Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w_8HxpBdYoUsHHB7HePcObdIhnY.roa
File: w_8HxpBdYoUsHHB7HePcObdIhnY.roa (raw, json)
Hash identifier: VbXP2KqHhJa3xNRFWQT/ABG8MmD7y47TYQlazJJI4Uk=
Subject key identifier: C3:FF:07:C6:90:5D:62:85:2C:1C:70:7B:1D:E3:DC:39:B7:48:86:76
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01978BD72B81C162EC038F2F18A4B5C36D04
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w_8HxpBdYoUsHHB7HePcObdIhnY.roa
Signing time: Fri 20 Jun 2025 05:37:03 +0000
ROA not before: Fri 20 Jun 2025 05:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.253.65.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:d7:2b:81:c1:62:ec:03:8f:2f:18:a4:b5:c3:6d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 20 05:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3ff07c6905d62852c1c707b1de3dc39b7488676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:50:2a:85:66:bb:8d:b2:fb:03:73:28:83:
0e:db:00:27:a0:e6:10:67:75:33:f8:9b:96:78:01:
0f:c0:7d:de:9a:42:2b:f7:61:4f:1d:16:73:e8:d9:
bf:92:20:4e:e6:b3:60:d9:ba:fd:70:5a:e4:d3:4c:
49:87:e6:45:69:52:15:42:c1:42:d6:c2:bb:68:1c:
56:18:b6:7b:fa:1b:97:ca:44:ac:b7:2e:a9:31:d3:
33:6d:36:b7:cf:bd:dc:3f:c5:f1:86:8e:6e:89:e9:
c9:1e:33:a8:ee:51:2c:5e:da:8a:00:2d:a0:ba:be:
33:d3:3a:75:b4:c5:4a:0f:1e:1f:ae:fd:05:eb:ff:
84:4e:c9:8f:f0:0c:17:d9:72:17:a6:fb:71:e7:dc:
1a:24:6e:54:ae:0f:5d:23:58:bc:9d:23:99:57:10:
ef:eb:63:39:25:0a:ee:40:99:d8:47:02:b6:7f:5d:
cf:66:51:c5:86:7a:0f:3c:dc:a1:61:b2:51:32:13:
86:1b:8e:9a:7b:10:80:7e:55:b2:fa:1f:55:32:3c:
74:a7:58:2b:21:09:9d:49:78:09:7c:3d:5d:ca:92:
9d:e4:49:e1:53:6c:f8:7a:d1:53:1f:bf:bf:00:fc:
a2:19:d9:01:85:ad:05:64:1d:a5:88:7f:2e:7d:18:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FF:07:C6:90:5D:62:85:2C:1C:70:7B:1D:E3:DC:39:B7:48:86:76
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w_8HxpBdYoUsHHB7HePcObdIhnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.65.0/24
83.219.98.0/24
87.120.68.0/23
87.121.60.0/23
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
56:af:d4:d2:ca:b6:82:b1:ca:59:ff:a5:e5:92:c6:6f:6d:e6:
40:03:1f:20:db:d7:bb:fc:55:29:ea:49:ad:e7:ce:1c:0b:b2:
74:8e:9c:6f:42:bb:8c:50:ef:84:99:82:a7:d6:50:91:e0:21:
29:64:9c:72:61:73:fb:0d:31:59:85:8d:30:cd:03:65:d8:de:
2b:f1:ff:66:56:f6:88:52:b5:d5:ca:85:2f:0f:c9:a4:96:50:
df:04:10:31:a7:0b:3b:ce:f6:0c:42:0d:51:41:31:e9:20:a3:
e1:e8:88:ce:c5:5a:42:d8:fc:eb:36:45:c3:c4:8e:30:e2:53:
22:e3:5f:8b:1d:3c:a8:3e:3a:b5:fe:44:2f:74:84:a0:a0:65:
91:eb:2a:28:af:ff:b5:52:a5:01:12:7d:4a:75:51:1c:39:25:
15:a2:4c:68:ef:7c:4d:08:eb:95:7b:b1:f3:b6:4c:56:cb:65:
aa:d7:28:a6:f9:da:e6:ac:0b:84:0f:c7:b1:36:22:8a:82:63:
04:f5:e1:5d:93:0a:3b:08:91:90:ec:1a:74:5a:c7:fb:e5:de:
ef:7e:dc:bf:07:6c:bf:92:03:ed:df:1b:f9:3d:7b:e3:5e:5d:
21:20:b5:0d:89:4e:1b:84:82:c9:74:e6:d7:0b:39:9e:7b:39:
b2:74:ef:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:10:34 2025 by rpki-client