Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/HOFuYJA21RRv709Gkqp-YVI1pnc.roa
File: HOFuYJA21RRv709Gkqp-YVI1pnc.roa (raw, json)
Hash identifier: /Ilnzb7fkIj0wD4Gc1ajFjx70b+0n8vZYhfy5zJo85s=
Subject key identifier: 1C:E1:6E:60:90:36:D5:14:6F:EF:4F:46:92:AA:7E:61:52:35:A6:77
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 019893E4890D17103CEE5ABDB1B8B1357101
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/HOFuYJA21RRv709Gkqp-YVI1pnc.roa
Signing time: Sun 10 Aug 2025 12:11:24 +0000
ROA not before: Sun 10 Aug 2025 12:11:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 82.199.208.0/24 maxlen: 24
82.199.209.0/24 maxlen: 24
82.199.210.0/24 maxlen: 24
82.199.211.0/24 maxlen: 24
82.199.212.0/24 maxlen: 24
82.199.213.0/24 maxlen: 24
82.199.214.0/24 maxlen: 24
82.199.215.0/24 maxlen: 24
82.199.216.0/24 maxlen: 24
82.199.217.0/24 maxlen: 24
82.199.218.0/24 maxlen: 24
82.199.219.0/24 maxlen: 24
82.199.220.0/24 maxlen: 24
82.199.221.0/24 maxlen: 24
89.46.200.0/24 maxlen: 24
89.46.201.0/24 maxlen: 24
89.46.202.0/24 maxlen: 24
89.46.203.0/24 maxlen: 24
89.46.204.0/24 maxlen: 24
89.46.205.0/24 maxlen: 24
89.46.206.0/24 maxlen: 24
89.46.207.0/24 maxlen: 24
185.16.26.0/24 maxlen: 24
185.95.204.0/24 maxlen: 24
185.95.205.0/24 maxlen: 24
185.247.36.0/24 maxlen: 24
185.247.37.0/24 maxlen: 24
185.247.38.0/24 maxlen: 24
185.247.39.0/24 maxlen: 24
185.254.200.0/24 maxlen: 24
185.254.201.0/24 maxlen: 24
185.254.203.0/24 maxlen: 24
212.95.128.0/24 maxlen: 24
212.95.129.0/24 maxlen: 24
212.95.130.0/24 maxlen: 24
212.95.131.0/24 maxlen: 24
212.95.132.0/24 maxlen: 24
212.95.133.0/24 maxlen: 24
212.95.134.0/24 maxlen: 24
212.95.135.0/24 maxlen: 24
212.95.136.0/24 maxlen: 24
212.95.137.0/24 maxlen: 24
212.95.138.0/24 maxlen: 24
212.95.139.0/24 maxlen: 24
212.95.140.0/24 maxlen: 24
212.95.141.0/24 maxlen: 24
212.95.143.0/24 maxlen: 24
212.95.144.0/24 maxlen: 24
212.95.145.0/24 maxlen: 24
212.95.146.0/24 maxlen: 24
212.95.147.0/24 maxlen: 24
212.95.151.0/24 maxlen: 24
212.95.152.0/24 maxlen: 24
212.95.153.0/24 maxlen: 24
212.95.154.0/24 maxlen: 24
212.95.155.0/24 maxlen: 24
223.25.120.0/24 maxlen: 24
223.25.121.0/24 maxlen: 24
223.25.122.0/24 maxlen: 24
223.25.123.0/24 maxlen: 24
223.25.124.0/24 maxlen: 24
223.25.125.0/24 maxlen: 24
223.25.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:e4:89:0d:17:10:3c:ee:5a:bd:b1:b8:b1:35:71:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Aug 10 12:11:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ce16e609036d5146fef4f4692aa7e615235a677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:70:46:27:0d:bc:d6:35:ef:94:cb:20:ae:
08:75:3a:cf:79:28:ba:8c:cb:f8:7c:ea:f5:57:ae:
19:0a:0b:bd:87:0a:d5:d7:47:7e:c1:21:5d:8f:00:
24:39:45:a1:a5:82:59:e5:97:98:fb:ce:f7:f8:0d:
e4:ab:c7:cd:89:5b:b3:58:10:03:4f:69:1b:ef:7a:
13:a6:c9:0e:e8:98:cb:dc:fb:1c:0b:12:6a:87:4d:
c3:39:fe:6d:45:61:8a:2b:4e:bf:b0:9a:cc:dd:12:
81:d4:3a:f4:53:02:bc:29:53:1f:41:5c:58:92:ad:
5d:cc:c0:3e:22:70:03:34:8a:db:d9:e5:66:cf:da:
9d:92:e2:d5:37:52:39:72:24:1e:db:1b:07:78:ff:
70:7a:9a:b9:2c:37:e8:72:b8:e8:aa:b7:d8:20:99:
4e:f7:8e:d8:7f:ae:b6:84:a4:cd:52:1f:ec:65:77:
23:07:41:99:b5:4a:d6:ab:cc:f4:02:3b:5a:a0:5f:
33:69:59:a6:bb:aa:36:9f:f8:e9:b6:43:48:64:0e:
2e:f8:3f:74:9f:80:81:fb:09:11:81:c5:09:6e:f9:
af:2f:c3:31:4e:f2:31:e2:5e:e2:d9:b2:16:38:b1:
6c:d2:5e:b0:4e:d7:03:de:37:78:96:7e:ab:0c:7f:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E1:6E:60:90:36:D5:14:6F:EF:4F:46:92:AA:7E:61:52:35:A6:77
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/HOFuYJA21RRv709Gkqp-YVI1pnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.199.208.0-82.199.221.255
89.46.200.0/21
185.16.26.0/24
185.95.204.0/23
185.247.36.0/22
185.254.200.0/23
185.254.203.0/24
212.95.128.0-212.95.141.255
212.95.143.0-212.95.147.255
212.95.151.0-212.95.155.255
223.25.120.0-223.25.126.255
Signature Algorithm: sha256WithRSAEncryption
28:d3:dd:dc:0e:0e:9d:52:2f:c8:e3:9e:a0:6d:6b:b9:44:7f:
33:2d:e0:4f:12:6b:13:6e:08:f9:d1:96:5a:77:c3:6c:f2:c1:
f4:49:c5:3a:01:41:1d:f8:fb:e0:ad:76:0a:bc:10:9a:ac:61:
bc:70:04:73:f1:3d:4c:85:16:60:4a:8b:09:be:b4:0e:76:0d:
d4:59:e8:42:a4:1b:0b:26:ff:f6:71:ce:e4:67:f9:98:50:af:
25:27:44:f0:22:fd:7f:64:a4:08:fd:86:19:fd:e7:12:c1:4b:
4d:9b:91:a6:a8:ef:a4:4b:24:37:5d:fc:2d:60:fe:3e:c1:b9:
ad:67:5f:56:5f:86:3f:de:05:65:5b:b4:c7:9d:16:36:21:08:
9b:4e:72:d6:4f:a6:ba:05:02:f2:42:5e:5a:91:b5:28:df:8b:
f1:91:3f:2c:56:d7:1a:24:2a:55:a4:9a:fd:a6:fb:20:94:31:
ff:8a:30:71:80:66:ce:4e:8e:b3:12:85:9b:5e:90:8e:9d:f0:
3f:0a:e9:82:5d:47:07:96:c1:81:64:ae:b9:08:16:59:00:29:
c9:ea:ea:40:e1:38:e5:8a:5e:ea:b2:86:18:0c:9d:6b:8c:50:
d2:25:ac:87:6f:98:90:e1:9e:a3:2a:ce:f2:25:bd:af:52:6c:
9a:fd:c1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:38 2025 by rpki-client