Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/hu5_32WjJAn1luXKxXFJFRq4Qxo.roa
File: hu5_32WjJAn1luXKxXFJFRq4Qxo.roa (raw, json)
Hash identifier: H0Bfc/kNNNmVdaDFa9D40SANomRhQUovf2U0QQGgQtA=
Subject key identifier: 86:EE:7F:DF:65:A3:24:09:F5:96:E5:CA:C5:71:49:15:1A:B8:43:1A
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0198CC3C40D19E2D2546083F280BC6413870
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/hu5_32WjJAn1luXKxXFJFRq4Qxo.roa
Signing time: Thu 21 Aug 2025 10:45:57 +0000
ROA not before: Thu 21 Aug 2025 10:45:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.5.0/24 maxlen: 24
152.53.7.0/24 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.42.64/28 maxlen: 28
152.53.43.64/27 maxlen: 27
152.53.44.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.64.0/22 maxlen: 24
152.53.84.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
152.53.144.0/22 maxlen: 22
152.53.148.0/22 maxlen: 22
152.53.152.0/22 maxlen: 22
152.53.160.0/22 maxlen: 22
152.53.172.0/22 maxlen: 22
152.53.176.0/22 maxlen: 22
152.53.180.0/22 maxlen: 22
152.53.188.0/22 maxlen: 22
152.53.196.0/22 maxlen: 22
152.53.200.0/24 maxlen: 24
152.53.202.0/24 maxlen: 24
152.53.204.0/22 maxlen: 22
152.53.224.0/22 maxlen: 22
152.53.228.0/22 maxlen: 22
152.53.236.0/22 maxlen: 22
152.53.244.0/22 maxlen: 22
152.53.248.0/22 maxlen: 22
152.53.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:3c:40:d1:9e:2d:25:46:08:3f:28:0b:c6:41:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Aug 21 10:45:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86ee7fdf65a32409f596e5cac57149151ab8431a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:f1:5d:7b:2f:92:77:51:5b:62:a8:64:ec:
f2:b0:c4:0e:a5:ef:70:a0:60:28:41:5b:82:ba:a8:
02:89:4c:97:ee:f1:c8:21:47:9b:ee:90:b5:8e:13:
7d:70:69:2b:61:65:6b:aa:fc:af:87:a2:d4:2c:2d:
87:ba:6c:b5:ed:95:bd:73:91:65:9f:ee:fd:d2:02:
d5:68:90:da:62:6a:0c:a9:dd:3f:3b:4c:aa:c8:26:
40:c9:84:f0:73:57:fc:5c:21:37:e5:68:6d:e4:4d:
e9:7d:1f:31:71:2c:a2:dc:7c:c9:99:ff:19:b0:eb:
32:27:2f:d0:14:fd:14:a0:c9:0b:6a:02:95:52:27:
28:0f:82:99:23:45:03:20:aa:60:f7:e3:c5:c6:fc:
d8:7d:3d:87:6e:19:6a:1a:ad:0f:c6:2c:79:0f:28:
73:22:b6:30:c8:be:8d:75:08:a2:c1:3a:92:76:ee:
90:3a:db:66:d2:4f:0d:f9:be:4d:a7:aa:b7:05:92:
c5:b4:b6:9c:8b:f4:56:98:27:f6:cd:bd:d4:a3:72:
ac:73:62:d0:d5:91:98:7c:a9:96:c6:06:fb:6e:5a:
99:e8:35:58:13:d7:15:22:9a:16:f6:4f:b8:49:6a:
30:ab:ea:62:ca:4f:ec:48:0d:34:9d:2b:13:37:df:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EE:7F:DF:65:A3:24:09:F5:96:E5:CA:C5:71:49:15:1A:B8:43:1A
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/hu5_32WjJAn1luXKxXFJFRq4Qxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:5c:6c:59:eb:04:0c:e1:1d:2a:4d:32:03:2b:cd:1b:c7:9e:
5c:2e:a7:24:c3:c5:76:3e:19:7b:f3:5d:d2:cd:26:fb:c3:c5:
28:0e:5f:ad:4d:cb:a2:08:6d:53:bc:16:cf:70:8b:7d:85:29:
7f:9c:23:82:a0:1e:27:c7:99:ca:de:41:89:58:c8:a8:14:3c:
02:d8:d3:e2:12:d1:75:7e:ee:bb:fe:95:3b:ee:09:76:a7:4f:
51:7b:d2:b3:da:8e:6b:e1:a1:62:63:9a:c4:6f:35:54:89:a7:
e0:0a:df:11:6a:d4:bf:eb:c2:af:64:3d:8f:7c:0f:90:ce:02:
99:04:f1:f4:7f:67:26:1d:04:90:da:32:71:66:b8:4d:f9:da:
e6:b1:e0:5b:cd:5b:ff:6b:ec:60:20:fb:eb:2c:fd:11:71:ea:
5f:b1:dc:01:aa:99:8c:54:49:c6:b7:29:6c:c2:86:de:27:d7:
11:38:29:d6:97:73:8c:bc:aa:af:06:14:51:ca:92:15:a0:fc:
c0:97:fc:d1:63:e1:d6:27:cb:67:79:d7:a5:57:5a:91:ae:9d:
1d:b8:05:7d:2f:6d:1c:3b:30:32:b7:d4:db:5a:43:bf:e8:c4:
9c:a1:4c:0c:bb:a8:ab:8b:c7:e1:5c:c1:13:b0:4e:0c:41:cb:
28:fa:22:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:17:43 2025 by rpki-client