Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/a-HySkRfAGGguLaW4JKmLfukPq4.roa
File: a-HySkRfAGGguLaW4JKmLfukPq4.roa (raw, json)
Hash identifier: uBXkkM38RaNijmGoWBHrw56ScekkP1NO9peEKh+6GDs=
Subject key identifier: 6B:E1:F2:4A:44:5F:00:61:A0:B8:B6:96:E0:92:A6:2D:FB:A4:3E:AE
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0196F343E13A16C76064263180D6AEE1D81C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/a-HySkRfAGGguLaW4JKmLfukPq4.roa
Signing time: Wed 21 May 2025 14:33:54 +0000
ROA not before: Wed 21 May 2025 14:33:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204302
IP address blocks: 192.121.68.0/24 maxlen: 24
192.165.128.0/23 maxlen: 23
194.68.35.0/24 maxlen: 24
194.103.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:43:e1:3a:16:c7:60:64:26:31:80:d6:ae:e1:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 21 14:33:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6be1f24a445f0061a0b8b696e092a62dfba43eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:41:3e:fa:b4:f1:81:2c:8a:8e:f0:f2:e4:
01:34:88:cb:15:45:07:4a:04:57:92:d6:4a:b0:ed:
6e:cc:db:7a:61:56:83:7c:10:c7:84:28:d3:c6:09:
69:80:bd:d9:6a:c7:85:b4:4b:42:ae:3d:ec:45:12:
82:b0:dd:15:02:0f:9c:6d:90:24:d0:68:6f:2c:c6:
8e:05:da:69:80:1d:8f:96:e4:94:1d:39:78:db:38:
82:4a:1c:68:dc:73:4c:22:4d:cd:c0:48:65:5b:e9:
34:2e:69:bd:19:a6:93:f7:9f:40:7e:29:7f:6f:94:
54:cc:75:06:5b:c1:9d:9d:47:64:07:4f:d1:33:46:
03:b0:2a:a3:b4:ab:f4:1e:c3:c9:a8:03:c4:e7:0e:
40:6b:5d:7f:af:6c:5c:ac:67:f9:0e:a9:3d:76:a6:
c4:a9:ae:42:5b:d0:22:44:3d:e3:01:6d:eb:04:44:
6b:35:c8:81:f6:49:bc:23:76:c6:2b:96:34:a5:61:
37:7f:b1:bd:9c:34:d4:39:70:2d:c0:95:27:a5:85:
56:00:2e:67:77:e3:ce:3d:6a:8e:0e:47:58:ad:10:
06:79:b2:2e:20:61:5a:cd:ad:59:d5:05:e3:83:4f:
e5:b4:e1:95:53:20:fe:9f:68:58:2d:d2:ad:4d:37:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E1:F2:4A:44:5F:00:61:A0:B8:B6:96:E0:92:A6:2D:FB:A4:3E:AE
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/a-HySkRfAGGguLaW4JKmLfukPq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.68.0/24
192.165.128.0/23
194.68.35.0/24
194.103.142.0/23
Signature Algorithm: sha256WithRSAEncryption
47:f6:27:00:60:95:a9:4e:f0:b2:3f:09:bb:c9:a8:a8:92:4c:
cc:65:bc:6c:cc:d7:06:5a:70:de:16:93:89:1d:96:ba:2f:55:
d9:e8:c5:20:7e:7f:2e:95:00:f0:48:c3:f4:50:ed:ad:f1:6d:
94:a9:9e:e4:58:63:6f:b8:8b:24:cd:f0:65:0b:4b:a6:d6:90:
35:bc:24:d0:6e:36:a9:ff:03:1a:f0:13:a8:8f:fa:6a:3e:cf:
f3:a1:6f:a9:42:8e:54:92:1e:c3:f6:86:b6:1f:e6:48:38:e0:
5d:25:aa:36:4b:5e:05:62:55:93:53:2f:9d:c9:13:9e:35:0b:
7c:5b:a9:d0:77:94:bb:24:c9:33:ba:00:1e:b5:72:88:e8:37:
a4:bd:68:3b:e9:5f:13:e5:70:86:7b:2d:95:52:f5:66:a0:74:
7f:15:14:3b:22:f2:ce:3e:31:6a:69:f6:f6:0e:e6:02:1a:e2:
86:46:29:fb:dc:04:77:e2:f7:bb:83:24:b2:85:42:b2:89:21:
57:8e:8f:e5:ea:31:6f:86:56:60:dd:1e:a1:34:93:03:f4:1b:
8e:61:6f:99:6f:60:77:a8:b2:67:ba:06:0a:35:a3:de:ea:33:
df:65:ea:c5:3a:31:7c:69:f6:60:85:64:60:75:89:51:5b:63:
20:b5:6f:22
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZbzQ+E6FsdgZCYxgNau4dgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwNTIxMTQzMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmUxZjI0YTQ0NWYwMDYxYTBiOGI2OTZlMDkyYTYyZGZiYTQzZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHFBPvq08YEsio7w8uQBNIjLFUUH
SgRXktZKsO1uzNt6YVaDfBDHhCjTxglpgL3ZaseFtEtCrj3sRRKCsN0VAg+cbZAk
0GhvLMaOBdppgB2PluSUHTl42ziCShxo3HNMIk3NwEhlW+k0Lmm9GaaT959Afil/
b5RUzHUGW8GdnUdkB0/RM0YDsCqjtKv0HsPJqAPE5w5Aa11/r2xcrGf5Dqk9dqbE
qa5CW9AiRD3jAW3rBERrNciB9km8I3bGK5Y0pWE3f7G9nDTUOXAtwJUnpYVWAC5n
d+POPWqODkdYrRAGebIuIGFaza1Z1QXjg0/ltOGVUyD+n2hYLdKtTTdelQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGvh8kpEXwBhoLi2luCSpi37pD6uMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvYS1IeVNrUmZBR0dndUxhVzRKS21MZnVrUHE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwHlEAwQB
wKWAAwQAwkQjAwQBwmeOMA0GCSqGSIb3DQEBCwUAA4IBAQBH9icAYJWpTvCyPwm7
yaiokkzMZbxszNcGWnDeFpOJHZa6L1XZ6MUgfn8ulQDwSMP0UO2t8W2UqZ7kWGNv
uIskzfBlC0um1pA1vCTQbjap/wMa8BOoj/pqPs/zoW+pQo5Ukh7D9oa2H+ZIOOBd
Jao2S14FYlWTUy+dyROeNQt8W6nQd5S7JMkzugAetXKI6DekvWg76V8T5XCGey2V
UvVmoHR/FRQ7IvLOPjFqafb2DuYCGuKGRin73AR34ve7gySyhUKyiSFXjo/l6jFv
hlZg3R6hNJMD9BuOYW+Zb2B3qLJnugYKNaPe6jPfZerFOjF8afZghWRgdYlRW2Mg
tW8i
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:52:06 2025 by rpki-client