Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/ht_JyDW5SHb_fGBhQyUDtshRG0E.roa
File: ht_JyDW5SHb_fGBhQyUDtshRG0E.roa (raw, json)
Hash identifier: Z6WBdYQ46aWUfuhec+LPbx2Hp5R+pjpCIAS0/BT2vi4=
Subject key identifier: 86:DF:C9:C8:35:B9:48:76:FF:7C:60:61:43:25:03:B6:C8:51:1B:41
Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial: 01990A718778558455908A31B476F7590FF3
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/ht_JyDW5SHb_fGBhQyUDtshRG0E.roa
Signing time: Tue 02 Sep 2025 12:40:36 +0000
ROA not before: Tue 02 Sep 2025 12:40:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39305
IP address blocks: 216.87.54.0/24 maxlen: 24
2001:678:204::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:71:87:78:55:84:55:90:8a:31:b4:76:f7:59:0f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Validity
Not Before: Sep 2 12:40:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86dfc9c835b94876ff7c6061432503b6c8511b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:69:9e:73:ec:2c:ef:2c:b4:1d:f1:80:17:1b:
ba:ad:95:11:38:f8:9b:69:4c:a7:d6:eb:5a:40:7c:
db:5b:af:08:c0:dc:18:b6:50:0d:2a:1a:7a:28:1b:
7d:91:2d:1e:3c:33:0a:a1:b2:f1:24:73:93:5f:6d:
33:95:00:cd:fc:bb:8b:e6:9a:86:d9:38:f7:37:21:
3b:aa:49:8d:13:09:4a:ac:29:4e:1d:cd:37:ea:64:
5e:9a:0e:85:43:97:72:15:1f:39:4e:ae:fe:e9:e1:
64:07:a9:ec:3c:79:f3:8d:fd:f8:56:c5:88:3a:74:
95:76:4c:01:d7:38:36:c2:85:bc:08:23:76:dc:38:
f9:25:30:23:43:e4:27:55:e0:18:0a:b6:2e:00:ed:
76:51:1d:c9:8a:90:34:65:3b:f5:a6:72:76:93:2a:
51:83:3b:58:7c:bf:4b:5f:10:32:53:9e:74:01:34:
4b:cf:00:dc:77:f2:dc:ba:89:c6:0c:d2:f8:d0:c2:
a8:97:58:b7:ea:cb:5a:73:5c:05:cb:b8:b2:14:7a:
cd:2b:57:ef:6e:ea:2a:7b:1f:38:be:d0:7e:01:04:
75:e9:04:f0:b8:04:fe:8c:04:67:56:b1:80:8f:e2:
3c:e0:c3:27:8d:e9:d6:29:dc:68:99:34:21:93:a1:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DF:C9:C8:35:B9:48:76:FF:7C:60:61:43:25:03:B6:C8:51:1B:41
X509v3 Authority Key Identifier:
keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/ht_JyDW5SHb_fGBhQyUDtshRG0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.87.54.0/24
IPv6:
2001:678:204::/48
Signature Algorithm: sha256WithRSAEncryption
2b:ac:f2:b5:04:98:e8:ff:34:7c:b8:c7:b8:3a:d0:05:40:f0:
e0:cf:48:2c:83:41:dd:9e:2b:cb:b1:50:a1:82:53:18:39:7d:
d9:c3:6e:e9:bd:63:24:09:7f:39:bb:72:13:4f:d1:f1:44:43:
43:96:1b:7e:18:f7:cc:83:c3:9d:2f:b1:de:1c:5a:ce:2b:75:
82:b7:47:fc:d3:52:d9:5f:51:8c:f0:7d:d8:41:15:9c:1b:89:
c8:c5:ba:b2:dc:bf:77:98:7a:9b:19:2c:75:11:0c:d7:37:1d:
1c:e6:df:cd:dc:2b:f6:0d:c7:08:d1:98:e2:6e:7b:b3:4d:f2:
5f:1e:02:7d:c2:e0:a5:08:23:48:c2:6b:31:ac:01:57:3c:b7:
bf:25:6b:45:bc:90:88:53:3b:f3:42:58:e8:88:d2:dc:07:b3:
05:3d:d1:c0:71:0d:cb:d3:2b:c1:a2:a2:ad:2b:9c:85:9c:e8:
6f:3b:ca:cb:21:d2:fe:89:c6:5e:dc:94:87:ab:cb:27:77:52:
8a:b4:53:fb:38:11:97:d7:02:0a:5f:45:6d:4c:14:4d:61:14:
cd:45:34:65:51:7c:35:a5:ed:e5:c7:49:c9:f4:dc:63:09:6e:
41:30:05:cf:13:9c:43:7a:d9:01:eb:63:ee:1e:42:e0:53:17:
10:6d:cd:d3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZkKcYd4VYRVkIoxtHb3WQ/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx
ZTU3YzQwHhcNMjUwOTAyMTI0MDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmRmYzljODM1Yjk0ODc2ZmY3YzYwNjE0MzI1MDNiNmM4NTExYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32mec+ws7yy0HfGAFxu6rZUROPib
aUyn1utaQHzbW68IwNwYtlANKhp6KBt9kS0ePDMKobLxJHOTX20zlQDN/LuL5pqG
2Tj3NyE7qkmNEwlKrClOHc036mRemg6FQ5dyFR85Tq7+6eFkB6nsPHnzjf34VsWI
OnSVdkwB1zg2woW8CCN23Dj5JTAjQ+QnVeAYCrYuAO12UR3JipA0ZTv1pnJ2kypR
gztYfL9LXxAyU550ATRLzwDcd/LcuonGDNL40MKol1i36stac1wFy7iyFHrNK1fv
buoqex84vtB+AQR16QTwuAT+jARnVrGAj+I84MMnjenWKdxomTQhk6E46QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIbfycg1uUh2/3xgYUMlA7bIURtBMB8GA1UdIwQY
MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt
YWI3ZjE0ZGFhZTRmLzEvaHRfSnlEVzVTSGJfZkdCaFF5VUR0c2hSRzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTItYWI3ZjE0ZGFhZTRm
LzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2Fc2MA8E
AgACMAkDBwAgAQZ4AgQwDQYJKoZIhvcNAQELBQADggEBACus8rUEmOj/NHy4x7g6
0AVA8ODPSCyDQd2eK8uxUKGCUxg5fdnDbum9YyQJfzm7chNP0fFEQ0OWG34Y98yD
w50vsd4cWs4rdYK3R/zTUtlfUYzwfdhBFZwbicjFurLcv3eYepsZLHURDNc3HRzm
383cK/YNxwjRmOJue7NN8l8eAn3C4KUII0jCazGsAVc8t78la0W8kIhTO/NCWOiI
0twHswU90cBxDcvTK8Gioq0rnIWc6G87yssh0v6Jxl7clIeryyd3Uoq0U/s4EZfX
AgpfRW1MFE1hFM1FNGVRfDWl7eXHScn03GMJbkEwBc8TnEN62QHrY+4eQuBTFxBt
zdM=
-----END CERTIFICATE-----
Generated at Sun Sep 7 05:45:22 2025 by rpki-client