Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/hZwwv2HVesOoWYMZ9UQ59KZD92Q.roa
File: hZwwv2HVesOoWYMZ9UQ59KZD92Q.roa (raw, json)
Hash identifier: nRGFDkYZm2Umz0tBGBIfwm3qOUkJet0CLVO2qS5d1Y8=
Subject key identifier: 85:9C:30:BF:61:D5:7A:C3:A8:59:83:19:F5:44:39:F4:A6:43:F7:64
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0197C2B4DD997A1C987CCCBD4E4FADD4FE5E
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/hZwwv2HVesOoWYMZ9UQ59KZD92Q.roa
Signing time: Mon 30 Jun 2025 21:18:42 +0000
ROA not before: Mon 30 Jun 2025 21:18:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142111
IP address blocks: 87.254.9.0/24 maxlen: 24
87.254.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:b4:dd:99:7a:1c:98:7c:cc:bd:4e:4f:ad:d4:fe:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jun 30 21:18:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=859c30bf61d57ac3a8598319f54439f4a643f764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:73:67:1a:a8:fe:f4:ad:98:d5:c6:aa:3c:
1c:9b:84:f1:73:38:1a:e8:64:05:19:3f:b2:b1:74:
3a:59:82:a2:14:4b:86:9b:b4:4c:88:cc:1e:83:46:
b2:cb:45:7c:20:b8:f5:0c:51:ba:c0:8f:b8:5b:98:
80:51:7e:e9:ba:d4:da:72:82:1f:20:d8:e5:0d:74:
09:1b:1c:68:d6:c8:b1:b3:e3:91:f2:66:3d:a4:14:
32:b8:eb:05:8c:ad:82:3c:b9:e4:5e:78:41:f9:dc:
c5:8a:e8:4e:1d:7e:81:4e:ef:1c:0b:8e:52:4d:07:
10:4e:c2:1c:8a:b8:37:21:5a:85:81:15:6b:1b:fb:
45:10:f0:5f:c9:92:1f:a2:35:33:31:75:f8:fe:54:
b0:cc:2f:b5:4b:04:60:56:1a:ac:ab:ce:83:95:9e:
5f:c3:7a:ca:56:d0:99:17:6c:9b:c7:9d:96:a0:aa:
7d:1a:8a:e9:71:b5:31:8d:9a:03:9b:66:a0:f7:e4:
9f:bc:a3:07:e0:f1:72:66:8e:45:d8:4c:2f:5e:5f:
e5:a2:63:f1:40:17:e0:c7:4f:8b:37:de:d6:eb:5b:
70:72:60:d9:fb:ee:2c:db:6e:fe:36:b8:1d:ee:be:
53:a7:98:33:86:09:a0:18:6b:b7:91:31:fa:4d:8f:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:30:BF:61:D5:7A:C3:A8:59:83:19:F5:44:39:F4:A6:43:F7:64
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/hZwwv2HVesOoWYMZ9UQ59KZD92Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
87.254.18.0/23
Signature Algorithm: sha256WithRSAEncryption
73:eb:d5:58:12:df:55:c5:d4:f4:fd:7f:0e:be:0d:65:0a:f4:
0f:5c:f5:4e:57:db:da:0d:e0:aa:5c:18:93:17:3d:37:fb:57:
74:08:80:5a:a7:09:0b:23:bd:65:ca:c2:e5:56:8c:e6:57:fc:
4d:e2:11:c1:1d:6b:a7:5c:2f:a6:5f:3b:c1:29:3d:a8:db:5c:
87:45:75:ab:aa:c4:de:11:eb:c8:21:e0:84:4f:23:63:c7:dd:
10:e3:0c:3b:e0:d5:75:42:a8:cb:61:83:20:a7:2a:a1:ca:4c:
60:8f:ed:af:0e:87:6d:1b:5d:7f:65:dd:7f:e4:29:d3:27:ac:
97:a9:1b:00:f4:5e:d0:a5:3e:09:c7:c5:a2:6b:0b:55:ec:6d:
9a:f2:69:5f:b6:e8:43:7b:e5:28:37:53:5c:d9:2e:93:f2:bc:
bb:d1:a4:b1:c0:bc:3f:a8:89:1b:54:3a:8a:be:27:d9:df:d0:
b6:90:26:f5:f7:47:1d:ee:33:1b:48:59:1d:52:eb:27:64:b2:
0f:f5:41:ee:71:1d:51:d4:30:ac:6d:d4:15:24:d6:09:84:b8:
f9:88:56:c6:a3:99:cb:f8:2e:25:0d:e3:64:f2:6c:40:09:a4:
66:b9:11:b5:c5:0b:3c:15:a3:1e:e3:b9:a3:08:e6:bd:9a:3e:
4d:d2:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:00:22 2025 by rpki-client