Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/hzxPD1tTltD0QDura1MxJWigUBE.roa
File: hzxPD1tTltD0QDura1MxJWigUBE.roa (raw, json)
Hash identifier: 5nYVXUDsX4+3FWl3JaINgnQyrUXh4rqzUTE7RBqyFqA=
Subject key identifier: 87:3C:4F:0F:5B:53:96:D0:F4:40:3B:AB:6B:53:31:25:68:A0:50:11
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 0196B95AFF9CF30159040104E618F382020B
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/hzxPD1tTltD0QDura1MxJWigUBE.roa
Signing time: Sat 10 May 2025 08:41:10 +0000
ROA not before: Sat 10 May 2025 08:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15373
IP address blocks: 212.87.224.0/21 maxlen: 21
212.87.232.0/23 maxlen: 23
212.87.234.0/23 maxlen: 23
212.87.236.0/23 maxlen: 23
212.87.238.0/23 maxlen: 23
212.87.251.0/24 maxlen: 24
212.87.253.0/24 maxlen: 24
2a01:698::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:5a:ff:9c:f3:01:59:04:01:04:e6:18:f3:82:02:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: May 10 08:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=873c4f0f5b5396d0f4403bab6b53312568a05011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:15:ab:1d:3b:c6:9a:aa:7d:c1:f1:e8:4b:
7a:a3:2f:14:19:18:ae:52:9b:83:a7:c2:1c:71:2e:
c4:7b:c2:c0:19:6e:65:46:62:42:2e:67:a5:9f:49:
a5:0e:ae:0c:d2:c4:20:0d:20:48:89:5b:82:40:31:
11:2f:50:b8:5b:8a:5f:e0:d7:12:d6:eb:62:83:66:
2f:9f:c5:02:e6:e6:59:b7:6a:7d:92:98:fe:20:5b:
74:74:eb:bd:bf:80:c6:9c:2b:37:72:b7:7a:af:6c:
e1:ab:f5:1f:76:dd:11:a0:2e:a2:24:b6:b9:65:d6:
d4:63:18:fd:b6:f6:e4:e6:0b:07:06:d0:5a:ed:76:
f9:33:61:c7:77:09:2b:95:df:42:78:6b:4b:e0:74:
92:6e:69:77:d8:da:db:ca:3b:c8:96:5e:f5:8f:b8:
6d:15:b5:e2:ae:43:20:c1:c2:3a:54:61:b5:56:ec:
09:ef:89:10:c8:ea:c6:fa:05:57:65:01:76:b7:c2:
a1:9d:30:ca:8b:37:81:6a:86:46:fb:c7:33:f2:7f:
f2:8c:12:95:bc:a8:fc:b6:49:ff:dd:71:e7:9b:8a:
46:e8:57:76:a4:e5:e9:ea:e5:7a:bf:46:45:f5:97:
9c:cb:53:55:88:61:a2:34:95:f6:fa:c6:e4:d9:cc:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3C:4F:0F:5B:53:96:D0:F4:40:3B:AB:6B:53:31:25:68:A0:50:11
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/hzxPD1tTltD0QDura1MxJWigUBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.224.0/20
212.87.251.0/24
212.87.253.0/24
IPv6:
2a01:698::/32
Signature Algorithm: sha256WithRSAEncryption
08:64:34:58:cd:e4:52:ea:fa:3b:83:40:5d:f5:c1:72:78:8b:
95:be:f7:6b:dc:2b:3d:70:61:66:b2:bf:e9:96:7f:08:9b:1f:
2a:99:e7:54:0b:41:dc:7d:ae:cd:d9:c3:4c:a6:d6:94:c6:e4:
54:bc:2e:a7:cf:bb:1a:d9:67:00:19:f4:bc:22:bb:5a:c2:47:
af:ad:04:3e:cc:30:78:ff:eb:3d:62:ad:56:29:61:5c:30:87:
23:ed:80:82:51:26:14:34:7a:70:3e:66:c9:21:66:c4:cd:67:
3c:d4:be:d2:6c:97:51:09:a5:d2:dd:bc:22:33:a5:7e:de:be:
03:eb:8c:12:54:d9:93:34:91:42:7c:60:2d:20:46:50:46:86:
83:7d:60:96:d6:c2:0a:e6:b5:7e:38:1d:bd:e8:c3:7d:7e:f2:
62:7a:c5:c6:b1:20:ed:4e:1b:1d:43:4f:7a:dc:47:e0:c7:37:
89:9e:f2:cb:be:17:58:53:11:c6:1b:f0:18:08:54:2a:f3:ad:
e8:05:f3:bc:3f:9f:dc:a0:dc:0f:ea:e9:d4:05:71:6f:2a:2d:
c9:58:c0:60:2d:14:ed:47:78:ca:4d:4e:34:3f:66:ef:4d:50:
54:65:da:97:89:b3:48:da:6c:6f:e9:17:70:47:bc:fa:ac:ac:
26:76:24:a1
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZa5Wv+c8wFZBAEE5hjzggILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmFhOTYxYjQ3N2Q1NDIzZDg1YjdkNDNmM2VmYTI2MzI2
ZDcwOTAwHhcNMjUwNTEwMDg0MTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzNjNGYwZjViNTM5NmQwZjQ0MDNiYWI2YjUzMzEyNTY4YTA1MDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+MVqx07xpqqfcHx6Et6oy8UGRiu
UpuDp8IccS7Ee8LAGW5lRmJCLmeln0mlDq4M0sQgDSBIiVuCQDERL1C4W4pf4NcS
1utig2Yvn8UC5uZZt2p9kpj+IFt0dOu9v4DGnCs3crd6r2zhq/Ufdt0RoC6iJLa5
ZdbUYxj9tvbk5gsHBtBa7Xb5M2HHdwkrld9CeGtL4HSSbml32NrbyjvIll71j7ht
FbXirkMgwcI6VGG1VuwJ74kQyOrG+gVXZQF2t8KhnTDKizeBaoZG+8cz8n/yjBKV
vKj8tkn/3XHnm4pG6Fd2pOXp6uV6v0ZF9Zecy1NViGGiNJX2+sbk2cxxJwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFIc8Tw9bU5bQ9EA7q2tTMSVooFARMB8GA1UdIwQY
MBaAFLAqqWG0d9VCPYW31D8++iYybXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEt
MDc4N2E1MDNjYTY5LzEvaHp4UEQxdFRsdEQwUUR1cmExTXhKV2lnVUJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEtMDc4N2E1MDNjYTY5
LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQE1FfgAwQA
1Ff7AwQA1Ff9MA0EAgACMAcDBQAqAQaYMA0GCSqGSIb3DQEBCwUAA4IBAQAIZDRY
zeRS6vo7g0Bd9cFyeIuVvvdr3Cs9cGFmsr/pln8Imx8qmedUC0Hcfa7N2cNMptaU
xuRUvC6nz7sa2WcAGfS8IrtawkevrQQ+zDB4/+s9Yq1WKWFcMIcj7YCCUSYUNHpw
PmbJIWbEzWc81L7SbJdRCaXS3bwiM6V+3r4D64wSVNmTNJFCfGAtIEZQRoaDfWCW
1sIK5rV+OB296MN9fvJiesXGsSDtThsdQ0963EfgxzeJnvLLvhdYUxHGG/AYCFQq
863oBfO8P5/coNwP6unUBXFvKi3JWMBgLRTtR3jKTU40P2bvTVBUZdqXibNI2mxv
6RdwR7z6rKwmdiSh
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:53:50 2025 by rpki-client