Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/1hp0FN2Zg5pDjgoZFlg4J_guib0.roa
File: 1hp0FN2Zg5pDjgoZFlg4J_guib0.roa (raw, json)
Hash identifier: Q0hgLFUWzZKKVmCPawFvjEl4SPCELVdqx/7++z9jxEg=
Subject key identifier: D6:1A:74:14:DD:99:83:9A:43:8E:0A:19:16:58:38:27:F8:2E:89:BD
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 01989C8C1B9E878D314D2AE54E8306106A73
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/1hp0FN2Zg5pDjgoZFlg4J_guib0.roa
Signing time: Tue 12 Aug 2025 04:31:24 +0000
ROA not before: Tue 12 Aug 2025 04:31:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216154
IP address blocks: 45.10.172.0/23 maxlen: 23
45.10.172.0/24 maxlen: 24
45.10.173.0/24 maxlen: 24
45.88.172.0/22 maxlen: 22
45.114.60.0/22 maxlen: 22
80.74.24.0/21 maxlen: 21
84.252.102.0/23 maxlen: 23
88.218.120.0/22 maxlen: 22
89.46.131.0/24 maxlen: 24
89.150.34.0/23 maxlen: 23
89.150.41.0/24 maxlen: 24
89.150.59.0/24 maxlen: 24
91.132.56.0/22 maxlen: 22
91.132.224.0/24 maxlen: 24
103.54.16.0/22 maxlen: 22
103.90.72.0/23 maxlen: 23
103.90.74.0/23 maxlen: 23
103.90.74.0/24 maxlen: 24
103.90.75.0/24 maxlen: 24
103.137.248.0/22 maxlen: 22
185.200.176.0/22 maxlen: 22
188.241.196.0/23 maxlen: 23
2a0c:db40::/32 maxlen: 32
2a0c:db40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:8c:1b:9e:87:8d:31:4d:2a:e5:4e:83:06:10:6a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Aug 12 04:31:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d61a7414dd99839a438e0a1916583827f82e89bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:31:5c:d3:9c:70:9e:88:fc:1c:74:be:f1:
ca:1c:b0:e8:22:20:4b:51:17:66:a9:d9:4b:37:8f:
45:f0:99:af:25:24:f5:07:26:bc:bf:78:c2:9a:1f:
3e:50:28:29:cb:8a:71:8e:e9:77:54:5a:30:a7:23:
d7:b4:90:85:2a:18:54:10:30:4a:c5:c4:17:30:b9:
74:31:65:a2:ec:ae:f7:fc:9e:7e:2a:2b:1a:f6:09:
15:39:5b:3d:d7:e3:ed:db:90:85:61:45:03:11:1e:
38:0b:5a:90:cc:6a:e8:75:e3:39:77:b4:6c:46:13:
82:c2:eb:a6:4e:85:16:dc:31:89:41:ea:28:29:ee:
d1:6b:2a:6e:d2:91:f7:5e:8f:39:fb:92:ca:6b:81:
bc:d9:99:cd:16:e5:1c:df:c6:51:ad:e8:6b:2c:31:
4c:78:2a:ed:42:8f:e2:b0:a4:3b:b9:9b:1d:e7:66:
16:a6:bc:57:9e:f6:02:05:81:68:84:4e:12:71:5c:
02:d0:82:40:39:31:6b:64:d4:ca:10:dc:28:61:10:
02:0f:63:79:31:51:93:27:9c:ce:2d:65:5f:df:55:
16:32:f8:c6:6b:47:ed:94:87:2d:24:0d:2f:8e:73:
7b:c9:9b:92:33:06:e5:b1:6f:30:0e:21:02:10:7f:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1A:74:14:DD:99:83:9A:43:8E:0A:19:16:58:38:27:F8:2E:89:BD
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/1hp0FN2Zg5pDjgoZFlg4J_guib0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.172.0/23
45.88.172.0/22
45.114.60.0/22
80.74.24.0/21
84.252.102.0/23
88.218.120.0/22
89.46.131.0/24
89.150.34.0/23
89.150.41.0/24
89.150.59.0/24
91.132.56.0/22
91.132.224.0/24
103.54.16.0/22
103.90.72.0/22
103.137.248.0/22
185.200.176.0/22
188.241.196.0/23
IPv6:
2a0c:db40::/32
Signature Algorithm: sha256WithRSAEncryption
38:c3:b1:1c:e5:c8:52:4e:d4:2e:8f:37:f7:3f:ce:e2:54:4e:
7e:26:8f:03:c6:d0:e1:75:72:4e:91:74:18:85:db:c2:f2:2b:
00:0b:cb:91:fb:8e:b8:8f:e5:04:69:ae:1c:68:6e:f8:7f:9a:
fa:8b:10:66:f2:37:68:d7:3f:49:d6:6b:97:07:21:3e:56:c3:
5b:77:16:a2:d8:da:de:35:ee:c7:28:83:b2:bf:1b:81:a0:3e:
95:01:d5:ca:b7:b9:2b:32:2e:ad:5b:d9:1f:bc:ed:a9:8b:cd:
d9:b2:93:ac:fa:2e:28:9b:94:92:db:5a:fb:31:20:2e:e0:59:
df:43:57:7d:43:75:89:27:07:fb:a3:02:19:fb:74:d0:65:37:
b6:b9:6d:78:07:46:a2:a6:5e:7a:99:06:0e:29:d2:76:d7:63:
5e:ac:fa:c9:45:7b:79:e9:c3:b8:1a:6f:8d:dc:2b:83:3f:b3:
61:a1:19:aa:a4:1c:d1:b4:2d:1b:2f:cb:10:e7:ac:a2:bf:ac:
9a:ac:4b:33:34:6f:bf:c1:a2:c6:68:90:e2:58:45:48:9c:78:
60:5e:ab:b6:de:91:c2:f3:01:e0:a0:18:f2:99:ce:b0:e7:ce:
bd:c9:39:5a:00:d3:4f:d8:05:7d:b9:86:3f:41:22:e7:3e:1e:
07:8c:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:33:35 2025 by rpki-client