Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H8B0gsFa_YsoUn15YgXF2Nq0aF8.roa
File: H8B0gsFa_YsoUn15YgXF2Nq0aF8.roa (raw, json)
Hash identifier: X3MLxcipy/3PJTVbKlpsAsrN8/kwOY/MbLXVI4jVyeA=
Subject key identifier: 1F:C0:74:82:C1:5A:FD:8B:28:52:7D:79:62:05:C5:D8:DA:B4:68:5F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019654D9EDA3AF325096CD250669DE601A0F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H8B0gsFa_YsoUn15YgXF2Nq0aF8.roa
Signing time: Sun 20 Apr 2025 20:18:10 +0000
ROA not before: Sun 20 Apr 2025 20:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.128.76.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
93.190.244.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:17c1:66::/48 maxlen: 48
2a09:17c1:77::/48 maxlen: 48
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:1a83:77::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:2500::/29 maxlen: 29
2a0f:3d86:88::/48 maxlen: 48
2a0f:3d86:99::/48 maxlen: 48
2a0f:7d06:88::/48 maxlen: 48
2a0f:7d06:99::/48 maxlen: 48
2a0f:cc00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e4c0::/29 maxlen: 29
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:e7c6:88::/48 maxlen: 48
2a0f:e844:22::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
2a0f:fc00::/29 maxlen: 29
2a12:ac46:77::/48 maxlen: 48
2a12:ecc0:168::/48 maxlen: 48
2a12:ecc0:178::/48 maxlen: 48
2a13:18c6:77::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
2a13:8c86:10a::/48 maxlen: 48
2a13:8c86:130::/48 maxlen: 48
2a13:c900:88::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
2a13:e107:9c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:d9:ed:a3:af:32:50:96:cd:25:06:69:de:60:1a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 20 20:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fc07482c15afd8b28527d796205c5d8dab4685f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:59:32:0a:f8:8a:37:c4:eb:cd:34:a3:8a:
4d:4c:e7:d8:b7:d1:b6:05:af:b8:35:aa:17:56:ef:
b8:f1:8e:85:f3:40:46:0d:ca:9c:62:07:56:47:28:
ff:74:a4:c0:ca:12:15:d7:26:19:29:b0:8b:3a:76:
94:6f:9b:da:fd:1d:92:60:83:da:ca:ad:4b:d4:9e:
d8:ec:6b:f7:1d:ff:2f:eb:ab:e0:ab:5e:35:b8:98:
9a:0e:09:17:61:05:70:42:9c:4e:0f:2b:bf:89:1a:
d6:55:07:29:10:ad:68:7f:a2:29:6d:ab:e7:8d:c8:
e8:c9:b8:ea:69:64:51:c2:cd:a0:37:ef:bd:f1:90:
3b:96:94:1b:91:80:d0:82:d4:f7:21:3a:4d:46:05:
eb:ff:74:64:93:56:87:60:d3:d6:08:95:54:c9:32:
de:a3:c4:37:4f:ef:ec:2e:f8:6b:ee:e3:94:37:a3:
9c:b9:33:ef:f8:ab:bc:0d:d7:df:26:bc:a5:97:ef:
10:58:91:be:70:d5:b0:ba:26:78:d0:f5:79:45:6f:
23:dc:f3:bd:04:05:95:2c:d6:15:66:9f:b6:44:67:
72:b3:52:d9:f5:38:4a:3b:10:41:ea:9c:62:49:aa:
28:6f:2c:5f:0c:a1:2e:c4:d2:d5:b6:7b:dc:73:53:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C0:74:82:C1:5A:FD:8B:28:52:7D:79:62:05:C5:D8:DA:B4:68:5F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H8B0gsFa_YsoUn15YgXF2Nq0aF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.116.0/24
45.9.122.0/24
45.94.46.0/24
45.128.76.0/24
45.154.58.0/24
93.190.244.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:17c1:66::/48
2a09:17c1:77::/48
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:88::/48
2a0e:15c7:99::/48
2a0e:1a83:77::/48
2a0e:f603:66::/48
2a0f:140::/29
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:2500::/29
2a0f:3d86:88::/48
2a0f:3d86:99::/48
2a0f:7d06:88::/48
2a0f:7d06:99::/48
2a0f:cc00::/29
2a0f:d200::/29
2a0f:da40::/29
2a0f:db40::/29
2a0f:dfc0::/29
2a0f:e040::/29
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e202:55::/48
2a0f:e4c0::/29
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:e7c6:88::/48
2a0f:e844:22::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
2a0f:fc00::/29
2a12:ac46:77::/48
2a12:ecc0:168::/48
2a12:ecc0:178::/48
2a13:18c6:77::/48
2a13:18c6:88::/48
2a13:7d80::/29
2a13:8c86:10a::/48
2a13:8c86:130::/48
2a13:c900:88::/48
2a13:c900:99::/48
2a13:e107:99::/48
2a13:e107:9c::/48
Signature Algorithm: sha256WithRSAEncryption
22:f4:3e:b1:ba:44:68:62:8f:f9:72:15:d3:a0:4f:95:ad:b5:
ed:f9:a9:46:0a:fa:59:77:77:10:04:4a:a1:b7:5d:c4:a2:e8:
4d:d5:be:84:78:97:4f:b0:81:16:c1:1b:35:2e:84:d2:03:df:
01:92:6e:bc:e8:57:ec:79:c2:44:82:56:6a:f3:1b:39:c8:62:
43:cf:68:94:5d:fe:7d:13:83:88:38:57:ec:bf:9b:1d:7b:dd:
7f:45:96:f0:09:0a:44:61:9c:99:35:94:25:dc:fe:38:3e:ec:
1e:33:64:01:4b:36:58:4d:c6:15:0e:82:c8:ed:f9:73:07:97:
5a:ac:70:f5:d0:e5:fc:60:cd:4a:64:d3:24:91:b5:45:4a:b2:
11:dc:48:55:04:50:23:4e:1d:7e:17:53:6a:a5:dc:e0:3f:25:
37:e7:3e:40:2a:25:ad:b4:f2:db:e9:ec:5c:d3:f7:6c:6d:cd:
b8:1e:b6:41:28:d3:61:36:5d:15:88:93:9a:65:d9:a9:e9:51:
d0:bf:cc:83:4f:77:1a:fb:95:c0:eb:92:eb:4a:0b:fc:00:bf:
cd:1d:b7:c2:40:87:58:20:97:a4:fa:a2:a0:d3:2a:b5:84:82:
f3:a4:fc:cb:aa:f7:31:16:4e:45:c8:f7:5d:cb:47:c3:10:dc:
f4:18:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:40:27 2025 by rpki-client