Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HhjTWaAvD9OL2TH6bAYqTTU__Tk.roa
File: HhjTWaAvD9OL2TH6bAYqTTU__Tk.roa (raw, json)
Hash identifier: nFeWTyomAjhviAyGv/K7S5euWvLGCane10nwX25axjs=
Subject key identifier: 1E:18:D3:59:A0:2F:0F:D3:8B:D9:31:FA:6C:06:2A:4D:35:3F:FD:39
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0198C7C99E135F0CD791EA0CE8CDC2E23A00
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HhjTWaAvD9OL2TH6bAYqTTU__Tk.roa
Signing time: Wed 20 Aug 2025 14:02:15 +0000
ROA not before: Wed 20 Aug 2025 14:02:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34872
IP address blocks: 45.154.97.0/24 maxlen: 32
45.154.99.0/24 maxlen: 32
62.3.50.0/24 maxlen: 32
194.28.98.0/23 maxlen: 32
2a0c:b640::/32 maxlen: 128
2a0c:b641::/44 maxlen: 128
2a0c:b641:10::/44 maxlen: 128
2a0c:b641:50::/44 maxlen: 128
2a0c:b641:60::/44 maxlen: 128
2a0c:b641:530::/44 maxlen: 128
2a0c:b641:6d0::/44 maxlen: 128
2a0c:b641:70f::/48 maxlen: 128
2a0c:b641:820::/44 maxlen: 128
2a0f:8400::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:c9:9e:13:5f:0c:d7:91:ea:0c:e8:cd:c2:e2:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 20 14:02:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e18d359a02f0fd38bd931fa6c062a4d353ffd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:9a:c0:65:a3:98:c4:fb:ce:1b:fd:f4:db:
10:40:0a:ed:35:31:10:b9:30:76:02:45:92:3c:23:
15:3c:bc:84:59:18:d5:32:0e:cf:24:8e:d2:99:72:
59:6c:57:5a:dd:77:82:38:a4:d3:1d:69:81:2d:7a:
06:e3:f2:33:ab:32:86:cb:0d:d9:35:ce:5b:8e:0f:
80:51:86:46:4c:24:6e:16:ff:fe:eb:9d:a2:26:25:
d5:53:76:4e:2c:dd:6e:22:33:16:74:79:85:7f:6d:
a7:94:b2:a5:21:05:9e:c7:a8:b4:f0:95:46:49:2e:
5a:db:7c:e4:ab:1b:ce:ca:33:75:48:db:f1:94:41:
09:5d:04:55:ee:72:09:3d:09:ca:40:29:01:80:75:
fa:3e:f0:68:5f:04:26:f6:2d:7d:8f:9d:07:c7:f3:
ed:e3:71:21:8d:65:5d:f9:b3:eb:93:4a:fa:5b:a0:
7f:ba:26:5f:68:91:d5:44:45:b8:fa:36:74:ed:a4:
ca:e6:01:02:e2:f4:65:cd:da:f1:21:fb:23:94:da:
fd:d3:df:82:63:92:df:90:1b:9d:05:da:e2:a3:50:
69:8c:1a:6c:11:88:ae:5d:e3:11:34:8a:75:35:02:
f5:56:fb:c4:0a:cd:dd:fc:91:a3:c5:4b:45:ed:73:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:18:D3:59:A0:2F:0F:D3:8B:D9:31:FA:6C:06:2A:4D:35:3F:FD:39
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HhjTWaAvD9OL2TH6bAYqTTU__Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.97.0/24
45.154.99.0/24
62.3.50.0/24
194.28.98.0/23
IPv6:
2a0c:b640::-2a0c:b641:1f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:50::-2a0c:b641:6f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:530::/44
2a0c:b641:6d0::/44
2a0c:b641:70f::/48
2a0c:b641:820::/44
2a0f:8400::/32
Signature Algorithm: sha256WithRSAEncryption
6e:4f:97:90:9a:0a:0c:f3:bf:ac:89:3f:41:2d:2a:ad:6b:4b:
45:af:bb:05:74:c9:44:3f:a9:55:87:a6:02:ce:9a:d5:7d:73:
df:60:7a:d9:98:78:51:48:1c:c7:24:aa:a8:d1:f0:72:97:23:
cf:b3:3d:9c:62:4b:0c:01:4d:f7:ee:fa:19:34:3e:52:48:b9:
0e:3d:5f:dd:0b:e8:28:cf:cc:3a:8c:e0:a7:56:d8:b5:4d:b1:
45:09:19:e3:3e:d7:ef:3b:66:39:55:3d:c6:bd:9b:ff:fd:9c:
4d:e1:93:e9:d9:2c:45:6c:97:44:c7:50:fc:d3:4f:45:31:52:
bc:b4:6b:8c:06:b0:9f:dd:74:65:36:14:52:3f:d3:d2:e8:09:
81:0b:9c:8e:9c:89:8b:e9:d8:f3:7e:f4:69:13:ad:32:e9:e7:
ad:81:1d:4e:de:6b:da:3e:12:83:19:14:5c:81:ea:97:6d:8f:
39:6d:65:05:92:ef:6e:c3:40:7a:a3:88:13:e5:34:d4:7f:07:
b7:87:43:de:6b:c0:ae:40:54:b6:bc:16:da:39:38:c9:6d:a3:
31:05:13:b9:95:84:5c:64:bd:6b:e3:76:36:86:c0:ff:8b:0e:
30:49:f5:91:31:17:0c:2e:f4:1c:23:a5:a9:5c:6a:b9:f1:48:
17:91:04:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:46 2025 by rpki-client