Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_hpuVCU5_H6K7jc8nd4Gt6D0G0Y.roa
File: _hpuVCU5_H6K7jc8nd4Gt6D0G0Y.roa (raw, json)
Hash identifier: XJjO0aOqCtE29ED/cRI8dL47Z6Zr5sCaTNiffJRnvyw=
Subject key identifier: FE:1A:6E:54:25:39:FC:7E:8A:EE:37:3C:9D:DE:06:B7:A0:F4:1B:46
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01973BACEF18001FEFA1051BE62244C2A30E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_hpuVCU5_H6K7jc8nd4Gt6D0G0Y.roa
Signing time: Wed 04 Jun 2025 16:01:18 +0000
ROA not before: Wed 04 Jun 2025 16:01:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 81.168.96.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.153.148.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.63.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.113.0/24 maxlen: 24
89.213.116.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
89.213.227.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
213.130.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:ac:ef:18:00:1f:ef:a1:05:1b:e6:22:44:c2:a3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 4 16:01:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe1a6e542539fc7e8aee373c9dde06b7a0f41b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:77:85:f6:46:2b:2d:70:36:67:ed:be:a4:
49:48:49:b9:9b:93:d4:01:8a:b7:9b:fd:bc:3a:e3:
9e:5d:33:51:08:ee:39:58:3a:10:e8:fc:f3:19:4e:
8a:fb:4a:ff:5a:3b:25:5e:09:3b:13:3f:ae:f6:f2:
51:2c:7a:b0:1f:6f:d7:96:5c:84:c6:60:9e:9e:02:
f6:64:8e:88:f5:1f:ee:a3:6f:98:47:5c:89:1b:d8:
26:bd:19:ef:45:fc:45:78:46:38:e1:7a:36:70:06:
d8:1b:f4:11:c7:9b:fc:87:36:c1:6a:9e:2c:27:01:
94:8d:29:49:3d:08:31:e9:05:fe:fc:bb:de:59:41:
d1:06:5a:82:8d:ee:f6:df:57:1a:08:ee:f3:b6:84:
ce:96:fe:4f:ba:1c:f5:30:7d:43:f4:c5:74:19:c1:
53:b6:dc:47:31:cb:bc:ba:c9:36:59:61:ac:8f:0b:
8b:5b:eb:f9:c4:09:e6:21:1b:41:f1:a0:30:41:64:
58:26:78:e3:f3:41:79:89:cd:2d:2a:1d:d5:ec:f3:
c5:31:eb:34:1d:15:ac:67:71:dd:64:ed:f8:d7:df:
4c:2a:62:ea:89:07:4d:8e:a5:5a:1c:a7:ad:27:8c:
2a:2f:66:d1:ce:4e:25:3b:c4:12:3c:dd:70:89:6d:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1A:6E:54:25:39:FC:7E:8A:EE:37:3C:9D:DE:06:B7:A0:F4:1B:46
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_hpuVCU5_H6K7jc8nd4Gt6D0G0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.96.0/24
82.153.51.0/24
82.153.148.0/24
82.163.15.0/24
89.213.63.0/24
89.213.107.0/24
89.213.112.0/23
89.213.116.0/24
89.213.121.0/24
89.213.157.0/24
89.213.227.0/24
109.176.242.0/24
213.130.137.0/24
213.130.152.0/24
Signature Algorithm: sha256WithRSAEncryption
91:8b:8c:c5:84:e5:0f:b1:a4:df:a7:84:f5:48:e0:b1:78:cb:
a3:47:c8:7b:f2:07:2c:38:d2:a1:66:f8:96:ba:8c:52:7c:41:
ce:8a:03:e2:eb:a2:ed:5c:be:fe:44:c1:f7:a0:63:bf:04:61:
27:62:e2:a9:02:f6:16:eb:97:ab:df:c7:e2:58:70:29:43:52:
d7:c4:53:58:4c:74:a2:96:f9:cb:ab:26:b2:5d:26:b9:ba:35:
15:96:68:d7:54:2d:f0:08:b4:25:12:01:d2:44:d9:f7:fe:ac:
7f:15:ff:a2:04:d3:0e:07:25:8f:26:c8:dd:15:30:db:0b:3d:
3a:a7:65:1d:cd:27:6a:57:8e:4b:a5:35:1f:f3:5d:48:f6:2d:
06:ce:6c:b1:08:7e:9c:af:ae:05:1b:a9:3f:ba:e3:ab:17:df:
2f:82:0c:96:fe:95:e0:6f:0b:86:b7:4f:26:e2:99:b4:0b:81:
1e:2d:ed:15:cc:d8:f4:0e:e2:70:2e:5e:87:17:13:3d:34:ad:
bd:dd:ea:6e:62:52:af:4a:44:5a:31:9c:ed:06:7a:39:ce:43:
7e:70:55:0e:9a:66:7c:32:a8:c5:f3:76:86:98:eb:6a:0d:b0:
5f:f4:18:b8:63:38:20:48:fe:e5:3c:82:d6:7f:c1:11:34:29:
9f:03:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:39 2025 by rpki-client