Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hzubwdRp_vjUo4VGFbxdhxaOXAE.roa
File: hzubwdRp_vjUo4VGFbxdhxaOXAE.roa (raw, json)
Hash identifier: 8mZd9LpABdBK1qX3X73vT4meryTnUXXU9RLwvq9H/Yo=
Subject key identifier: 87:3B:9B:C1:D4:69:FE:F8:D4:A3:85:46:15:BC:5D:87:16:8E:5C:01
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01982DFF58C29179234C19718CE5DDC219C8
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hzubwdRp_vjUo4VGFbxdhxaOXAE.roa
Signing time: Mon 21 Jul 2025 17:19:25 +0000
ROA not before: Mon 21 Jul 2025 17:19:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:6a40::/29 maxlen: 29
2a0d:6b40::/29 maxlen: 29
2a0d:6ec0::/29 maxlen: 29
2a0d:7140::/29 maxlen: 29
2a0d:8cc0::/29 maxlen: 29
2a0d:9740::/29 maxlen: 29
2a0d:97c0::/29 maxlen: 29
2a0d:a3c0::/29 maxlen: 29
2a0d:ad40::/29 maxlen: 29
2a0d:b2c0::/29 maxlen: 29
2a0d:b540::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0d:c1c0::/29 maxlen: 29
2a0d:cc40::/29 maxlen: 29
2a0d:ce40::/29 maxlen: 29
2a0d:d3c0::/29 maxlen: 29
2a0d:e1c0::/29 maxlen: 29
2a0d:e240::/29 maxlen: 29
2a0d:e340::/29 maxlen: 29
2a0d:f140::/29 maxlen: 29
2a0d:f5c0::/29 maxlen: 29
2a0d:fbc0::/29 maxlen: 29
2a0e:8c0::/29 maxlen: 29
2a0e:19c0::/29 maxlen: 29
2a0e:adc0::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:2200::/29 maxlen: 29
2a0f:9a40::/29 maxlen: 29
2a0f:cb80::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:ec0::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:25c0::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4480::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:6040::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:8bc0::/29 maxlen: 29
2a11:9040::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9900::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:a2c0::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b4c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c2c0::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e2c0::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:e8c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:640::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:e80::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2800::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:57c0::/29 maxlen: 29
2a12:6480::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8780::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:a500::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:bc00::/29 maxlen: 29
2a12:bc80::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:ce00::/29 maxlen: 29
2a12:cf80::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:d380::/29 maxlen: 29
2a12:d800::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:ff:58:c2:91:79:23:4c:19:71:8c:e5:dd:c2:19:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 21 17:19:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=873b9bc1d469fef8d4a3854615bc5d87168e5c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:9f:ad:9d:16:25:63:26:0d:a6:3c:3f:b7:
08:7a:80:b4:ad:58:0a:8a:55:65:aa:cc:b0:4f:72:
36:e2:a7:cc:27:a4:3f:58:ff:dd:8f:c2:ab:2e:a5:
4e:4f:47:b2:cd:c2:52:67:b5:c6:38:41:41:b3:18:
83:d1:a9:a9:81:0d:3b:78:14:70:ec:be:e7:fc:1f:
d2:e5:00:4a:00:46:e5:eb:e4:3a:39:6f:d3:59:62:
1e:d5:fa:e0:60:7f:43:bf:84:97:75:d3:10:63:ed:
48:fc:63:6f:e6:92:4d:c5:e7:20:4c:b2:43:76:55:
09:df:91:34:9c:49:75:d1:b4:ec:da:11:9e:98:8b:
d4:8d:c9:fa:a3:cb:d8:cb:b1:83:57:42:62:d9:cf:
1b:56:85:10:d8:93:26:74:71:ee:b0:f6:3a:0e:10:
18:c8:52:56:7b:36:d8:45:d3:9a:0b:62:c9:ce:b3:
97:f1:40:3a:d3:1a:d4:0f:fb:0f:8a:0b:04:01:8d:
1e:71:5b:90:52:a1:e9:92:3b:d0:5a:43:1c:a6:ff:
00:c4:08:60:f9:0f:48:50:6d:26:ac:18:10:84:ae:
52:1f:1d:62:83:06:79:24:fc:87:4c:c4:ad:99:f7:
c6:d7:59:92:96:68:7a:50:ae:d5:a7:38:54:4a:f1:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3B:9B:C1:D4:69:FE:F8:D4:A3:85:46:15:BC:5D:87:16:8E:5C:01
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hzubwdRp_vjUo4VGFbxdhxaOXAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6a40::/29
2a0d:6b40::/29
2a0d:6ec0::/29
2a0d:7140::/29
2a0d:8cc0::/29
2a0d:9740::/29
2a0d:97c0::/29
2a0d:a3c0::/29
2a0d:ad40::/29
2a0d:b2c0::/29
2a0d:b540::/29
2a0d:b840::/29
2a0d:c1c0::/29
2a0d:cc40::/29
2a0d:ce40::/29
2a0d:d3c0::/29
2a0d:e1c0::/29
2a0d:e240::/29
2a0d:e340::/29
2a0d:f140::/29
2a0d:f5c0::/29
2a0d:fbc0::/29
2a0e:8c0::/29
2a0e:19c0::/29
2a0e:adc0::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:2200::/29
2a0f:9a40::/29
2a0f:cb80::/29
2a0f:e180::/29
2a11:ec0::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:25c0::/29
2a11:2d00::/29
2a11:4480::/29
2a11:4540::/29
2a11:4f00::/29
2a11:6040::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:8bc0::/29
2a11:9040::/29
2a11:9580::/29
2a11:9640::/29
2a11:9900::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:a2c0::/29
2a11:b0c0::/29
2a11:b4c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c2c0::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e2c0::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:e8c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a11:ff40::/29
2a12:580::/29
2a12:640::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:e80::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2800::/29
2a12:2b80::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:57c0::/29
2a12:6480::/29
2a12:8380::/29
2a12:8480::/29
2a12:8780::/29
2a12:8a00::/29
2a12:9200::/29
2a12:a500::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:bc00::/29
2a12:bc80::/29
2a12:c980::/29
2a12:ce00::/29
2a12:cf80::/29
2a12:d080::/29
2a12:d200::/29
2a12:d380::/29
2a12:d800::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
03:c7:6a:4c:12:11:7b:eb:3b:fe:94:4a:1c:dc:fa:53:69:44:
67:5b:68:af:cc:b2:39:d3:e4:50:16:e2:02:c3:bc:d8:e3:2b:
fd:5f:59:e6:14:01:7d:77:90:80:5d:d0:ec:99:27:1d:07:8d:
99:4b:3f:d0:9d:4d:73:a6:67:9d:8c:b0:bf:7f:93:89:6a:9e:
ae:21:07:d9:bd:a3:83:1e:88:8d:80:67:bb:34:78:e6:77:43:
c4:f8:ed:36:5c:79:4f:17:10:72:86:76:c6:08:c0:6f:b2:2e:
3c:a6:b6:75:fe:45:cf:b0:6e:8b:e5:9c:03:7e:10:c9:cf:97:
a2:fc:e2:75:6d:81:4b:ec:05:87:81:d0:e1:6f:13:2f:70:77:
ff:cb:98:ea:e5:56:0d:3f:08:8a:81:22:77:96:34:43:86:f4:
6d:8a:72:fe:26:7b:52:e0:11:66:e0:48:35:62:68:a2:ee:f2:
21:3f:a6:c3:ee:0e:53:55:55:71:77:46:0f:38:2d:10:79:85:
e1:cf:3d:db:09:19:f8:8b:d4:36:aa:09:d2:19:7b:ba:a1:98:
24:22:7f:05:c0:56:e6:30:e0:69:be:12:e6:13:df:32:6a:62:
56:74:ee:e9:9d:3f:c1:78:4a:25:15:ea:7b:e0:e7:d0:61:a7:
f7:af:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:21:08 2025 by rpki-client