Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HTU1LmIVy4wWXBjv-s6dNWKlBLM.roa
File: HTU1LmIVy4wWXBjv-s6dNWKlBLM.roa (raw, json)
Hash identifier: /CwG3A4uDFHksl9qFnie1gSxDo1qsCbZsa+efdMONJ0=
Subject key identifier: 1D:35:35:2E:62:15:CB:8C:16:5C:18:EF:FA:CE:9D:35:62:A5:04:B3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198899E3D37CF93E4977390955873A4BD77
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HTU1LmIVy4wWXBjv-s6dNWKlBLM.roa
Signing time: Fri 08 Aug 2025 12:18:25 +0000
ROA not before: Fri 08 Aug 2025 12:18:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Aug 2025 17:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:9e:3d:37:cf:93:e4:97:73:90:95:58:73:a4:bd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 8 12:18:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d35352e6215cb8c165c18efface9d3562a504b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:92:4c:60:73:b7:2e:26:a2:1d:d0:ab:c3:
50:67:b7:6d:81:fc:20:a4:8c:15:48:84:30:af:0b:
3d:85:0f:b1:17:fa:83:38:ac:19:f3:02:42:b7:f7:
21:77:09:82:0f:eb:d2:bd:62:3b:72:72:36:e6:71:
d5:50:73:ea:86:0a:47:e6:27:a9:7e:a1:4d:97:ee:
b8:25:14:17:e5:b4:d4:5b:5f:a8:7a:a1:71:6c:f8:
06:b2:d4:a2:b0:f9:91:e1:27:3c:4c:b6:51:8b:3f:
66:6b:e8:b9:e8:ec:45:f4:7a:58:cb:bd:a7:cc:aa:
89:1a:f9:bb:aa:47:03:ba:a0:2d:ba:63:67:70:43:
ea:08:91:bc:3e:38:f7:bf:a1:d5:b7:30:9a:4d:d1:
f4:fb:0a:ae:d2:f3:db:09:ce:c4:3d:ab:1a:c7:1f:
cf:31:db:fe:94:85:03:6f:46:c3:a0:4d:dd:6a:38:
9d:05:5e:7e:08:79:a8:a0:7e:f6:87:90:97:e2:83:
f5:b4:3e:2d:07:a1:5b:a1:3c:7e:39:ff:0c:8a:e7:
9c:5a:19:50:a5:70:e1:e2:19:01:90:d1:67:14:bc:
b5:e4:18:bb:52:d4:51:9f:74:4d:0c:89:19:d8:81:
3b:4e:ed:94:9a:68:8f:c6:36:8a:9e:b6:b7:f1:2f:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:35:35:2E:62:15:CB:8C:16:5C:18:EF:FA:CE:9D:35:62:A5:04:B3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HTU1LmIVy4wWXBjv-s6dNWKlBLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.41.0/24
77.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:af:20:92:69:68:ec:90:ab:1e:cc:14:96:22:f2:d0:2e:dc:
f3:24:bb:43:36:1d:c2:08:17:9d:15:e8:e2:e9:f2:c2:88:07:
7f:fa:d6:34:2f:9f:e5:81:c7:9c:cf:db:37:a2:b5:e8:a4:0f:
16:fd:22:27:e3:e2:ae:ac:3d:e8:14:6e:0f:2f:5f:56:42:76:
34:cc:73:de:fd:ce:fc:b8:2f:ba:ab:c3:95:8b:84:57:59:a4:
a5:3e:79:51:4c:04:68:4e:31:01:f3:c4:53:2f:c2:f5:d3:f9:
73:d7:29:95:59:50:0a:c6:f1:55:4e:22:00:a0:03:27:40:75:
a2:a4:8d:7b:95:aa:73:8d:64:57:0c:c7:12:5a:2d:c1:66:8c:
47:8d:74:ad:0c:a8:c6:2b:dc:3f:63:36:d0:75:00:bd:c0:28:
05:fd:68:76:ae:fa:d6:72:54:19:73:50:3f:2a:1c:7c:08:c3:
22:bc:1b:fd:62:8d:b2:40:ed:6b:ce:f6:90:50:c7:24:de:79:
47:f4:95:17:7d:c8:32:3e:2f:fb:2a:6e:09:36:4d:29:78:8e:
22:fa:b1:0f:d1:5a:df:db:5c:96:56:3c:61:17:d5:0d:bd:62:
ed:8b:09:dd:b7:81:d9:d4:35:0e:a7:9b:db:dd:07:70:6c:70:
94:31:e4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 03:02:50 2025 by rpki-client