8W7GH8IcMDEStaWlWF
TWKoeyJjPZw3NioLmpyMcHV62Z/nd3vrsoh4LXM8jfTiKrERzTBSLGyyfzRshDXz
L/iulFxP8I+666X4VU2nn784F5uzrEYwwDnZEbex9pcwQ8WhO8D6TcTgm7TxzbQd
hRrhDv5ZiO5XvTq6ZJs24uc1oBYSMefTuKvH+NCw/shapYRJvDQjfobr/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBx8eT4E+NHPKHQL8ZNT/n8Vnj5QMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvSEh4NVBnVDQwYzhvZEF2eGsxUC1meFdlUGxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3PMA0G
CSqGSIb3DQEBCwUAA4IBAQAH4SeHsAE1+wqgDgnaNroDWJxr7FHGxAVMH/numFus
D+IUJj9mR4U/Iv9Bqx5Qugd8sUH1mM6JB6ggLyT202KTXwwQsLW9krk+SH64Qv0z
Nt+wkGw2KkVJv1pgr+moEDPqCNrSZom+/wM7GlYU50CYHqawXtJB65Bfyt2wrtl5
U9tIDioWezq5vd8MH8qtZD0IDNoR4bp/adeVG239xxqCJpI6BWHu8uMikCkGUcX3
fR3Cr+DUzQBESKn5xGp7FZGl1x5qkP6xM688tS35P/YZIZc79OqR2VQZ8BT81Uc/
J1amLKw6KX8eUhQHgQQVo6jt14b4STMY5sz2ohSy02+C
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:45 2025 by rpki-client