Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/0HSSdKGUJ1V74tRivg_DBTfUJug.roa
File: 0HSSdKGUJ1V74tRivg_DBTfUJug.roa (raw, json)
Hash identifier: 0GuMJkfhc9at/c8JLxWNa9SV+TQcnIp/5frD3uM5gT8=
Subject key identifier: D0:74:92:74:A1:94:27:55:7B:E2:D4:62:BE:0F:C3:05:37:D4:26:E8
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019786E8A69CD9986771BBAEFBABDD9F3CB1
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/0HSSdKGUJ1V74tRivg_DBTfUJug.roa
Signing time: Thu 19 Jun 2025 06:38:03 +0000
ROA not before: Thu 19 Jun 2025 06:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 46.151.176.0/24 maxlen: 24
46.151.177.0/24 maxlen: 24
46.151.178.0/24 maxlen: 24
46.151.179.0/24 maxlen: 24
46.151.180.0/24 maxlen: 24
83.142.208.0/24 maxlen: 24
83.142.210.0/24 maxlen: 24
83.142.211.0/24 maxlen: 24
83.142.212.0/24 maxlen: 24
83.142.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:e8:a6:9c:d9:98:67:71:bb:ae:fb:ab:dd:9f:3c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 19 06:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0749274a19427557be2d462be0fc30537d426e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:9b:1c:49:c8:83:a0:86:f3:45:16:d0:4b:
ad:59:25:78:8b:ff:18:53:5c:92:80:22:f7:e4:af:
d7:d4:4f:d7:09:02:f8:6b:a9:a1:05:8b:b7:78:ce:
e7:7f:29:c5:a0:d6:86:f2:7b:c9:bd:cd:eb:df:88:
58:69:65:14:93:9b:22:45:eb:28:4c:1c:8f:ab:2c:
80:9f:4c:92:ce:f7:36:20:a0:15:bf:0b:e8:f6:3e:
ed:d7:2a:3c:04:dd:0e:fd:57:a2:84:76:ea:43:8e:
e5:46:7b:81:fa:56:1a:6d:ce:a3:d8:38:e5:c7:24:
00:f9:7a:67:8b:27:85:5b:22:db:21:91:0f:58:9c:
ec:ef:bd:c8:b1:4a:71:de:67:47:9e:26:ca:7c:51:
56:97:3c:86:7c:79:43:69:8e:17:18:1b:c5:6d:4b:
cc:df:5e:12:59:44:e4:6f:22:cf:3c:37:0c:e1:ed:
e9:c1:96:f1:ba:2a:d1:ab:ef:8d:62:8d:8a:9c:7e:
9e:9b:68:9a:ee:3c:3c:5f:53:0b:ad:9d:0e:15:f4:
4b:93:d3:ce:e7:6a:0f:81:9d:2f:16:6c:e5:44:0d:
b6:b8:ef:4c:bf:e5:7e:c8:35:d2:e8:e1:b8:72:20:
f5:07:fe:60:07:e9:b4:68:0c:ba:c1:5c:d1:24:6f:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:74:92:74:A1:94:27:55:7B:E2:D4:62:BE:0F:C3:05:37:D4:26:E8
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/0HSSdKGUJ1V74tRivg_DBTfUJug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.176.0-46.151.180.255
83.142.208.0/24
83.142.210.0-83.142.212.255
83.142.215.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0c:55:e8:f2:45:a7:fe:3d:23:87:f0:c3:d5:a9:60:ea:da:
96:0d:51:b3:b3:0f:ca:b9:4b:07:b2:45:26:75:94:e6:d9:45:
e6:51:ce:eb:c0:60:78:31:9b:13:51:57:66:33:b3:d1:33:8f:
85:e2:24:07:54:8d:21:1e:cc:24:45:21:7f:5c:cc:d9:90:af:
ca:ef:55:aa:5e:d5:d9:d7:d2:5f:84:ab:e4:d7:f0:01:81:64:
0a:c8:7b:3e:29:f2:26:87:27:96:33:35:50:13:61:87:d0:31:
79:d5:e9:42:3b:98:c8:c5:40:b6:18:5d:09:34:b9:b2:fe:89:
36:bd:90:68:c5:27:b2:b3:3e:8e:53:9e:9b:50:b7:43:b4:ad:
ef:a5:6c:a1:16:75:ec:67:6e:33:4a:8b:9d:c8:b9:9d:f3:7e:
fb:f5:8d:f9:dd:0f:80:54:c2:f0:bf:68:5c:c7:3e:0e:29:e3:
d6:4b:7f:10:a3:4a:4f:48:fa:1f:02:42:f7:f0:ff:7a:8a:b2:
9c:39:70:bb:18:7e:fe:d8:cc:5b:59:c5:51:e0:49:95:35:13:
9a:94:41:60:3e:49:d5:f3:dc:32:e4:98:eb:33:0b:ad:14:68:
65:eb:25:58:6b:9b:33:a3:46:0f:9b:27:9a:5a:b8:f3:8b:b0:
8a:68:08:96
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZeG6Kac2Zhncbuu+6vdnzyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUwNjE5MDYzODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDc0OTI3NGExOTQyNzU1N2JlMmQ0NjJiZTBmYzMwNTM3ZDQyNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14ObHEnIg6CG80UW0EutWSV4i/8Y
U1ySgCL35K/X1E/XCQL4a6mhBYu3eM7nfynFoNaG8nvJvc3r34hYaWUUk5siReso
TByPqyyAn0ySzvc2IKAVvwvo9j7t1yo8BN0O/VeihHbqQ47lRnuB+lYabc6j2Djl
xyQA+XpniyeFWyLbIZEPWJzs773IsUpx3mdHnibKfFFWlzyGfHlDaY4XGBvFbUvM
314SWUTkbyLPPDcM4e3pwZbxuirRq++NYo2KnH6em2ia7jw8X1MLrZ0OFfRLk9PO
52oPgZ0vFmzlRA22uO9Mv+V+yDXS6OG4ciD1B/5gB+m0aAy6wVzRJG/U3wIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFNB0knShlCdVe+LUYr4PwwU31CboMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvMEhTU2RLR1VKMVY3NHRSaXZnX0RCVGZVSnVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAQul7AD
BAAul7QDBABTjtAwDAMEAVOO0gMEAFOO1AMEAFOO1zANBgkqhkiG9w0BAQsFAAOC
AQEAjQxV6PJFp/49I4fww9WpYOralg1Rs7MPyrlLB7JFJnWU5tlF5lHO68BgeDGb
E1FXZjOz0TOPheIkB1SNIR7MJEUhf1zM2ZCvyu9Vql7V2dfSX4Sr5NfwAYFkCsh7
PinyJocnljM1UBNhh9AxedXpQjuYyMVAthhdCTS5sv6JNr2QaMUnsrM+jlOem1C3
Q7St76VsoRZ17GduM0qLnci5nfN++/WN+d0PgFTC8L9oXMc+Dinj1kt/EKNKT0j6
HwJC9/D/eoqynDlwuxh+/tjMW1nFUeBJlTUTmpRBYD5J1fPcMuSY6zMLrRRoZesl
WGubM6NGD5snmlq484uwimgIlg==
-----END CERTIFICATE-----
Generated at Fri Jun 20 07:15:38 2025 by rpki-client