Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/Hgg4Efyy8pmuFPjo5o1HWqeNRGU.roa
File: Hgg4Efyy8pmuFPjo5o1HWqeNRGU.roa (raw, json)
Hash identifier: QWuXRLwV44VOALcmRW0lf+RWKmWiNgLwuGDWKDY/d3I=
Subject key identifier: 1E:08:38:11:FC:B2:F2:99:AE:14:F8:E8:E6:8D:47:5A:A7:8D:44:65
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 019758EB30CBFDB7B1CCC62747A955288563
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/Hgg4Efyy8pmuFPjo5o1HWqeNRGU.roa
Signing time: Tue 10 Jun 2025 08:18:17 +0000
ROA not before: Tue 10 Jun 2025 08:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.23.56.0/22 maxlen: 22
185.55.252.0/22 maxlen: 22
2a00:6be0::/32 maxlen: 32
2a04:d780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:eb:30:cb:fd:b7:b1:cc:c6:27:47:a9:55:28:85:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Jun 10 08:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e083811fcb2f299ae14f8e8e68d475aa78d4465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:ec:68:e2:b3:0d:0c:01:27:a0:18:a7:72:
85:95:6d:f2:97:c6:53:dd:24:63:44:c2:b8:09:9e:
39:69:0b:b3:b1:d4:eb:85:21:d0:e6:e9:b9:59:e2:
c0:40:80:0c:a4:1a:bc:68:c8:ce:bb:4e:0b:97:d6:
7b:4c:97:9c:f7:28:50:9e:b7:92:c8:04:cb:e9:25:
4b:ef:89:e8:30:ca:02:02:f1:a0:64:6c:5f:1b:97:
3b:50:1a:af:ae:38:3e:bd:c2:2e:d7:34:fd:b4:16:
d4:4c:6e:63:4e:f1:d7:a8:c2:81:5a:1a:45:73:af:
4c:2d:fb:57:14:61:36:53:e1:cd:4b:0f:66:e2:2d:
9d:cb:b4:b5:c6:17:ac:94:c1:c9:0b:5c:bb:9c:33:
66:85:c7:55:26:86:15:12:bb:cf:08:16:6a:cd:1c:
ba:49:2c:d5:b5:c9:0a:09:1d:af:3b:49:73:9b:34:
2b:7e:42:22:9c:0b:eb:ac:6a:67:e6:b5:46:ca:c6:
b7:73:9f:50:62:b0:5c:e4:f7:12:da:e9:71:5b:cd:
55:b5:ad:e2:08:c7:61:d3:25:ea:ac:8d:e7:f6:e3:
66:0b:6c:24:92:a8:f4:19:21:da:cc:be:ce:dd:b3:
6d:a4:52:2a:59:f9:c2:9a:a7:3a:d3:0b:a1:4e:06:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:08:38:11:FC:B2:F2:99:AE:14:F8:E8:E6:8D:47:5A:A7:8D:44:65
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/Hgg4Efyy8pmuFPjo5o1HWqeNRGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.56.0/22
185.55.252.0/22
IPv6:
2a00:6be0::/32
2a04:d780::/29
Signature Algorithm: sha256WithRSAEncryption
38:ad:8e:91:fa:63:83:b1:e2:10:dc:49:5e:76:64:02:96:55:
91:34:dc:fb:b5:21:ed:92:20:2a:a0:a4:da:da:d9:d3:a4:2a:
f6:0e:2f:5b:6c:d9:10:fb:cc:bb:de:19:e4:67:2f:4a:03:2a:
7f:b8:8a:ec:bc:f8:65:49:41:bd:99:d2:c8:85:06:99:15:8c:
78:9c:87:63:96:f0:fe:a1:94:d8:de:bb:79:22:b2:23:7f:8c:
95:70:bb:d0:5a:f4:41:b3:51:5e:2c:fc:6e:d7:35:f6:90:f4:
a5:cc:bb:44:5f:78:d1:32:42:31:80:a2:30:c7:ea:ca:7a:a7:
1c:ae:ee:18:38:30:fa:b5:2b:ed:91:e5:da:e0:c8:b5:84:b8:
b0:07:87:49:5e:38:a5:b7:4f:6d:e0:5b:2a:fc:52:fa:9d:cd:
96:7f:3c:90:c8:5d:9e:64:9d:e3:f9:bf:a8:57:96:cf:9b:a9:
f9:2d:55:b8:80:e4:a1:65:ad:58:59:17:1f:f3:b8:c5:0a:2b:
d1:63:cb:a0:46:3e:e2:dd:09:b8:80:48:1b:31:ab:06:c2:b3:
51:5f:9a:5e:55:59:4a:27:12:47:61:0f:34:a0:c8:b8:e3:cd:
a2:06:d1:70:b0:64:b8:9a:d4:53:8d:da:c2:35:b6:d8:d3:30:
04:13:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:37:03 2025 by rpki-client